On February 8, the world learned about a digital attack at the water treatment plant serving the 15,000-person City of Oldsmar, Florida. An operator at the water treatment plant observed someone remotely take control of his mouse and use it to change the setting of sodium hydroxide within the water from 100 parts per million (ppm) to 11,100 ppm. This change could have endangered public health if the operator had not immediately undone the attacker’s…

Microsoft released fixes for over 80 CVEs in yesterday’s Patch Tuesday update round, including a zero-day bug and several publicly disclosed vulnerabilities. In a week dominated by the exploitation on a massive scale of four zero-day Exchange Server flaws patched out-of-band by Microsoft last week, there’s yet more to do for sysadmins. The first is yet another zero-day, this time in Internet Explorer. “CVE-2021-26411 is a memory corruption vulnerability that could allow an attacker to target…

The purpose of every security team is to provide confidentiality, integrity and availability of the systems in the organization. We call it “CIA Triad” for short. Of those three elements, integrity is a key element for most compliance and regulations. Some organizations have realized this and decided to implement File Integrity Monitoring (FIM). But many of them are doing so only to meet compliance requirements such as PCI DSS and ISO 27001. However, file integrity…

Privacy in Practice: Securing Your Data in 2021 and Beyond Technological advancements continually emerge that make our lives easier. Right? As beneficial and convenient as emerging tech is, it can pose serious risks to our online safety and privacy—risks that you might find yourself ill-prepared to handle. In fact, according to our 2021 Consumer Security Mindset research, 45% of Canadian respondents don’t feel very confident about their ability to prevent a cyberattack and believe that…

by Rob Simopoulos, Co-Founder, Defendify IT professionals are entrusted to recommend methods to help strengthen overall data protection. But for many, it might be difficult to lead the charge toward improving cybersecurity if there is no organizational culture around security established. This often requires leadership to work with their teams to create the foundation for proper cybersecurity processes, procedures, and plans – but for this to happen, all key stakeholders must first have an awareness…

Google has released a new password checker for Android. Find out how to enable and use this security feature on your Android device. Image: Getty Images/iStockphoto Has your password been compromised? Are you certain? If you’re a Google Chrome user, you know there’s a feature that will inform you if your password has been stolen and should be changed. But what about Android? The Android developers recently released a security feature that is similar to…

Tag CVE Count CVEs Windows WalletService 2 CVE-2021-26871, CVE-2021-26885 Windows Error Reporting 1 CVE-2021-24090 Windows Media 1 CVE-2021-26881 Windows Installer 1 CVE-2021-26862 Visual Studio 2 CVE-2021-21300, CVE-2021-27084 Windows Storage Spaces Controller 1 CVE-2021-26880 Windows DirectX 1 CVE-2021-24095 Internet Explorer 2 CVE-2021-26411, CVE-2021-27085 Microsoft Office SharePoint 3 CVE-2021-24104, CVE-2021-27052, CVE-2021-27076 Windows Projected File System Filter Driver 1 CVE-2021-26870 Microsoft Office PowerPoint 1 CVE-2021-27056 Microsoft Windows Codecs Library 11 CVE-2021-24089, CVE-2021-24110, CVE-2021-26884, CVE-2021-26902, CVE-2021-27047, CVE-2021-27048, CVE-2021-27049, CVE-2021-27050,…