December 21, 2021
Update 2: Severe Zero-Day Vulnerability in Apache Log4j Package Hits the World
December 20, 2021: A new Denial of Service vulnerability was announced over the weekend by…
Read More
July 23, 2021
I do not like HiveNightmare, SeriousSam. I do not like it here or there. I do not like it anywhere!
TL;DR No, it’s not a new Dr. Seuss story – it’s a recently discovered zero-day…
Read More
July 6, 2021
Kaseya’s VSA Supply Chain Ransomware
TL;DR A supply chain exploit of Kaseya’s VSA Remote Management service puts customers of managed…
Read More
July 6, 2021
Windows Print Spooler “PrintNightmare” Vulnerability, Exploits
TL;DR There is a Windows vulnerability that uses Print Spooler to gain remote code execution…
Read More
March 17, 2021
Verkada Cameras Hacked and New Microsoft DNS Server Vulnerability
It’s been quite a few months in the cyber security world, and last week was…
Read More
March 11, 2021
Update to HAFNIUM/Microsoft Exchange Server zero-day vulnerabilities
Overview On March 4, 2021 we posted a Cyber Heads-Up article titled, “Chinese State-Sponsored Group…
Read More
March 4, 2021
Chinese State Sponsored Group HAFNIUM Exploiting Exchange Zero-Day Vulnerabilities – PATCH NOW
Overview Microsoft recently released out-of-band security updates to address four new vulnerabilities in Exchange Server…
Read More
February 4, 2021
Oversharing in the Age of COVID-19
To say that selfies have been popular for the last two decades would be an…
Read More
December 14, 2020
CISA Announces Active Exploitation of SolarWinds Orion Platform – What You Should Know
Overview The Cybersecurity and Infrastructure Security Agency (CISA) released an alert regarding the active exploitation…
Read More
December 9, 2020
Cyber Security Firm FireEye Reports Major Breach, Assura’s response and monitoring plan
Overview Major news shocked the cyber security world yesterday (Tuesday, December 8) when FireEye, the…
Read More
