Hello all, Evil seems to never sleep, and with the assistance of AI, vulnerabilities and exploits are popping up faster than mushrooms after the autumn rains. This week brings a few critical items to prioritize. N-able’s N-central continues to be under attack and a new vulnerability dropped on Saturday this week…
I’ve worked a lot of incident response cases, and one question that almost always comes up is, “How long will this take?” Or the client has an expectation that they’ll be up and running in a few hours. Unless they have parallel, unaffected infrastructure, or have the ability to snapshot the…
Hello all, Three headline news items merit immediate attention if you have any of the products under your care; more on that in a moment. There is a lot of good news about takedowns and arrests, and unfortunately some serious news about an exfiltrating ransomware attack on the US Department of…
Hello all, The week started out with the normal level of chaos, plotting, exploitation, threats, and mayhem in Pandemonium (kingdom of demons), and then Oracle unleashed their second monthly vulnerability notices and things got a bit more exciting. Mind you, you can’t get Oracle patches without a subscription, but they announced…
Hello all, As expected, Patch Tuesday was quite large. Microsoft recently warned that for the foreseeable future the amount of patches, and potentially even the frequency of patch releases, would be significantly higher, and they weren’t kidding. This month brought roughly 400 patches across most everything they offer. Not to be…
Hello all, My vacation ends this weekend. It has been nice to unplug to some degree, but as you’ve noticed, I always keep the shields up and stay abreast of cyber-happenings. There were a few important ones this past week, so let’s get to them. Headline NEWS: In Ransomware, Malware, and…
Hello all, For the past week, the only time I’ve used my electronic work-related tools has been to peruse news reports for inclusion into this report, to curate the links, and to write this summary. That’s not to say that it has been a dearth of technology, I’ll write about that…
Hello all, For the next two weeks, I am on vacation, or holiday as it is known on the right-side of the pond. I’m still dutifully scouring the internet for pertinent news and information, but my commentaries will be a bit more limited than usual so that I may unplug to…
Hello all, Last week I predicted a patch-Tsunami. That was an understatement. The July Patch Tuesday was a tectonic shift that resulted in flaming lava-like vulnerabilities spewing out for nearly everything Microsoft makes. And then there’s the groundswell and tsunami of other vendors releasing patches for flaws and defects at the…
Hello all, This week was thankfully somewhat quiet, with the normal level of vulnerabilities. Next week is Patch Tuesday, so expect an incoming tsunami of things to prioritize. Now that’s not to say that this week didn’t have any notable items, there definitely were, such as our headline items from Palo…
Hello all, The biggest news this week, in my opinion, is the 250th birthday of The United States of America. Celebrations were held nationwide to honor and commemorate this momentous occasion. In addition, it is a three-day weekend for most Americans, so hopefully your defenses were ready since threat actors love…
Hello all, FortiBleed is still leaking electrons all over the place necessitating a monumental cleanup by organizations worldwide as they race to lock down their Fortinet firewalls before threat actors do more than just steal and harvest credentials. There were several excellent takedowns by Operation Endgame and some other good news…