Microsoft has released today its monthly batch of security updates, known as Patch Tuesday. This month, the OS maker has fixed 56 security vulnerabilities, including a Windows bug that was being exploited in the wild before today’s patches.
“See who’s tracking your email” What if we tell you that all our emails are being tracked and our information is being collected. Yes, it is high time we take security seriously and understand the gravity of the scenario. SPY PIXELS: To start with, let us first understand what spy pixels are. Spy pixels which are also known as tracking pixels or web beacons. They are invisible and tiny image files( .PNGs and .GIFs) which are inserted in the content body of an email. They may appear as clear, white…
“STAY UPDATED” CVE Updates for the month of January 2021: Microsoft fixes 83 security bugs in the January 2021 Patch Tuesday releases. For the month of January, Microsoft has patched a total of 83 vulnerabilities across a wide range of products, including Apple, CISCO, Adobe, Chrome, Mozilla, Microsoft checkpoint, Redhat and also Windows operating system, cloud-based products, developer tools, and enterprise servers. But of all the bugs patched, the most important one is a zero-day vulnerability in the Microsoft Defender antivirus, which Microsoft said was exploited before the patches were…
No organization is 100% secure – ever! As FireEye continued to investigate and identify the root cause of their security incident, they identified a global campaign that introduced a compromise into the networks of public and private organisations through the software supply chain. FireEye identified that this compromise was delivered through a widely used IT infrastructure management and remote monitoring software – SolarWinds. Although FireEye hasn’t attributed this attack to any particular group, based on several media reports, it is believed that this attack was carried out by a nation-state…
No organization is 100% secure – ever! FireEye is one of the world’s renowned cybersecurity firms with customers including major government agencies and enterprise customers around the world. The company is known for its world-class research on state-sponsored threat actors and its incident response capabilities. On 8th December 2020, FireEye CEO Kevin Mandia said in a public statement that they were recently attacked by a highly sophisticated threat actor. “This attack is different from the tens of thousands of incidents we have responded to throughout the years. The attackers tailored…
“STAY UPDATED” CVE Updates for the month of December 2020: Microsoft released today its monthly roll-up of security patches known as Patch Tuesday. This month they fixed 58 security bugs for around 10+ products. More than a third of the total 58 patches are remote code execution vulnerabilities and the total number of patches are less when compared to November releases. Continuous vulnerability management and cyber hygiene can fend off the majority of cyber-attacks. Stay secure by updating patches and fix your vulnerabilities before they take over your system. Remote…
“A Cyber Gun to the Head” The Red Devils were attacked and it is believed that the cyber criminals are holding them to ransom for millions of pounds after hacking into their system. Manchester United released a statement late on Friday, 20 Nov of an attack on their IT systems that took place that very evening. The attack was identified and shut down by the cyber defences set up by the club’s IT team. It’s rumoured to be a ransomware attack for which the club has neither agreed or denied…
“STAY UPDATED” CVE Updates for the month of November 2020: Microsoft released today its monthly roll-up of security patches known as Patch Tuesday. This month they fixed 58 security bugs across a wide range of products, from Microsoft Edge to the Windows WalletService. This month’s patches also include a fix for a Windows zero-day vulnerability that was exploited in the wild. Continuous vulnerability management and cyber hygiene can fend off the majority of cyber-attacks. Stay secure by updating patches and fix your vulnerabilities before they take over your system. Remote…
As CORONAVIRUS tore through the world, the cyber attacks have also increased considerably causing damage and loss of data to a lot of organisations. The National Security Agency has come up with a set of vulnerabilities targeted by the chinese hackers by the name APT41 to steal intellectual property, economic, political, and military information. Even though the Chinese Hackers are targeting the organisations for information and data, the NSA have said that it is possible for organisations to safeguard their data and not fall victim to these attacks. According to…
Data is the most important thing when it comes to cybersecurity. To protect one’s data, we should be aware of who has access to the data, only the authorized person with defined permissions should be able to access the data. IAM verifies and manages different permissions for different employees according to their role in the organization.