Patch Now: Microsoft Releases Updates for Over 75 Flaws
Microsoft Releases Patches for 9 Critical Flaws & 3 Zero-Day Vulnerabilities On Tuesday, Microsoft released its security updates for February 2023, including patches for over 75 flaws. Among the 75 vulnerabilities, nine were rated “critical” and 66 “important” in terms of severity of threat to the organization. Three of them have been identified as zero-day […]
Four Different Microsoft Azure Services Found Vulnerable to Server-Side Request Forgery Attacks
Microsoft Azure Services Flaws Could’ve Exposed Cloud Resources to Cyberattacks According to a blog post Tuesday by Orca Security, four Microsoft Azure services have been found vulnerable to server-side request forgery (SSRF). The security issues were discovered by Orca between October 8, 2022 and December 2, 2022. The vulnerable services include: Azure API Management, Azure Functions, Azure […]
Microsoft Launches Brute Force Attack Protection For All Windows Versions
Microsoft Releases Policy to Further Prevent Brute Force Attack Attempts Earlier this week, Microsoft announced additional protection against brute force attacks, one of the most common methods used to attack Windows machines. IT admins can now configure a group policy to automatically block brute force attacks targeting local administrator accounts on any Windows system still […]
What is an Active Directory Forest?
Active Directory (AD) Organizational Structure: Understanding AD Forests Active Directory is a vital component of any Microsoft enterprise and often a target for threat actors. As such, it is important not only to secure Active Directory but understand how to best configure and manage its’ components in order to reduce vulnerabilities and help prevent cyberattacks.The […]
Connect with Cayosoft at Gartner Security and Risk Management Summit
Join Us at the Gartner Security and Risk Management Summit Cayosoft is proud to be a sponsor for Gartner Security and Risk Management Summit 2022. IT and security professionals will come together to explore and share the latest trends in cybersecurity, IT threat mitigation, and new initiatives to safeguard their organizations. With this year’s theme, […]
Understanding IAM: Everything You Need to Know About the Components of Identity and Access Management
Discover the Essential Components of Identity and Access Management Beginning in 2021, the second Tuesday of April is Identity Management Day. As a joint venture between the Identity Defined Security Alliance (IDSA) and the National Cybersecurity Alliance (NCA), Identity Management Day was created to raise awareness and educate business leaders, IT decision makers, and the […]
Senate Passes Cybersecurity Act: Orgs to Report Cyberattacks & Ransom Payments
The Senate on Tuesday passed major cybersecurity legation, moving one step closer toward forcing critical infrastructure companies to report cyberattacks and ransomware payments. The passage comes as federal officials have repeatedly warned of the potential for Russian cyberattacks against the United States amid the escalating conflict in Ukraine. The legislation, which still has to pass […]
‘Wormable’ Flaw Leads January 2022 Patch Tuesday
Microsoft Releases Over 100 Updates in Patch Tuesday for January 2022 The January security updates from the Redmond-based software giant cover security defects in a wide range of default Windows OS components, including a critical flaw in the HTTP Protocol Stack (http.sys) that Microsoft describes as “wormable,” and another code execution Exchange Server bug reported […]
ManageEngine Zero-Day Flaw Actively Being Exploited
FBI Warns: APT Groups Exploiting Critical Vulnerability in ManageEngine Software Earlier this month, the FBI and Cybersecurity and Infrastructure Security Agency (CISA) released a joint advisory highlighting a newly discovered vulnerability being actively exploited in ManageEngine ServiceDesk Plus, owned by Zoho Corp, an IT help desk and asset management software. This critical remote code execution […]
FBI & CISA Warning: ManageEngine Flaw Poses Serious Risk
APT Actors Exploit Vulnerability in ManageEngine ADSelfService Plus Reports confirm a critical security vulnerability in ManageEngine ADSelfService Plus, a self-service password management and single sign-on (SSO) tool for Active Directory environments, is actively being exploited. This newly discovered vulnerability, CVE-2021-40539, presents a critical authentication bypass risk that affects REST API URLs and can lead to […]