Articles by phewadm

What’s New? Cert NZ has released its second quarterly report for 2019. The Cert NZ reports provide an interesting snapshot of recent cyber security incidents reported in New Zealand by both individuals and organisations. The latest report shows that cyber security incidents continue to increase quarter-on-quarter: 1,197 incident reports were made to CERT NZ in the second quarter of 2019, up 21% from Q1, and losses of $6.5 million were reported, the highest amount of losses ever reported. Notable Increases Reports of scams and fraud increased significantly once again, making up over a third of the total number of reports

The New Report from Rapid 7 Security vendor Rapid 7 has released a new report analysing the results from penetration tests conducted by it between September 2018 and May 2019. The report is based on data is taken from 180 real-world internal and external penetration tests conducted on enterprise organisations. What are the Key Findings? Domain Admin Access The report finds that cybercriminals who manage to get access to an internal network have an opportunity to then gain domain administrator access in more than three quarters of cases. Finding Vulnerabilities The report also showed that penetration testers are almost always

What is BlueKeep? BlueKeep is the name given to a severe vulnerability that Microsoft recently identified in its Remote Desktop Protocol (RDP) service. This is being tracked under CVE-2019-0708. The vulnerability impacts the RDP service included in older versions of the Windows OS, such as XP, 7, Server 2003, and Server 2008. Although only older versions of Windows are affected, at the time of writing this equates to around one million devices. Devices running these older versions are exposing RDP to the internet, leaving them vulnerable to attack. What’s the problem? The problem is that the vulnerability can be abused