A selection of this week’s more interesting vulnerability disclosures and cyber security news. No matter what we do to reduce our risks, especially when such a significant threat becomes the only thing we talk about, there is always a risk something will be missed. The WannaCry outbreak was something that drew much attention and focus, the race to patch and/or protect shows we can do this, however when our infrastructure is large and we don’t have a clear view of our exposure, there can be doubt. Honda appears to have experienced this. My hat goes off to the initial response to the threat, however it appears some very old and possibly half forgotten corners were missed and it came back to bite them. When a threat makes it past that line, the soft underbelly is such as easy target.
I’ve seen Google frequently bring up their new stance on security in that treating your safe internal networks as hostile, moving everything back to the end points, while creating more management does provide for a surer standpoint. At the very least we do become aware of the deficiencies in our infrastructure.
Do you know what lurks in yours? With that thought, have a wonderful weekend! 😉
Other stuff:
- WannaCry ‘Scareware’ Driving Downloads of Bogus Anti-Virus Apps
- 800,000 customers ‘at risk’ over vulnerable Virgin Media router Fife Today reports