Zyxel have issued critical updates for some essential cyber security devices. Check your business cybersecurity plan to see if you are impacted and if so – get the updates done. Zyxel patches critical vulnerability that can allow Firewall and VPN hijacks | Ars Technica You do not have a business …
Apple Updates – make sure they are done
SANS has a description of the various updates Apple has issued across it’s devices and operating systems. These are for vulnerabilities that are being actively exploited in the wild – so make sure the patches have been done – everywhere! Apple Patches Actively Exploited Vulnerability in macOS, iOS and iPadOS …
More patches to check – Sophos firewalls
Check your Sophos firewalls are up to date – Sophos issued patches last week for a critical vulnerability in the software. The issue is with the Webadmin and Portal user interfaces. Sophos fixes critical hijack flaw in firewall product • The Register
This is what happens when you do not run patches and updates
The Information Commissioner’s Office has issued a £98,000 penalty to Tuckers Solicitors based in London. The solicitors firm suffered a ransomware attack where confidential information including, PII and case material was lost. UK lawyer fined for not patching fast enough before attack • The Register
QNAP device vulnerability – UPDATED
This post was first published on 26 January 2022 There have been further warnings to update QNAP devices that are vulnerable to a Linux bug: QNAP warns severe Linux bug affects most of its NAS devices (bleepingcomputer.com) Today is a day of minority device vulnerabilities – here is another for …