.webp)
This week, the CyberWatch team dissected the complexities of software updates, starting with Microsoft’s October Windows Security updates. While patching is critical, these updates broke SSH connections on some Windows 11 systems, creating headaches for enterprise and IoT users. Microsoft provided a temporary PowerShell workaround, but this incident serves as a reminder to test patches before deployment.
Meanwhile, Adobe, Zoom, and Google also issued patches addressing a combined total of over 150 vulnerabilities. From Adobe’s updates for creative tools to Zoom’s fixes for input validation flaws, and Chrome’s focus on navigation vulnerabilities, the week highlighted the critical importance of staying up-to-date across platforms.
Cybercriminals continued their innovation streak with two major malware strains making waves:
Adding to the chaos, Stelfox Malware emerged, masquerading as crack tools for popular software like AutoCAD and Foxit. Beyond bypassing copy protection, it mines cryptocurrency and steals payment data, signaling a concerning trend in malware diversity.
Supply chain attacks dominated headlines this week:
Both breaches underscore the necessity of securing supply chain participants with multi-factor authentication, encryption, and robust monitoring.
In a rare victory, international law enforcement agencies dismantled the Redline Stealer malware operation and its clone, Meta Stealer. This malware-as-a-service platform sold turnkey solutions to cybercriminals, highlighting the scalability and resilience of modern cybercrime enterprises. While this takedown is a win, the decentralized nature of these operations means the fight is far from over.
Listen to the CyberWatch podcast on Spotify and Apple Podcasts, or watch the episode on YouTube.
On this episode of the CyberWatch podcast, there are updates to software across the application and OS spectrum. New malicious campaigns are threatening victims of all sizes, and researchers have performed dissections on malware to give defenders new clues about just what it is they're fighting. All this today, in CyberWatch.
As Cybersecurity Awareness Month winds down, we're pleased to share one last feature from Pierre Reed, the Chief of Staff at Access Point Consulting. He explores the importance of fostering a security awareness culture within organizations. Discover how building this culture can empower your team to better protect against cyber threats.
Ethical hacking has become an essential response to an IT industry kept on its toes by a spectrum of bad actors with malicious intent. This article introduces two prominent methodologies that help the good guys fight back: penetration testing (pen-testing) and red teaming. Learn more here.
Host Geoff Hancock was joined by guests Mike Rush, Director of Threat Intelligence at Access Point Consulting; and Evie Manning, Senior Director of Threat Hunting and Intelligence at Access Point Consulting. Together, they talked about cyber threat intelligence and the applications that can make it work for small and medium-sized businesses.
