of Windows Server receive patches. In place of patches, admins for older Windows products such as Windows 10 and Server 2019 receive another implicit reminder that Microsoft would strongly prefer that everyone upgrade. Remote Access Connection Manager:...

code execution against a vulnerable SharePoint server. Patches are available for SharePoint Server Subscription Edition, 2019, and 2016. As the full Rapid7 blog post sets out, the second vulnerability in the full RCE chain remains embargoed for now,...

and into the pay-to-play Extended Security Updates (ESU) phase after 14 July 2026. On that same date, SharePoint 2016 and 2019 will also move past extended support, but since there’s no ESU available, the only remaining option for fully supported...

of CVE-2024-30051, a previous zero-day EoP vulnerability in DWM. Today, all current versions of Visual Studio 2022 and 2019 receive patches for CVE-2025-32702, a zero-day RCE where exploitation requires the user to download and open a malicious file....

even if the attacker must win a race condition, which does raise the bar for entry somewhat. Microsoft Windows 11 and Server 2019 onwards are not listed as receiving patches, so they are presumably not vulnerable. It’s not clear why newer Windows...

ransom attacks and e-crime activity is up over 330 per cent since the start of the year over the same period from 2019. Financial institutions have an obligation to protect company and customer information, made harder by the era of open and digitalised...

According to data from the Australian Cyber Security Centre (ACSC), it responded to 2,266 cyber security incidents from June 2019 to June 2020 and, on average, assists six entities to respond to cyber security incidents each day. The Australian federal...

According to data from the Australian Cyber Security Centre (ACSC), it responded to 2,266 cyber security incidents from June 2019 to June 2020 and, on average, assists six entities to respond to cyber security incidents each day. The Australian federal...

of the materiality of risks was raised across the 39 submissions received by APRA in the public consultation for CPS234 in 2019. While APRA noted this request in its report on received submissions, it refused to provide a definitive materiality...

health and transportation is the government services sector. And, it’s easy to see why. In a 12-month period between July 2019 and June 2020, the Australian government was the target of more than 400 cyber attacks — approximately one-third of all...

especially over the past few months, with the threat of more on the horizon. ACSC reported 59,806 cyber crimes between July 2019 and June 2020, and the Australian Bureau of Statistics reported that one in three data breaches (35 per cent) in Australia...

the Five Eyes chief information officers described at the recent Military Communication and Information Systems Conference 2019 (MilCIS) in Canberra, Defence has to do more to keep up. "As we get older, we tend to get safer and more comfortable. Well,...

the recent audit has uncovered sustained “non-compliance and significant weaknesses” with the policy, first introduced in 2019, during the 2019-20 reporting period. The audit was focused on examining the departments of Premier and Cabinet, Communities...

government agencies. In 2021, ninety-two per cent of agencies had conducted cyber security training, up from 70 per cent in 2019. Ninety per cent had conducted awareness exercises in 2022, and in 2024, twelve per cent of reviewed agencies had not...

NSO’s CEO and chief operating officer at the time that Pegasus was used to infect the devices of 1,400 WhatsApp users in 2019, was also deposed. According to WhatsApp’s filing, he admitted “the actual process for installing Pegasus through WhatsApp was...

to appreciate the Exchange team’s blog title: “You Had Me at EHLO”. Patches for CVE-2024-49040 are available for Exchange 2019 CU13 and CU14, as well as Exchange 2016 CU23. It’s worth remembering that both Exchange 2016 and 2019 have an extended end...

at $1.1 million, with $547,000 funded under the AustCyber’s Project Fund. The project will run from 1 July 2018 to 30 June 2019.

nationals. So far, 21 of those indicted have been convicted. Iro and his group operated between October 2014 and August 2019 before he was arrested by FBI agents in 2019 in Los Angeles. In that time, the group laundered over US$25 million in funds...

based on 157 million attacks. Automated bot attacks continue to rise; human-initiated attacks rose for the first time since 2019 – Automated bot attacks grew 32 per cent YoY globally, with LATAM showing the highest growth at 455 per cent. The US and...

an American oil pipeline was hit by a ransomware attack that took operations offline before a ransom could be paid, and in 2019, a hacker got into the water supply system of a city in Florida and boosted sodium hydroxide concentration to dangerous...