As security professionals our job is to safeguard the Confidentiality, Integrity and Availability of the information and assets placed in our care. A Security Incident is anything that happens which places one or more of those aspects at risk. This usually will be as the result of a malicious act such as an attempted networkRead more
Blog
The UK National Cyber Security Centre has issued an alert warning organisation to urgently identify and patch Fortinet VPN devices on their networks. The NCSC alert warns : The NCSC is concerned that a significant number of organisations in the UK have not patched the Fortinet VPN vulnerability CVE-2018-13379. This continues to be actively exploitedRead more
The April security patch bundle from Microsoft resolves 108 vulnerabilities, 19 of them Critical and 5 are zero-day with one already under active attack. The majority of the remote code execution vulnerabilities fixed this month are in the Windows Remote Procedure Call Runtime. 27 Critical or Important vulnerabilities have been resolved in this software thatRead more
SAP has issued an urgent security report after an increase in attacks against unpatched SAP systems using a variety of attack vectors. A new report from SAP and security firm Onapsis details how criminals are targeting mission critical SAP systems which are vulnerable due to security patches not being applied in a timely manner. TheRead more
Facebook has been in the news this week over a data breach from 2019 when over half a billion user’s details were stolen from the company. What are the security implications for businesses today? In 2019 the Facebook website was scraped to steal the account information for over 500 million users – including combinations ofRead more
