Cyber insurance is becoming more necessary due to the rising costs of a breach. But it is also getting more difficult and expensive to obtain. This Insight looks at the reasons why and what a company can do to help lower cyber insurance costs.
The recently released patches from Microsoft addressed almost 80 vulnerabilities. Four are Zero-Days that are quite serious. Two allow attackers to bypass Windows security. Another permits attackers to increase their privileges to system-level and the last Zero-Day undoes recent updates that patched other vulnerabilities. Be sure to patch the first two as soon as possible and the other Zero-Days soon after. Then prioritize the remaining patches based upon the affected systems and your use of that software.
WordPress is a widely used platform for creating and deploying web content. Its broad acceptance makes it a popular target for hackers. To counter that WordPress is now requiring two-factor authentication to help keep information safer.
Selenium grid is an open source platform for doing parallel testing of web applications on multiple platforms and browsers. It is said to be used in 30% of cloud environments meaning the compromise of it will affect many companies. It is supposed to be an internal testing tool but over 30,000 servers are publicly reachable making them vulnerable.
Oracle’s WebLogic servers are a widely used platform for developing and deploying applications. Now it is being used by attackers to deploy malware on users.
Scams are very effective ways to steal your information and compromise your accounts. There are many variations but most fall into a few categories. This Insight gives descriptions to help you recognize them and stay safer.
A recently discovered flaw in Apache’s ERP system that could lead to remote code execution has been patched. Install the patch as soon as possible as the vulnerability is serious.
Virtual Private Networks, VPN, are used to provide extra security when connecting to a network. Sadly, attackers have found a way to fool the search engines and prioritize their own sites that masquerade as legitimate resells of Palo Alto’s VPN.
Windows Recall was a “feature” Microsoft added to their AI system to record everything you do on your device. This was viewed as major security nightmare by cybersecurity professionals. Microsoft said Recall could be disabled. Now they say the option to uninstall it was itself a bug.
An example of how easy it is to fool people even employees of a major firm. The way it was done, even fooled the search engines enough to allow the postings. Be very careful when clicking a link, any link.