Hello all, It was a busy news week with a nice smattering of good news of indictments and takedowns of threat actors and their infrastructure. Pwn2Own Berlin concluded with 29 zero-days being utilized. Some have already been patched, others are now under a 90-day clock for vendors to patch before the…
Hello all, Along with the usual Microsoft Patch Tuesday scramble, this week brought an explosion of updates and vulnerability reveals from a lot of other vendors and products, ranging from ASUS to VMware – almost to Z. Headline NEWS: In Ransomware, Malware, and Vulnerabilities News: In Other News Events of Note…
Hello all, After a slow start to the week, we closed it out with a few very serious vulnerabilities made public by Cisco, SonicWall, and Ubiquiti. This coming week is Patch Tuesday and if historic numbers are a valid guide, I expect about 40 items to be patched by Microsoft, and…
Hello all, Last week was “World Password Week”. However, this year many tech giants chose, to replace “password” with “passkey”. In fact, on what was World Password Day, Microsoft announced that all new Microsoft accounts will now be passwordless, use passkeys by default, and existing accounts will be transitioned as quickly…
Hello all, Surprisingly, it was a quiet week as far as major vulnerabilities and reveals are concerned. I suspect that the juicy stuff is being held back so that it can be revealed at the RSA conference that starts on Monday. It doesn’t take Walter Radar O’Reilly to know that we’ve…
Hello all, I was expecting a quieter week, but I was surprised by how many serious vulnerabilities were revealed, and about the drama surrounding MITRE and their CVE contract, spawning at least two new numbering authority prospects in response. I sincerely hope that these players will cooperate, otherwise a trifurcation of…
Hello all, This past week was Patch Tuesday for Microsoft and several other vendors. Apparently feeling that it should be Patch Week instead of just one day, Juniper and VMware chose different days to unleash required fixes. There’s lots of other items to talk about as well, so let’s get to…
Below are links to items presented. State Sponsored Breaches and Embedding: Phishing, Spear-Phishing, Whaling, Vishing, Quishing, and Smishing Password Hacking, Account Takeovers and MFA bypass: AI, Voice-cloning, Deepfakes, and Vulnerabilities Supply…
Hello all, Apache had a bad week with two vulnerabilities, the first in Parquet, and the second in Tomcat. Ivanti has another zero-day, Apple updated a lot of items, CrushFTP has some drama going on, and Microsoft celebrated 50 years. Of course there are plenty of other things to talk about,…
Red-Cut, the ultimate in cyber security. Nothing get's past Red-Cut, Red-Cut Datacenter or Red-Stop!
(For a video version of my introductory comments, click here.) Hello all, This has been an interesting week with the variety of severe vulnerabilities reported, and the types and numbers of breached or compromised organizations, some of which are massive. Headline NEWS: In Ransomware, Malware, and Vulnerabilities News: In Other News…
(For a video version of the introduction below, click here) Hello all, Unlike last week’s patch-release frenzy, things dropped back to our normal harried pace this week. We did receive warnings about some pretty nasty defects from the likes of IBM, Synology, TP-Link, Veeam, and WhatsApp, just to name a few.…