The Secret IR Insider’s Diary – from Sunburst to DarkSide

It’s been an unusual few weeks. Since the massive Sunburst supply chain compromise attacks which exploited a backdoor in organisations’ SolarWinds Orion network management software, my team’s day-to-day activities... Read more »

Finnish government strengthens country’s IT network security

Finland has established a national organisation to appraise domestic communications network security concerns and evaluate vulnerabilities to attacks from the cyber domain. The Network Security Advisory Board (NSAB) will engage with... Read more »

Dutch accuse UK of ‘damaging confidence’ by disclosing details of EncroChat police collaboration

Prosecutors in Rotterdam have accused the UK of “damaging confidence” of European law enforcement bodies by disclosing details of a joint police operation to infiltrate the EncroChat encrypted phone... Read more »

Biden sanctions Russia over SolarWinds cyber attacks

As has long been anticipated, US president Joe Biden has today (15 April) signed an executive order imposing fresh sanctions on Russia over a pattern of malicious cyber attacks... Read more »

University of Hertfordshire is latest academic cyber attack victim

The University of Hertfordshire has become the latest victim of a spate of cyber attacks against academic institutions after a major incident knocked all its systems offline. The attack... Read more »

Microsoft is most impersonated brand in phishing attempts

Cyber criminals continue to imitate well-known technology brands in their phishing attacks, playing on the trust that people have in companies such as Microsoft, according to new data compiled... Read more »

Ireland’s DPC launches probe into Facebook leak

Ireland’s Data Protection Commission (DPC) has initiated an own-volition inquiry under section 110 of the Irish Data Protection Act of 2018 following the leak of a vast tranche of... Read more »

How Windows patching leaves security exposed

Next month, Microsoft will stop issuing security updates for Windows 10 build 1909, two years after its release. This may not be receiving the same headlines as end of... Read more »

FBI accesses ProxyLogon target servers to disrupt cyber criminals

The US Justice Department has authorised the FBI to access systems vulnerable to the Microsoft Exchange Server ProxyLogon vulnerabilities to remove malicious web shells that had been installed. The... Read more »

NSA unearths more MS Exchange vulnerabilities

Just weeks after the disclosure of a series of critical zero-days in Microsoft Exchange Server caused consternation in the cyber community, Microsoft has patched four new vulnerabilities in the... Read more »
Subscribe to our Newsletter