Hello all, This past week in cybersecurity felt like the universe reminding us that “patch fatigue” is not a valid lifestyle choice. Cisco, Citrix and Fortinet delivered fresh zero‑day drama, with attackers treating exposed appliances like an all‑you‑can‑eat buffet. Authorities nabbed the teenage operator behind KillSec, proving yet again that some…
Hello all, This week delivered another grab‑bag of zero‑days, supply‑chain surprises, and “why is that even vulnerable?” moments across routers, enterprise platforms, AI agents, and the usual parade of web apps. Attackers stayed busy targeting anything that runs code, automates workflows, or sits exposed on the edge. If you felt like…
Hello all, This past week, apart from the massive Oracle patch release, was mostly about Microsoft fixing things that they broke with their Patch Tuesday updates, and with AI news and commentary increasing in volume like a mushroom – which is to be expected when executives from various AI companies were…
Hello all, Wow, it has been an amazing week in cybersecurity news! Microsoft tops the charts with nearly 1000 vulnerabilities patched in a single month. AI appears to be going off the rails and people in the know in the upper ranks of companies are getting scared. There was a huge…
Hello all, Evil seems to never sleep, and with the assistance of AI, vulnerabilities and exploits are popping up faster than mushrooms after the autumn rains. This week brings a few critical items to prioritize. N-able’s N-central continues to be under attack and a new vulnerability dropped on Saturday this week…
I’ve worked a lot of incident response cases, and one question that almost always comes up is, “How long will this take?” Or the client has an expectation that they’ll be up and running in a few hours. Unless they have parallel, unaffected infrastructure, or have the ability to snapshot the…
Hello all, Three headline news items merit immediate attention if you have any of the products under your care; more on that in a moment. There is a lot of good news about takedowns and arrests, and unfortunately some serious news about an exfiltrating ransomware attack on the US Department of…
Hello all, The week started out with the normal level of chaos, plotting, exploitation, threats, and mayhem in Pandemonium (kingdom of demons), and then Oracle unleashed their second monthly vulnerability notices and things got a bit more exciting. Mind you, you can’t get Oracle patches without a subscription, but they announced…
Hello all, As expected, Patch Tuesday was quite large. Microsoft recently warned that for the foreseeable future the amount of patches, and potentially even the frequency of patch releases, would be significantly higher, and they weren’t kidding. This month brought roughly 400 patches across most everything they offer. Not to be…
Hello all, My vacation ends this weekend. It has been nice to unplug to some degree, but as you’ve noticed, I always keep the shields up and stay abreast of cyber-happenings. There were a few important ones this past week, so let’s get to them. Headline NEWS: In Ransomware, Malware, and…
Hello all, For the past week, the only time I’ve used my electronic work-related tools has been to peruse news reports for inclusion into this report, to curate the links, and to write this summary. That’s not to say that it has been a dearth of technology, I’ll write about that…
Hello all, For the next two weeks, I am on vacation, or holiday as it is known on the right-side of the pond. I’m still dutifully scouring the internet for pertinent news and information, but my commentaries will be a bit more limited than usual so that I may unplug to…