Author: Rafael Silva

Written by Rafael Silva

CISA publishes guide with free cybersecurity tools, resources for incident response

CISA publishes guide with free cybersecurity tools, resources for incident response https://ift.tt/OHRhjqB CISA has published a guide containing free cybersecurity resources and services that may be valuable in incident response.  The US Cybersecurity and Infrastructure Security Agency (CISA) is responsible for monitoring, managing, and reducing risk to the country’s critical infrastructure. The federal agency is […]

Written by Rafael Silva

Top 6 critical infrastructure cyber-risks

Top 6 critical infrastructure cyber-risks https://ift.tt/kVHNEUK Critical infrastructure sectors — from communications and energy to transportation and water — are subject to risk, just like any other organization. Understanding the top risks and how to manage them is key. Before delving into the top risks, let’s clarify what cyber-risk is and how it’s properly understood […]

Written by Rafael Silva

#CloudLAPS release 1.1.0 is now GA! New features include: ✅ Client-side event logging sending to Log Analytics ✅ Portal update with additional details for audit logging ✅ Analytics and monitoring workbook Read the upgrade instructions: https://t.co/VCFwxB5Ldz

#CloudLAPS release 1.1.0 is now GA! New features include: ✅ Client-side event logging sending to Log Analytics ✅ Portal update with additional details for audit logging ✅ Analytics and monitoring workbook Read the upgrade instructions: https://t.co/VCFwxB5Ldz from NickolajA twit https://twitter.com/NickolajA/status/1494311429515657223

Written by Rafael Silva

Squirrelwaffle, Microsoft Exchange Server vulnerabilities exploited for financial fraud

Squirrelwaffle, Microsoft Exchange Server vulnerabilities exploited for financial fraud https://ift.tt/PB3DnEA The combination of Squirrelwaffle, ProxyLogon, and ProxyShell against Microsoft Exchange Servers is being used to conduct financial fraud through email hijacking.  On Tuesday, researchers from Sophos revealed a recent incident in which a Microsoft Exchange Server, which had not been patched to protect it against […]

Written by Rafael Silva

Vulnerability found in WordPress plugin with over 3 million installations

Vulnerability found in WordPress plugin with over 3 million installations https://ift.tt/Nfl5Fpg Updates have been released for UpdraftPlus, a WordPress plugin with over 3 million installations, after a vulnerability was discovered by security researcher Marc Montpas.  In a blog post, the Wordfence Threat Intelligence team explained that the vulnerability allows any logged-in user, including subscriber-level users, […]