Hello all, The week started out with the normal level of chaos, plotting, exploitation, threats, and mayhem in Pandemonium (kingdom of demons), and then Oracle unleashed their second monthly vulnerability notices and things got a bit more exciting. Mind you,…
Hello all, For the past week, the only time I’ve used my electronic work-related tools has been to peruse news reports for inclusion into this report, to curate the links, and to write this summary. That’s not to say that…
Hello all, Last week I predicted a patch-Tsunami. That was an understatement. The July Patch Tuesday was a tectonic shift that resulted in flaming lava-like vulnerabilities spewing out for nearly everything Microsoft makes. And then there’s the groundswell and tsunami…
Hello all, Last weekend a LinkedIn post alerted the world to a database of Fortinet credentials on the internet. This week it exploded into a major issue now named FortiBleed. More on that in a moment. CISA issued orders that…
Hello all, This week has brought a patchacopalipse with a surprisingly large number of vendors releasing critical or high severity patches to plug holes and defects. Microsoft was one of the top gift-givers with 200 or more patches for Patch…
Hello all, As usual, this week held lots of announcements of vulnerabilities, malware, breaches, new interesting things, and of course, AI advances. A few items stood out, such as Cisco hitting the headline news for the third week in a…
Hello all, Artemis II splashed down on Friday off the US Pacific coast after making a successful orbit around the moon – very cool! In the world of cyber, Anthropic’s latest AI, Claude Mythos, continues to rattle experts and tantalize…
Hello all, What a difference one week can make! Top of mind for many is the Iran conflict and the implications as it relates to cyber warfare. In a surprising first, Chairman of the Joint Chiefs of Staff, General…
Hello all, Unlike the prior week, there was a lot to report on this week, starting with a brand-new way to extract your information from wireless networks, three-year old Cisco zero-day exploit, and more. The good guys had some nice…
Hello all, Last week I excoriated Amazon for their spectacular day-long failure. This past week, Microsoft decided it was their turn and because of a self-inflicted Domain Name System (DNS) issue, major portions of their network were inaccessible. At least…
Hello all, This past Saturday I attended BSides St. Petersburg, Florida, not Russia. This is a local convention, aka ‘con’, that draws around 500 cyber security minded people together to network, learn, and hear from some of the most dedicated…
Hello all, This past week was Patch Tuesday for Microsoft and a number of other vendors, when as usual, dozens and dozens of vulnerabilities and defects were announced. The clock is now ticking for threat actors to exploit them before…