Microsoft stacks up 113 CVEs for January Patch Tuesday
Categories: X-ops
Tags: Patch Tuesday, Microsoft, Windows
Similar Posts
NZ: High Court grants injunction over ManageMyHealth cyber breach
Bys sA New Zealand health-related entity has obtained a high court injunction prohibiting the sharing of any data stolen from Manage My Health, a patient portal that allows individuals to request prescription refills, download their medical records, arrange for medical services, and make appointments for video (telehealth) consultations. Will the injunction do any good? Probably not……
Sentara Health terminates remote employees after realizing they couldn’t be sure who was doing the work.
Bys sHiring employees who work remotely can pose additional challenges for security and compliance with regulations. In March, Sentara Health disclosed an incident concern that resulted in the notification of 1,620 patients. They described the concern this way: In December, the Sentara Health’s Lab Services department hired an individual to process lab requisitions. Lab requisitions are…
Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility
Bys sTwo now-patched security flaws impacting Cisco Smart Licensing Utility are seeing active exploitation attempts, according to SANS Internet Storm Center. The two critical-rated vulnerabilities in question are listed below – CVE-2024-20439 (CVSS score: 9.8) – The presence of an undocumented static user credential for an administrative account that an attacker could exploit to log in…
Sophos MDR: New analyst response actions for Microsoft 365
Bys sPowerful new capabilities enable Sophos MDR analysts to respond to M365 attacks on your behalf.
Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access
Bys sOver 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. “Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed,” c/side researcher Himanshu Anand said in a Wednesday analysis. The malicious JavaScript code has been found to be served…
ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability
Bys sThe Australian Signals Directorate (ASD) has issued a bulletin about ongoing cyber attacks targeting unpatched Cisco IOS XE devices in the country with a previously undocumented implant known as BADCANDY. The activity, per the intelligence agency, involves the exploitation of CVE-2023-20198 (CVSS score: 10.0), a critical vulnerability that allows a remote, unauthenticated attacker to create…