SBS CyberSecurity - In The Wild 288

 

In The Wild - CyberSecurity Newsletter Welcome to the 288th  issue of In The Wild, SBS' weekly CyberSecurity newsletter. The objective of this newsletter is to share threat intelligence, news articles that are relevant, new and updated guidance, and other information to help you make better cybersecurity decisions. Below, you will find some of the latest-and-greatest news stories, articles, videos, and links from the past week in cybersecurity. Some of the following stories have been shared by consultants, others by the SBS Institute, and others yet simply been found in the far corners of the internet. We hope you find the following stories relevant, interesting, and – most of all – useful. Enjoy. Follow SBS CyberSecurity on Social Media for more articles, stories, news, and resources!           Hacker Hour: Locking Down Microsoft 365 Date: Tuesday, August 30 Time: 2:00 - 3:00 PM CT SBS Educational Resources If your organization has implemented or researched Microsoft 365, you know there are various licensing options available, including Outlook, Teams, SharePoint, Intune, and more. It is essential to understand default controls and which controls need to be modified to lock down the security posture of your environment. Join SBS as we identify and understand basic and advanced Microsoft 365 features and how they can impact your security. Read Here »   Microsoft Patch Tuesday, August 2022 Edition KrebsOnSecurity Microsoft today released updates to fix a record 141 security vulnerabilities in its Windows operating systems and related software. Read Here »   Ransomware Attack Costs Hanesbrands $100 Million in Lost Sales PC Magazine It’s clear ransomware attacks can force victims to pay up, but they can also crater a company’s earnings potential. Read Here »   Cisco Confirms Network Breach Via Hacked Employee Google Account Threatpost Networking giant says attackers gained initial access to an employee’s VPN client via a compromised Google account. Read Here »   Do you know which SBS Institute Certification Programs are coming up? Check out the Certification Calendar and share with your clients. Find Out Here! » Hackers are still using these old security flaws in Microsoft Office. Make sure you've patched them ZDNet 'Malware authors still achieve their aims by relying on aging vulnerabilities,' warn security researchers. Read Here »   Cisco Patches High-Severity Vulnerability Affecting ASA and Firepower Solutions The Hacker News Cisco on Wednesday released patches to contain multiple flaws in its software that could be abused to leak sensitive information on susceptible appliances. Read Here »   The Week in Ransomware - August 12th 2022 - Attacking the defenders BleepingComputer It was a very busy week for ransomware news and attacks, especially with the disclosure that Cisco was breached by a threat actor affiliated with the Yanluowang ransomware gang. Read Here »   How Leaders Can Make the Best of Remote Working Entrepreneur Learning how to build efficient, reliable and engaged teams in a virtual world is more important than ever before, as it looks like remote work is here to stay. Read Here » 10 Other Interesting Links From This Week There were too many fantastic reads from this past weeks' worth of cybersecurity and technology news, so here are a few additional quick-hit links for your reading pleasure:      KrebsOnSecurity: The Security Pros and Cons of Using Email Aliases      KrebsOnSecurity: It Might Be Our Data, But It’s Not Our Breach      KrebsOnSecurity: Sounding the Alarm on Emergency Alert System Flaws      BleepingComputer: Palo Alto Networks -New PAN-OS DDoS flaw exploited in attacks      BleepingComputer: Over 9,000 VNC servers exposed online without a password      Slash Gear: Starlink Got Hacked And SpaceX's Response Was Incredible      The Register: Higher risks and premiums are creating critical gap in cyber insurance      The Hacker News: The Truth About False Positives in Security      ZDNet: FBI, CISA warn over ransomware gang that can make million dollar demands      ZDNet: This company didn't spot the flaw in their network. But three ransomware gangs did.