Hello all, The week started out with the normal level of chaos, plotting, exploitation, threats, and mayhem in Pandemonium (kingdom of demons), and then Oracle unleashed their second monthly vulnerability notices and things got a bit more exciting. Mind you, you can’t get Oracle patches without a subscription, but they announced…
Hello all, As expected, Patch Tuesday was quite large. Microsoft recently warned that for the foreseeable future the amount of patches, and potentially even the frequency of patch releases, would be significantly higher, and they weren’t kidding. This month brought roughly 400 patches across most everything they offer. Not to be…
Hello all, My vacation ends this weekend. It has been nice to unplug to some degree, but as you’ve noticed, I always keep the shields up and stay abreast of cyber-happenings. There were a few important ones this past week, so let’s get to them. Headline NEWS: In Ransomware, Malware, and…
Hello all, For the past week, the only time I’ve used my electronic work-related tools has been to peruse news reports for inclusion into this report, to curate the links, and to write this summary. That’s not to say that it has been a dearth of technology, I’ll write about that…
Hello all, For the next two weeks, I am on vacation, or holiday as it is known on the right-side of the pond. I’m still dutifully scouring the internet for pertinent news and information, but my commentaries will be a bit more limited than usual so that I may unplug to…
Hello all, Last week I predicted a patch-Tsunami. That was an understatement. The July Patch Tuesday was a tectonic shift that resulted in flaming lava-like vulnerabilities spewing out for nearly everything Microsoft makes. And then there’s the groundswell and tsunami of other vendors releasing patches for flaws and defects at the…
Hello all, This week was thankfully somewhat quiet, with the normal level of vulnerabilities. Next week is Patch Tuesday, so expect an incoming tsunami of things to prioritize. Now that’s not to say that this week didn’t have any notable items, there definitely were, such as our headline items from Palo…
Hello all, The biggest news this week, in my opinion, is the 250th birthday of The United States of America. Celebrations were held nationwide to honor and commemorate this momentous occasion. In addition, it is a three-day weekend for most Americans, so hopefully your defenses were ready since threat actors love…
Hello all, FortiBleed is still leaking electrons all over the place necessitating a monumental cleanup by organizations worldwide as they race to lock down their Fortinet firewalls before threat actors do more than just steal and harvest credentials. There were several excellent takedowns by Operation Endgame and some other good news…
Hello all, Last weekend a LinkedIn post alerted the world to a database of Fortinet credentials on the internet. This week it exploded into a major issue now named FortiBleed. More on that in a moment. CISA issued orders that several products needed to be patched by Sunday June 21, 2026.…
Hello all, This week has brought a patchacopalipse with a surprisingly large number of vendors releasing critical or high severity patches to plug holes and defects. Microsoft was one of the top gift-givers with 200 or more patches for Patch Tuesday, 3 of which are classified as zero-days. I’ll round them…
Hello all, Microsoft held their Build 2026 conference this week, and there were all sorts of announcements, many revolving around Artificial Intelligence of course, with a few other interesting and surprising items such as a new category of wearable items debuting, a new Majorana Quantum chip, and a new Windows command…