Latest Microsoft Patch -How Important is it?

The Microsoft Security Response Center just released the following Microsoft Mitigates Outlook Elevation of Privilege Vulnerability Microsoft has developed a script to see if you are already infected by hackers:  https://microsoft.github.io/CSS-Exchange/Security/CVE-2023-23397/ The script can run on Exchange server or on Azure based mailboxes(AzureEnvironmentName, AzureADEndpoint, EWSOnlineURL, and EWSOnlineScope can be left as default). This is a … Read more

Will Attackers Use AI to Attack Us?

Short answer to this question is Yes!  Bruce Schneier(a fellow at the Berkman center for Internet and Society at Harvard University) said this in his paper of April 2021: The Coming of AI Hackers “One, AI systems will be used to hack us. And two, AI systems will themselves become hackers: finding vulnerabilities in all … Read more

AI Used in Phishing attacks: BEC Business Email Compromise

What  do you read when you read the following: “BEC groups launch executive impersonation attacks in at least 13 languages” Specifically this is interesting: “These attacks demonstrate that BEC is a global issue and not just an English-only phenomenon,” said Crane Hassold, director of threat intelligence at Abnormal Security. “Our findings also show how cybercriminals … Read more

During War are we getting Attacked More?

I am talking about the Russian war against Ukraine which started on Feb 2022. Do you have 80 computes, more than a dozen? Then it should be obvious that they all need to be standardized and if standardized and wrong they will all get hacked. So paying attention to details in your environment pays dividends. … Read more

Hacked? Got insurance? No Payout!!

SCMagazine story on January 3rd. makes you think about the efficacy of cyber insurance. The problem is the government fines and some of the details in the contract language: “The attorneys general of Utah and Oregon reached a $200,000 settlement with Avalon Health, which also requires the provider to develop and implement practices that aim … Read more