Author: DEFENDEDGE

  • New StopRansomware.gov website – The U.S. Government’s One-Stop Location to Stop Ransomware

    Original release date: July 15, 2021 The U.S. Government launched a new website to help public and private organizations defend against the rise in ransomware cases. StopRansomware.gov is a whole-of-government approach that gives one central location for ransomware resources and alerts. We encourage organizations to use this new website to understand the threat of ransomware,… Read more

  • CISA Insights: Guidance for MSPs and Small- and Mid-sized Businesses

    Original release date: July 14, 2021 CISA has released CISA Insights: Guidance for Managed Service Providers (MSPs) and Small- and Mid-sized Businesses, which provides mitigation and hardening guidance to help these organizations strengthen their defenses against cyberattacks. Many small- and mid-sized businesses use MSPs to manage IT systems, store data, or support sensitive processes, making… Read more

  • Microsoft Crushes 116 Bugs, Three Actively Exploited

    Microsoft tackles 12 critical bugs, part of its July 2021 Patch Tuesday roundup, capping a ‘PrintNightmare’ month of headaches for system admins. Read more

  • Windows Hello Bypass Fools Biometrics Safeguards in PCs

    A Windows security bug would allow an attacker to fool a USB camera used in the biometric facial-recognition aspect of the system. Read more

  • Citrix Releases Security Updates for Virtual Apps and Desktops

    Original release date: July 13, 2021 Citrix has released security updates to address a vulnerability in multiple versions of Virtual Apps and Desktops. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review Citrix Security Update CTX319750 and apply the necessary updates. This product is… Read more

  • SAP Releases July 2021 Security Updates

    Original release date: July 13, 2021 SAP has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.   CISA encourages users and administrators to review the SAP Security Notes for July 2021 and apply the necessary updates. This product is… Read more

  • Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers

    The ‘ModiPwn’ bug lays open production lines, sensors, conveyor belts, elevators, HVACs and more that use Schneider Electric PLCs. Read more

  • Adobe Patches 11 Critical Bugs in Popular Acrobat PDF Reader

    Adobe July patch roundup includes fixes for its ubiquitous and free PDF reader Acrobat 2020 and other software such as Illustrator and Bridge. Read more

  • Microsoft Releases July 2021 Security Updates

    Original release date: July 13, 2021 Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s July 2021 Security Update Summary and Deployment Information and apply the necessary updates. This… Read more

  • Kaseya Ransomware Attack: Guidance and Resources

    Original release date: July 13, 2021 CISA has created a webpage to provide information and guidance for the recent ransomware attack against Kaseya customers that include managed service providers (MSPs) and customers of those MSPs. CISA encourages affected organizations to review Kaseya Ransomware Attack: Guidance for Affected MSPs and their Customers for more information. This product is… Read more