Check your Citrix as a matter of urgency. The UK NCSC has published guidance for mitigation ahead of a patch release. To check the Citrix Application Delivery Controller and Access gateway for compromise. View Original Post
The US governments cyber department has issued a warning, patch your VPN. Its an obvious threat vector for any attacker and VPN breakout is much easier when the vulnerabilities are identified and not patched for. View Original Post
We all depend upon it and it touches all aspects of our lives. Whether it’s water, a basic need for all living things, animal or vegetable. For mass production of every kind, as steam to heat, steam to clean, or…
A lot may rest on this debate and subsequent outcome, having far reaching consequences for more than just the military. There is no agreed definition at least in the eyes of the law and international convention, of what defines cyber…
In my experience it’s one of the hardest aspects of cyber security to get right and manage. But it is essential that it is done. The words ‘least privelege’ should spread fear into anyone. It’s intended to mean that users,…
The escalation in tensions between the US and Iran sees its first open use of cyber. With reports that the website of a US government agency has been hacked by a group purported to be supporting the Iran state. And…
Microsoft has acted against the websites of hackers it and other members of the security community believe have been set up by hackers associated with North Korean. The sites are used by the hackers to mimic those of legitimate companies…
A great article to reflect on for 2020 and some choice books to add to your must read list this year. The world of statecraft is not what it used to be, it’s no longer just a case of who’s…
I want to wish everyone a happy, prosperous and secure 2020. The past 12 months have been a roller coaster ride of posts and papers published, speaking engagements and CSyP. Which I hope have been constructive and informative in spreading…
As we move out of the 2nd decade of the 21st century. A decade which we could say saw the rise of cyber as a mainstream risk. Here are a few of the most notable hacks. The ones that arguably…
