The US Government, Cybersecurity and Infrastructure Security Agency (CISA) has added several new Microsoft Windows, vulnerabilities to it’s database. These all need patches – so again it is a good time to check that your “auto-updating” is working or time to get an Octagon IT monitoring package and let experts monitor the …
CISA statement on mitigating MFA and “PrintNightmare” exploits UPDATED 17 March 2022
This article was first posted on 16 March 2022 Here is some good cyber security advice from the United States Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) regarding increased cyber threat activity from the Russia Ukraine conflict. “PrintNightmare” is an escalation of an MFA …
More bad news for Nvidia – and advice for them (and you) on risk and mitigation – updated
This post was originally published on 5 March 2022 In the among the data recently stolen from Nvidia, a certificate has been found that can be used to sign malware aimed at Windows machines. What this means is the software will be exploiting the built in “trust” that Microsoft and …
Windows Cloud Clipboard – Firefox fixes password leak
Mozilla has fixed a password leak from its Firefox browser associated with the Windows Cloud Clipboard. Firefox fixes password leak via Windows Cloud Clipboard feature – The Record by Recorded Future What is the Windows Cloud Clipboard? What’s new in Windows 10, version 1809 – What’s new in Windows | …
Continue reading “Windows Cloud Clipboard – Firefox fixes password leak”
Why “just anti-virus” is not the whole solution
Obfuscated backdoor attack: Simple but Undetected PowerShell Backdoor – SANS This is a more complex read but if you are in the business it is a real help to see how these old school attacks still work.