Donna

MITRE, the company that maintains the Common Vulnerabilities and Exposures (CVE) database, was recently breached due to a vulnerability in their own VPN infrastructure. The issues used to gain access to MITRE, CVE-2023-46805 and CVE-2024-21887, were fairly well covered in the news earlier this year. They could be chained together to enable a remote attacker to take full control of Ivanti Connect Secure, a VPN server that (at the time of writing) has just over 30,000 Internet-visible deployments. Unfortunately, this wasn’t the first critical VPN vulnerability... Read more at: secmatics.com/news/vpns-cons… #mitre #cve #breach

The Cyber Safety Review Board's report on the Summer 2023 Microsoft Exchange Online intrusion: "However, by the conclusion of this review, Microsoft was still unable to demonstrate to the Board that it knew how Storm-0558 had obtained the 2016 MSA key." cisa.gov/sites/default/files… This not surprising. As we noted last year: "One of the main design goals of a secure key management system is to ensure that you have full traceability of the keys and know exactly what hardware and software components could have accessed them. Without such a system it is next to impossible to retrace all of the direct and indirect touch points at which a key could potentially have been compromised" secmatics.com/blog/losing-th… #microsoft #cybersecurity #CISA

Recent research shows that 94% of ransomware-stricken organisations report attempts to sabotage their backups, with success rates as high as 79% in some critical sectors. secmatics.com/news/sabotaged… #ransomware #backup #cybersecurity

It seems as though nobody is safe from cyberattacks. CVS Group, a leading UK veterinary service provider, found this out the hard way. Don’t wait for this to happen to your business. If you need help finding and mitigating high risk threats then we can help. secmatics.com/news/bbc-news-…

Many small businesses are struggling to build effective cybersecurity defenses. Our Cyber➾Guard service provides everything you need though a single subscription. secmatics.com/services/cyber… #cybersecurity #SmallBusiness #SMB

Attention grabbing headlines relating to the #Roku “Data Breach” seem to have spread everywhere over the last few days. It is worth looking into what actually happened though, mainly because so many organisations are at risk from exactly the same attack. secmatics.com/news/roku-5760…

A lot of people seem to be worried about the use of AI in cyberattacks. Meanwhile, state-sponsored cyber groups are busy attacking critical US infrastructure by connecting to Internet-visible PLCs with password of "1111". Don't worry about AI. Worry about this instead. epa.gov/system/files/documen… Want to know what your organisation is exposing to the Internet? secmatics.com/services/surfa…

How did Microsoft lose control of a key that secures hundreds of millions of customer accounts? secmatics.com/blog/losing-th… #cybersecurity #breach #exploit #infosec #security #microsoft #microsoft365

A brief, no-nonsense, introduction to ASM / Attack Surface Management. #CyberSecurity secmatics.com/blog/attack-su…

Why are so many vendors continuing to sell products that contain critical security vulnerabilities?#productsecurity #cybersecurity #infosec #securitybreach secmatics.com/blog/talk-abou…