Credit to Author: Charlotte Trueman| Date: Wed, 10 Aug 2022 07:37:00 -0700
Microsoft has confirmed that a high-severity, zero-day security vulnerability is actively being exploited by threat actors and is advising all Windows and Windows Server users to apply its latest monthly Patch Tuesday update as soon as possible.
The vulnerability, known as CVE-2022-34713 or DogWalk, allows attackers to exploit a weakness in the Windows Microsoft Support Diagnostic Tool (MSDT). By using social engineering or phishing, attackers can trick users into visiting a fake website or opening a malicious document or file and ultimately gain remote code execution on compromised systems.
Credit to Author: BrianKrebs| Date: Wed, 10 Aug 2022 15:10:59 +0000
One way to tame your email inbox is to get in the habit of using unique email aliases when signing up for new accounts online. Adding a “+” character after the username portion of your email address — followed by a notation specific to the site you’re signing up at — lets you create an infinite number of unique email addresses tied to the same account. Aliases can help users detect breaches and fight spam. But not all websites allow aliases, and they can complicate account recovery. Here’s a look at the pros and cons of adopting a unique alias for each website.
Credit to Author: Chris McCormack| Date: Wed, 10 Aug 2022 13:00:07 +0000
Zero trust network access is a new and better way of providing remote access – without all the frustrations, limitations, and security gaps of remote-access VPN.
Credit to Author: Matt Wixey| Date: Wed, 10 Aug 2022 11:00:50 +0000
After gaining access via RDP, all three threat actors encrypted files, in an investigation complicated by event log clearing and backups. 3 attackers, 2 weeks – 1 entry point.