Hello all, Last week I predicted a patch-Tsunami. That was an understatement. The July Patch Tuesday was a tectonic shift that resulted in flaming lava-like vulnerabilities spewing out for nearly everything Microsoft makes. And then there’s the groundswell and tsunami…
Hello all, The biggest news this week, in my opinion, is the 250th birthday of The United States of America. Celebrations were held nationwide to honor and commemorate this momentous occasion. In addition, it is a three-day weekend for most…
Hello all, FortiBleed is still leaking electrons all over the place necessitating a monumental cleanup by organizations worldwide as they race to lock down their Fortinet firewalls before threat actors do more than just steal and harvest credentials. There were…
Hello all, Last weekend a LinkedIn post alerted the world to a database of Fortinet credentials on the internet. This week it exploded into a major issue now named FortiBleed. More on that in a moment. CISA issued orders that…
Hello all, This week has brought a patchacopalipse with a surprisingly large number of vendors releasing critical or high severity patches to plug holes and defects. Microsoft was one of the top gift-givers with 200 or more patches for Patch…
Hello all, This week brought another round of fun updates from Microsoft, Adobe, SAP, and others with Patch Tuesday releases. Immediately following Microsoft’s patch releases, a hacker who I shall dub Dirtbag Eclipse, released two new zero-day exploits, one of…
Hello all, Since the month started on Wednesday, it has seemed like a long time since there was a major release of patches and updates. Never fear, your wait is over! Adobe, Apache, Cisco, Microsoft, PHP, SAP, Splunk and…
Hello all, Last week I’d noted that I was surprised that there had been no evident cyber-retaliatory attacks by Iranian threat actors. Welp, on Wednesday a threat group named Handala claimed a successful attack on Stryker, a USA based global…
Hello all, This week was somewhat light with almost no pants-of-fire alerts. There was one that needs quick attention, a Google Chrome zero-day that’s under active attack, and there were several CISA alerts that should be prioritized due to ongoing…
Hello all, Just like with a successful cyber-attack, the recovery time for my physical illness has been slow going. At first there seemed to be hope that there would be immediate recovery, but unfortunately the threat actor virus has been…
Hello all, With most of the nation now firmly embraced in Winter’s ferocious icy grip, including longtime bastion of warmth, Florida, now engulfed in frigid air, it is a good time to find a toasty place to sit back and…
Hello all, This week’s headliners have a threepeat from Cisco and Fortinet. For three weeks in a row, they’ve managed to top the list of actively exploited items needing fixes. Way to go? And there’s lots more from plenty of…