Category: Security
Cybersecurity Threat Advisory: New VMware patches available
This week, VMware released three security patches for a critical authorization bypass vulnerability in the Workspace ONE Assist solution. The vulnerability could potentially allow remote attackers to bypass authentication and elevate their privileges within the system. The vulnerabilities are tracked as...
Hackers prey on holiday MFA fatigue
Multifactor authentication (MFA) is the gold standard in offices around the world. We all know the drill: you use your username (often, and inadvisably, your email address) and, perhaps, as the password, the name of your first dog and the...
Cybersecurity skills gap continues to widen even as ranks swell
The (ISC)2 association of cybersecurity professionals estimates there are now 4.7 million cybersecurity professionals being employed around the world, making for an 11.1 percent increase year-over-year for a total of more than 464,000 additional jobs. At the same time, (ISC)2...
The value of holiday shopping user training
Once the calendar turns to November, people begin eyeing the dwindling days until Christmas. And with that sandglass motion of the calendar comes shopping, much of it being online. Studies about shopping, work, and cybersecurity risks are not plentiful, but...
Barracuda XDR Insight: Threat severity rises during vacation months
1-in-5 cyberthreats detected between June and the end of September 2022 were higher risk, compared to just 1-in-80 in January. XDR data shows that between June and September, the top threats were successful Microsoft 365 logins from a suspicious country...
Cybersecurity Threat Advisory: ConnectWise critical security release
A critical vulnerability was discovered within the ConnectWise Recover and R1Soft Server Backup Manager. The vulnerability is described by ConnectWise as “improper neutralization of special elements in output used by a downstream component”. Successful exploitation of the vulnerability would allow...
Tech Time Warp: The biggest lesson from the Equifax data breach
As Cybersecurity Awareness Month winds down, it’s time to take a look at the final component of this year’s “See Yourself in Cyber” campaign: software updates. This year’s theme emphasizes the role of personal responsibility in protecting yourself online. Responding...
The Rise of WebAssembly
A portable binary instruction format known as WebAssembly (Wasm) for building software that runs in a memory-safe, sandboxed execution environment is about to transform how modern applications are constructed.
New report validates need for a centralized approach to education cybersecurity
The U.S. Government Accountability Office (U.S. GAO) has released a report showing that schools remain vulnerable to cyberattacks. “Kindergarten through grade 12 (K-12) schools have reported significant educational impact due to cybersecurity incidents, such as ransomware attacks. Cyberattacks can also...
Tech Time Warp: FTC Takes First Action Against Phishing
“See Yourself in Cyber” is the theme of the 2022 Cybersecurity Awareness Month, encouraging computer users to recognize their own power to detect and protect themselves from cybercrime. Few of us can say that we’ve never been tripped up by...
