Over 200,000 MicroTik Routers Worldwide Are Under the Control of Botnet Malware https://ift.tt/7k3apAy Vulnerable routers from MikroTik have been misused to form what cybersecurity researchers have called one of the largest botnet-as-a-service cybercrime operations seen in recent years. According to a new piece of research published by Avast, a cryptocurrency mining campaign leveraging the new-disrupted […]
Corrupted open-source software enters the Russian battlefield https://ift.tt/FwnBsK3 It started as an innocent protest. Npm, JavaScript’s package manager maintainer RIAEvangelist, Brandon Nozaki Miller, wrote and published an open-code npm source-code package called peacenotwar. It did little except add a protest message against Russia’s invasion of Ukraine. But then, it took a darker turn: It began […]
Microsoft Security Compliance Toolkit 1.0 (contains also Windows Policy Analyzer) https://ift.tt/Iqjh9GJ [German]Microsoft has released the Microsoft Security Compliance Toolkit 1.0 in Nov. 2021. This week I was asked if the Windows Policy Analyzer – a utility for analyzing and comparing Group Policy Objects (GPOs) – which has been available since 2016, is now being phased […]
Find Azure AD and MSOnline cmdlets in Microsoft Graph PowerShell https://ift.tt/Y4gOzMy Use this map of the Azure AD PowerShell and MSOnline cmdlets to find their Microsoft Graph PowerShell equivalents. via Microsoft March 17, 2022 at 11:58PM msewaweru
Microsoft Sets New Deprecation Schedule for Azure AD PowerShell https://ift.tt/5rhtLyj What You Need to Do Before Azure AD and MSOL Modules Retire Microsoft has recently been beating the drum about the retirement of the Azure AD PowerShell module and its older Microsoft Online Services (MSOL) counterpart. On March 3, the Azure AD team posted in […]
Why Azure AD Backup is Needed https://ift.tt/psQcGXr In the old days, everyone was doing backups. At least that’s what we all said; there were lots of horror stories about people who didn’t back up important data, or who did backups but neglected to test their restores. The emergence of the cloud promised we wouldn’t have […]
CISA Adds 15 Known Exploited Vulnerability to Catalog https://ift.tt/BsKupCq Original release date: March 15, 2022 | Last revised: March 16, 2022 CISA has added 15 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent […]
Updated: Kubernetes Hardening Guide https://ift.tt/2KrcxLg Original release date: March 15, 2022 The National Security Agency (NSA) and CISA have updated their joint Cybersecurity Technical Report (CTR): Kubernetes Hardening Guide, originally released in August 2021, based on valuable feedback and inputs from the cybersecurity community. Kubernetes is an open-source system that automates deployment, scaling, and management […]
Stolen Nvidia certificates used to sign malware—here’s what to do https://ift.tt/rifB6Ny As we wrote on March 3, 2022 Nvidia, was recently attacked by the LAPSUS$ ransomware group. The ensuing data leak included two of NVIDIA’s code signing certificates. Those certificates are now being used to sign malware. Leaked signing certificates from major vendors like Nvidia […]
VMware OS Optimization Tool (OSOT) to optimize desktop and server OS https://ift.tt/zWaVJ7j Not sure if you’re aware of this little VMware utility called VMware OS Optimization Tool that can be used to optimize Windows Operating systems that are on-prem or in the cloud. While it has been designed for VMware Horizon, it’s applicable in general […]
Stack IT News 