The US Government, Cybersecurity and Infrastructure Security Agency (CISA) has added several new Microsoft Windows, vulnerabilities to it’s database. These all need patches – so again it is a good time to check that your “auto-updating” is working or time to get an Octagon IT monitoring package and let experts monitor the …
Zero-day security vulnerabilities exploited in 2021 – UPDATED 25 4 2022
This post was first made on 22 April 2022 I regularly write about the issues around the zero-day vulnerability and our Social Engineering and Email Cyber Security Training course aims to equip individuals and organisations to meet the challenge that the zero-day poses. Google’s Project Zero has reported on it’s …
Continue reading “Zero-day security vulnerabilities exploited in 2021 – UPDATED 25 4 2022”
Java vulnerabilities to look out for – Spring4Shell – UPDATE 23 April 2022
This story was first published on 31 March 2022 and Updated on 5 April 2022 Update 26 April 2022 There has been a steady increase in the number of active attacks against this and related vulnerabilities: Hackers hammer SpringShell vulnerability in attempt to install cryptominers | Ars Technica This is …
Continue reading “Java vulnerabilities to look out for – Spring4Shell – UPDATE 23 April 2022”
CISA issues advisories on Drupal and Cisco products
If you use these products then the details of the issues and updates are here: Drupal Releases Security Updates | CISA Cisco Releases Security Updates for Multiple Products | CISA
Oracle Patches
If you have anything from software provider Oracle – then it is time to get patching. Oracle Critical Patch Update Advisory – April 2022 Time to get patching: Oracle’s quarterly Critical Patch Update arrives with 520 fixes | ZDNet Oracle Releases April 2022 Critical Patch Update | CISA Oracle Java …