Atlassian announces 0-day hole in Confluence Server – update now!
Credit to Author: Paul Ducklin| Date: Fri, 03 Jun 2022 18:59:18 +0000
Zero-day announced – here’s what you need to know
Read moreMonth: June 2022
Announcing 2022 Microsoft Security Excellence Awards winners
Credit to Author: Emma Jones| Date: Mon, 06 Jun 2022 15:00:00 +0000
Winners of the Microsoft Security Excellence Awards were announced as Microsoft executives and MISA members gathered for the first time in more than two years.
The post Announcing 2022 Microsoft Security Excellence Awards winners appeared first on Microsoft Security Blog.
Read moreWWDC22: Apple brings declarative device management to the Mac?
Credit to Author: Jonny Evans| Date: Mon, 06 Jun 2022 08:11:00 -0700
More opportunities for engineers and developers to implement declarative device management solutions are likely to emerge at WWDC 2022, at least, according to MacAdmins.
Speaking during the pre-event podcast, speakers argue that Apple will eventually require that all mobile device management (MDM) providers introduce support for declarative management. Might this include bringing declarative device management to the Mac?
What is declarative device management?
Apple first introduced declarative device management last year, largely for two reasons: to make devices more proactive, and to reduce the impact on MDM servers that handle large fleets of devices. This should boost performance and scalability.
Why It’s Time to Map the Digital Attack Surface
Credit to Author: Bharat Mistry| Date: Mon, 06 Jun 2022 00:00:00 +0000
Trend Micro research reveals struggle to control cyber risks against mounting digital attack surfaces.
Read moreAlphaBay Is Taking Over the Dark Web—Again
Credit to Author: Andy Greenberg| Date: Mon, 06 Jun 2022 13:46:02 +0000
Five years after it was torn offline, the resurrected dark web marketplace is clawing its way back to the top of the online underworld.
Read moreAfter a Windows update, what should you expect?
Credit to Author: Susan Bradley| Date: Mon, 06 Jun 2022 05:17:00 -0700
Let’s get this straight: It’s not normal for a Windows update to remove software. It’s designed to install the update, not change software already in place on your system.
At least, updates are not supposed to remove software. Since March, however, if you run the RDgateway broker service on Server 2022 (and only that version), the monthly cumulative updates have removed that service. This behavior is not normal; this is a bug.
As Microsoft notes in the Microsoft 365 Admin dashboard: “We have received reports that after installing KB5005575 or later updates on Windows Server 2022 Standard Edition, Remote Desktop Services Connection Broker role and supporting services might be removed unexpectedly. We have expedited investigation and are working on a resolution. Note: Windows Server 2022 Datacenter edition and other versions of Windows Server are not affected by this issue.”
A week in security (May 30 – June 5)
Credit to Author: Malwarebytes Labs| Date: Mon, 06 Jun 2022 11:50:23 +0000
Posts from the last week on Malwarebytes Labs describing all the latest news, exploits, scams, and more.
The post A week in security (May 30 – June 5) appeared first on Malwarebytes Labs.
Read moreClosing the Door: DeadBolt Ransomware Locks Out Vendors With Multitiered Extortion Scheme
In this report, we investigate the reasons that the DeadBolt ransomware family is more problematic for its victims than other ransomware families that previously targeted NAS devices.
Tor’s (security) role in the future of the Internet, with Alec Muffett
Credit to Author: Malwarebytes Labs| Date: Mon, 06 Jun 2022 05:51:33 +0000
This week on Lock and Code, we talk about the often-undiscussed security benefits of Tor networking, also called onion networking.
The post Tor’s (security) role in the future of the Internet, with Alec Muffett appeared first on Malwarebytes Labs.
Read moreThe Hacker Gold Rush That’s Poised to Eclipse Ransomware
Credit to Author: Lily Hay Newman| Date: Sun, 05 Jun 2022 11:00:00 +0000
As governments crack down on ransomware, cybercriminals may soon shift to business email compromise—already the world’s most profitable type of scam.
Read more