Cyber Defense Advisors

News

  • by
  • November 15, 2023

Urgent: VMware Warns of Unpatched Critical Cloud Director Vulnerability

VMware is warning of a critical and unpatched security flaw in Cloud Director that could be exploited by a malicious actor to get around authentication protections. Tracked as CVE-2023-34060 (CVSS score: 9.8), the vulnerability impacts instances that have been upgraded to version 10.5 from an older version. “On an upgraded version of VMware Cloud Director […]

Cyber News
  • by
  • November 15, 2023

Microsoft Zero-Days Allow Defender Bypass, Privilege Escalation

Another two bugs in this month’s set of fixes for 63 CVEs were publicly disclosed previously but have not been exploited yet.

Cyber News, Cyber Threat Trends
  • by
  • November 15, 2023

Danish Energy Attacks Portend Targeting More Critical Infrastructure

Targeted attacks against two dozen related companies is just the latest evidence that hackers want a piece of energy.

Cyber News, Cyber Threat Trends
  • by
  • November 14, 2023

Microsoft Patch Tuesday, November 2023 Edition

Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three “zero day” vulnerabilities that Microsoft warns are already being exploited in active attacks. The zero-day threats targeting Microsoft this month include CVE-2023-36025, a weakness that allows malicious content to bypass the Windows SmartScreen […]

Cyber News

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking at the AI Summit New York on December 6, 2023. The list is maintained on this page.

Cyber News, Cyber Threat Trends
  • by
  • November 14, 2023

21 Vulnerabilities Discovered in Crucial IT-OT Connective Routers

In this Black Hat Europe preview, devices bridging critical machinery with the wider Internet are exposed and subject to numerous supply chain-induced bugs.

Cyber News, Cyber Threat Trends
  • by
  • November 14, 2023

Squeeze some more life from your old laptop

Friends, forever Continue reading on The CISO Den »

Cyber News, Cyber Threat Trends
  • by
  • November 14, 2023

A CloudFormation Template to Enforce a Secure SSH Encryption Algorithm for EC2 Key Pairs

ACM.383 Security problems and workarounds if you choose to do this Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends