Computer Safety & News

Best practices are are being created for protecting critical cloud applications that use “5G” wireless connectivity … Security ADMINS should continue to track future developments NSA-CISA Series on Securing 5G Cloud Infrastructure NSA and CISA Release Final Part IV of Guidance on Securing 5G Cloud Infrastructures | CISA CISA has announced the joint National Security Agency (NSA) […]

This new APACHE web server exploit is one of most serious attacks in years https://isc.sans.edu/forums/diary/Log4j+2150+and+previously+suggested+mitigations+may+not+be+enough/28134/ https://isc.sans.edu/forums/diary/Log4j+Getting+ready+for+the+long+haul+CVE202144228/28130/ https://isc.sans.edu/forums/diary/RCE+in+log4j+Log4Shell+or+how+things+can+get+bad+quickly/28120/   Friday (Dec. 10th), we moved our Infocon to “Yellow” for the first time in about two years. We saw an immediate need to get the word out as the log4shell vulnerability ( CVE-2021-44228) was actively exploited and affected various […]

Tis’ the season to be alert for SCAMS– and the FTC shares valuable safety tips Make your donation count by avoiding end-of-year charity scams | FTC Consumer Information The season of giving is here. If you celebrate Christmas, you might be about to fill some stockings. But, for many, holiday giving includes supporting charitable causes. […]

The FTC reminds consumers to be alert for Gift Card SCAMs circulating actively this time of year & particularly used in Romance & “money-mule” scam attacks Scammers are tricking more people into buying gift cards | FTC Consumer Information According to the newest Data Spotlight, 40,000 people reported losing a whopping $148 million in gift […]

Microsoft has released important “Patch Tuesday” monthly security updates. These should applied promptly as some of these vulnerabilities have potential to be actively exploited in-the-wild later: https://isc.sans.edu/forums/diary/Microsoft+December+2021+Patch+Tuesday/28132/ https://www.zerodayinitiative.com/blog/2021/12/14/the-december-2021-security-update-review http://blog.talosintelligence.com/2021/12/apache-log4j-rce-vulnerability.html https://www.cisa.gov/uscert/ncas/current-activity/2021/12/14/microsoft-releases-december-2021-security-updates https://redmondmag.com/articles/2021/12/14/microsoft-december-security-patches-arrive.aspx https://msrc.microsoft.com/update-guide/releaseNote/2021-Dec https://portal.msrc.microsoft.com/en-us/security-guidance/summary https://patchtuesdaydashboard.com/ Microsoft on Tuesday released security patches for 67 common vulnerabilities and exploits, even as organizations are scrambling to address a Log4j […]