Security
IT admins were left scrambling to detect if they had been hit by an unknown virus on Friday 13, after Windows applications vanished from the Start menu and taskbar on computers globally following what appears to have been a botched Windows Defender rule triggering chaos for thousands of users globally.
Thoughts from CISOs and business leaders...
National Crime Agency investigating as well as NCSC
It’s that time of the month again: Microsoft has pushed out 98 security patches for January’s Patch Tuesday: 11 are critical, one CVE-2023-21674 is being actively exploited and another gives unauthenticated remote access to your SharePoint Server – and requires not just the patch but a “SharePoint upgrade action”
Analysis by The Stack of over 90,000 vulnerabilities revealed a sharp growth in bugs associated with widely known “CWEs” – or potentially exploitable weaknesses that can occur in architecture, design, code, or implementation and which could potentially have been caught upstream in a secure development process. One control is to
Can you guess the product with the most CVEs in 2022?
Updated January 6, 11:00 BST: CircleCI has updated its advisory which deserves revisiting. CircleCI is calling on customers to “immediately rotate any and all secrets” after a security incident. The breach appears to have occurred around December 21 and to have gone unnoticed over the Christmas period. Credentials stolen
Now was not the time...