Computer Safety & News

Microsoft Azure has improved security controls.  It even an “AI” based tracking & learning system.  It can help identify & highlight usual activities — that is clearly different from normal user behavior. Microsoft Ups Security of Azure AD, Identity (darkreading.com) Microsoft’s latest security announcements have focused on securing Azure AD and Identity. Updates include stronger […]

Cisco’s security group called “TALOS” shares a detailed month-by-month recap of Ransomware, RAT, Zoom-bombing, fraud, scams, hacking attacks & other major attacks experienced in 2020.  Security professionals should remain vigilant for 2021 as the sophistication of attacks increase further. Cisco Talos Intelligence Group – Comprehensive Threat Intelligence: 2020: The year in malware Nothing was normal […]

CISA continues to track the major breach where the SolarWinds Orion security suite was compromised & downloaded & installed by numerous GOVT & corporate entities.  This new bulletin provides an executive summary for IT & business leaders. CISA Releases CISA Insights and Creates Webpage on Ongoing APT Cyber Activity | CISA CISA Insights: What Every […]

John Maxwell’s blog shares 15 measurements to evaluate Leadership effectiveness https://corporatesolutions.johnmaxwell.com/blog/questions-i-ask-myself-to-determine-how-my-team-perceives-my-leadership/ 15 Questions to Assess How Your Leadership is Perceived  Do the people on my team find me genuine, authentic, and trustworthy? Do I view my position as an opportunity to serve or as a platform for my personal advancement? Do the people on my […]

A new Task Force of 19 security companies has been chartered recently.  It’s mission is to fight Ransomware attacks which are highly destructive & lead to long costly business interruptions & offline outages.  Ransomware Task Force Created by 19 Companies Including Microsoft, McAfee | PCMag The 19 companies signed up to the RTF so far […]

CISA Updates Alert and Releases Supplemental Guidance on Emergency Directive for SolarWinds Orion Compromise | CISA Computer Safety & News – SolarWinds Orion Exploit – How to Identity and Remove (msmvps.com) CISA has updated AA20-352A: Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations, originally released December 17. This update states that […]

CISA & NSA are warning on ways security authentication can be worked around to compromise security access, especially for cloud-based applications. NSA Releases Cybersecurity Advisory on Detecting Abuse of Authentication Mechanisms | CISA AUTHENTICATION_MECHANISMS_CSA_U_OO_198854_20.PDF (defense.gov) Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations | CISA The National Security Agency (NSA) […]

All Firefox users should update to version 84 as it offers improved security & features.  Also it is noted that Firefox 84 is the last release that will have support for Adobe Flash. Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird | CISA Security Vulnerabilities fixed in Firefox 84 — Mozilla Firefox 84.0, […]

For users which have installed Facebook or Instagram “helper apps” a list of 28 dangerous ones have been highlighted as a key security risk, as noted below Three million users installed 28 malicious Chrome or Edge extensions | ZDNet Millions of users have had their data stolen by these 15 Chrome extensions – remove them […]

Apple Releases Security Updates for Multiple Products | CISA Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Apple security pages for the following products and apply the necessary updates: […]