It’s been an unusual few weeks. Since the massive Sunburst supply chain compromise attacks which exploited a backdoor in organisations’ SolarWinds Orion network management software, my team’s day-to-day activities have changed: we’ve spent a lot of time doing vulnerability and compromise assessments for companies alongside our usual work of remediating actual breaches and cyber incidents.  […]

Finland has established a national organisation to appraise domestic communications network security concerns and evaluate vulnerabilities to attacks from the cyber domain. The Network Security Advisory Board (NSAB) will engage with state agencies, corporations and municipalities as a national resource for those that require external expertise to improve network security and bolster defences against cyber threats. It will […]

As has long been anticipated, US president Joe Biden has today (15 April) signed an executive order imposing fresh sanctions on Russia over a pattern of malicious cyber attacks against the US and allies, including the December 2020 SolarWinds attacks, which it has now formally attributed to the Russian state-backed APT29, or Cosy Bear. The […]

The University of Hertfordshire has become the latest victim of a spate of cyber attacks against academic institutions after a major incident knocked all its systems offline. The attack on its network is understood to have begun shortly before 10pm on Wednesday 14 April, and the university’s IT teams are currently working to restore services. […]

Cyber criminals continue to imitate well-known technology brands in their phishing attacks, playing on the trust that people have in companies such as Microsoft, according to new data compiled by Check Point Research. In its latest Brand phishing report for Q1 2021, Check Point said Microsoft remained the most frequently targeted brand, as it was […]

Next month, Microsoft will stop issuing security updates for Windows 10 build 1909, two years after its release. This may not be receiving the same headlines as end of support for Windows 7 or Windows XP, but it was an unpatched, unsupported Windows operating system that hackers exploited to bring down IT in the NHS […]

The US Justice Department has authorised the FBI to access systems vulnerable to the Microsoft Exchange Server ProxyLogon vulnerabilities to remove malicious web shells that had been installed. The zero-day vulnerabilities – which were the subject of an emergency out-of-band patch from Microsoft in March 2021 – were heavily exploited by malicious actors throughout the […]