Cybersecurity Archives

CISA adds Critical CWP vulnerability to Known Exploited Vulnerabilities Catalog

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / January 19, 2023 / CentOS, CISA, CVE-2022-44877, CWP, Cybersecurity

The Cybersecurity and Infrastructure Security Agency (CISA) has added one Critical Control Web Panel (CWP) vulnerability to its Known Exploited Vulnerabilities Catalog.

Google releases Chrome 102 (102.0.5005.115) security updates with fixes for 4 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / June 11, 2022 / Android, browser, Chrome, Chrome 102, Cybersecurity, Cybersecurity Threat Center, Infosec, Vulnerabilities

eleased Chrome version 102.0.5005.115 for Windows, Mac and Linux, with fixes for seven vulnerabilities (four rated High severity).

Microsoft releases emergency patches for Exchange Server RCE vulnerabilities exploited in the wild (Updated)

Cybersecurity Attacks, Messaging Security, Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / By Frank Crast / March 8, 2021 / CVE-2021-26855, Cybersecurity, Cybersecurity Threat Center, Exchange, Exchange Server, Exploit, Microsoft, Vulnerabilities

Microsoft has released emergency out-of-band security updates to fix multiple Critical vulnerabilities impacting Microsoft Exchange Server 2013, 2016 and 2019, collectively known as “ProxyLogon.” The tech giant also published interim mitigations if organizations can not patch immediately, as well as an IOC detection tool.

5 Good Cybersecurity Lessons Learned From FTC Law Enforcement Actions

Cybercrime, Cybersecurity Articles, Regulations & Laws, Standards & Guidelines / By Frank Crast / April 5, 2020 / CVE-2017-5638, Cybercrime, Cybersecurity, Framework, FTC, law

Several years ago, the Federal Trade Commission (FTC) released a good video that is still highly relevent today. The video explains how companies can leverage NIST’s Cybersecurity Framework to greatly improve security in their organization. In this article, we highlight the five key tenants from the framework and how they could have possibly prevented FTC action and penalties.

DOJ Framework for vulnerability disclosure

Leave a Comment / Standards & Guidelines, Vulnerabilities & Exploits / By Frank Crast / August 2, 2017 / Cybersecurity, DOJ, Framework, Vulnerabilities

The Department of Justice (DOJ) Criminal Division Cybersecurity Unit has developed a framework to assist organizations interested in creating a formal vulnerability disclosure program.