This was always going to be an issue when we posted about it last week – here is more information. Log4j 2.15.0 and previously suggested mitigations may not be enough – SANS
Bruce Schneier on Log4j
This was always going to be an issue when we posted about it last week – here is more information. On the Log4j Vulnerability – Schneier on Security More Log4j News – Schneier on Security Log4j – Smart Thinking Solutions
Website security either some people just don’t get it or they cannot be bothered!
The Register discusses the findings of researcher, Scott Helme, who discovered that just under a third of websites did not have https enabled by default. HTTPS by default now accounts for 70% of websites • The Register Get a TLS/SSL certificate and enable https on any site you are responsible …
Continue reading “Website security either some people just don’t get it or they cannot be bothered!”
Minecraft vulnerable to a Zero-Day vulnerability and others are sure to follow – Log4j
A vulnerability has been discovered in a component of Minecraft, Log4j, an open-source logging tool that’s used in many online applications. Zeroday in ubiquitous Log4j tool poses a grave threat to the Internet | Ars Technica
Remember when you are shopping online there are malicious web pages out there – here is some advice
In the run up to Christmas many of us are shopping online – I know I am. It is tempting to keep following links looking for the best prices and the best price is what the internet promises us because we can shop everywhere. However the bad actors know this …
Fishing website hacked
Fishing gear seller caught in hacker’s net – BBC News Angling Direct, the UK’s biggest fishing shop has been hacked, with users being redirected to a pornography site. it was probably a phishing attack – I could not resist that.
Website security
It does not seem that long ago that Google forced a flurry of people needing SSL security certificates for their websites, when they announced they would favour secure websites in their search results – no one wanted to be left out. I even added one to my personal blog – …
