George Bailey

George Bailey is the byline of the CyberExperts editorial desk, the team behind the CyberExperts Daily Brief. The desk covers vulnerabilities, breaches and security news from vendor advisories, CISA alerts and other primary sources, and links those sources in every story. Questions or corrections: [email protected].
Attackers are taking over Cisco email gateways with one booby-trapped attachment. Check your scanner version today

Attackers are taking over Cisco email gateways with one booby-trapped attachment. Check your scanner version today

The box that scans your mail for malware can be rooted by an email. Cisco says it is already happening....
Thursday’s brief: Cisco email gateways under attack, then PAN-OS, Nextcloud and AhsayCBS

Thursday’s brief: Cisco email gateways under attack, then PAN-OS, Nextcloud and AhsayCBS

One mail gateway to check today, a firewall upgrade, a Nextcloud app to update and a backup hotfix to confirm....
A Palo Alto firewall login is enough to own the firewall. Upgrade PAN-OS and lock down the admin page

A Palo Alto firewall login is enough to own the firewall. Upgrade PAN-OS and lock down the admin page

Palo Alto has seen limited attacks and published three IP addresses to look for....
The AhsayCBS backup bugs are now on CISA’s exploited list. Ask your MSP which hotfix they run

The AhsayCBS backup bugs are now on CISA’s exploited list. Ask your MSP which hotfix they run

Version 9 servers finally have a fix, and Ahsay has published what a compromised server looks like....
Nextcloud servers have been quietly backdoored through an office app since September. Update it or remove it

Nextcloud servers have been quietly backdoored through an office app since September. Update it or remove it

Turning the Collabora Built-in CODE Server app off does not help. It has to be updated or removed....
Wednesday’s brief: a Windows bug already under attack, then Ivanti VPNs, SAP and Fortinet

Wednesday’s brief: a Windows bug already under attack, then Ivanti VPNs, SAP and Fortinet

One update to push today, one VPN to upgrade and check, and two patch lists for this week....
Attackers got root on fully patched Ivanti VPNs. Upgrade Connect Secure today and check Active Directory

Attackers got root on fully patched Ivanti VPNs. Upgrade Connect Secure today and check Active Directory

The attackers went after LAPS passwords and BitLocker keys, and Ivanti’s own integrity checker missed them....
Two SAP fixes this month let an ordinary user take over the system. Book S/4HANA and Visual Composer patches this week

Two SAP fixes this month let an ordinary user take over the system. Book S/4HANA and Visual Composer patches this week

Four critical notes in SAP’s October patch day. None is exploited, and two of them rate 9.9....
Attackers are already using a Windows bug Microsoft fixed on Tuesday. Get the October update onto laptops first

Attackers are already using a Windows bug Microsoft fixed on Tuesday. Get the October update onto laptops first

A booby-trapped file can skip the “downloaded from the internet” warning. CISA wants it patched by Friday....
Your FortiSIEM and FortiSandbox boxes have no-login bugs. Upgrade them before attackers go looking

Your FortiSIEM and FortiSandbox boxes have no-login bugs. Upgrade them before attackers go looking

The tools that watch your network can be taken over without an account. Fortinet says neither bug is exploited yet....
Attackers defrosted supermarket fridges across France. Check who can reach your refrigeration controllers

Attackers defrosted supermarket fridges across France. Check who can reach your refrigeration controllers

Hundreds of stores lost chilled stock after Danfoss controllers were hijacked overnight. Thousands more are online....
Windows Server 2012 gets its last update today, and Exchange 2016 and 2019 follow on October 31

Windows Server 2012 gets its last update today, and Exchange 2016 and 2019 follow on October 31

After today’s release, new Server 2012 bugs stay open. Find those boxes and give each one an owner and a…
Tuesday’s brief: GitLab’s critical fix, then Patch Tuesday, hijacked fridge controllers and Server 2012’s last update

Tuesday’s brief: GitLab’s critical fix, then Patch Tuesday, hijacked fridge controllers and Server 2012’s last update

One fix to install this morning, one release to prepare for this afternoon, and two lists to make....