fbpx
Clive's Cyber News

Clive’s weekly Cyber Security roundup – 29 April 2022

There have been two advisories put out by the Five Eyes group of cyber security organisations this week – both of which we have covered. I have also updated the pinned post that deals with the advice and information being issued about the cyber-attack issues because of the Ukraine Russia conflict. I have an article due out this Sunday that looks at the wider impact and issues of the conflict and how they are contained for the moment but the risk is there that they may spread.

Prevention is better than cure, so please get your cyber-security house in order – at the very least have a back-up that will protect your information and operations.

Advice from the National Cyber Security Centre and the UK Government – actions to take when the cybersecurity risk is high (Russia Ukraine Conflict) – UPDATED 28 April 2022

As Monday is a Bank Holiday here in England, I have an article about AI ready for publication then – it includes links to some BBC radio programmes about the subject. Talking of AI, this week’s “Because It’s Friday” features a Dilbert take on Artificial Intelligence.

This is a weekly round-up of the articles from Smart Thinking Solutions, our specialist cybersecurity, governance and compliance web site.

The articles are mostly quick reads to give you an overview of the cybersecurity threat landscape facing businesses today, with links to the sources. Many of the posts have action points or top tips to help you navigate these threats to your organisations.

Sometimes they are just there to make you smile!

Clive Catton MSc (Cyber Security) by-line and other articles


Because It’s Friday – an ethical dilemma
CISA updates to be aware for Cisco devices and Google Chrome
Redline information stealer malware targets Internet Explorer
Malware in the wild – Emotet
CISA updates the destructive/wiper malware advisory
Linux vulnerability – Nimbuspwn UPDATED 28 April 2022
A new twist on cyber extortion – fake reviews
Microsoft report on the Ukraine Russia cyber-conflict
Zero-Days are back in the news
Joint advisory on the top exploits
Hive is the most active ransomware gang at the moment – and ransomware attacks are on the increase
VMware make sure you have it patched
Coca-Cola data breach – and the data is on sale for $64,000
I really like this – more transparency in the Google Play Store and the way apps will use your personal information
India Tech links with the EU and the UK
Lapsus$ hits T-Mobile
Exchange servers at risk and being exploited right now
Ever Surf closes the door before the horse bolted
Big Tech – should there be limits? UPDATED 26 April 2022
Hacked! Do you use Mailchimp? We do. UPDATED 26 4 2022
Theft via Instagram – just promise something “to good to be true”
CISA adds several Windows vulnerabilities to the ” Known Exploited Vulnerabilities Catalogue”
Bug bounties are a vendor’s shortcut to software vulnerabilities – UPDATED 26 April 2022
Word of the day = Smishing
Zero-day security vulnerabilities exploited in 2021 – UPDATED 25 4 2022
Anatomy of a phishing email attachment – this is why we are always running training
National Cyber Security Centre Threat Report 22 April 2022
No. 10 spyware – Follow Up
Actors against AI
When you improve your defences – the hackers change their tactics
Java vulnerabilities to look out for – Spring4Shell – UPDATE 23 April 2022
Why you need to look at your cybersecurity risks and mitigations
BlackCat ransomware tracked to at least 60 victims
CISA issues advisories on Drupal and Cisco products
Are you one of the 15,000 organisations using Okta? UPDATED 22 April 2022
Over at Octagon this week
AWS and Log4j – patches break security
Yes people do track a top ten for malware. Do you want to know what the #1 is?
Cyber Civil Defence
Do you have a Lenovo laptop? If so then this post is for you.
Because It’s Friday – 32 years of the Hubble Space Telescope and the Apollo 11 Moon landing