This week has been fairly monumental in the somewhat shady world of Cyber Geopolitics. Can we get our heads around any of it? Let us see. The UK, US and EU have accused China of being the initial party behind attacks on internet facing Microsoft Exchange servers which have affected 30,000 organisations globally. In January this year, an alleged “Chinese-linked group (aka state … Read more
Last week saw the 2021 Microsoft Inspire conference, once more delivered virtually rather than in the decadent halls of Las Vegas. Here we present our takeouts from the event in case you missed anything! Hybrid Workforce ‘Remote working’ is the new normal and is being redefined by Microsoft as having a Hybrid Workforce. Microsoft is supporting this transition … Read more
Way way back in (at least in cloud provider release schedule) time, four weeks ago, we discussed the amazing coincidence that the Conti (misspelt) crime gang, which had ransomwared the Irish Health Service (HSE), leading to massive disruption, hurting the weak and vulnerable and very possibly causing early deaths, had provided decryption keys for free, seemingly following direct intervention by … Read more
Last week has seen yet another dastardly and seemingly incredibly successful ransomware attack using a trusted supply chain as the vector.
RCE on DC? Defender for Identity saves the day In this month’s ‘Patch Tuesday’ (so many bugs, so little time), Microsoft announced a patch for a critical remote code execution vulnerability (RCE) in the Windows Print Spooler CVE-20212-1675. Requiring local or remote access to the vulnerable host, Admin privileges were said to be potentially easily available, although … Read more