Secure Data Solutions, Inc.

05/23/2019

Update whatsApp to patch this critical vulnerability.

Earlier today the Financial Times published that there is a critical vulnerability in the popular WhatsApp messaging application and that it is actively being used to inject spyware into victims phones. According to the report, attackers only need to issue specially crafted VoIP calls to the vict....

05/16/2019

Woah XP patches too

Yeah this is serious and if you still have XP around then you need to get serious as well. Ha! Happy patching people

A very bad vulnerability in Windows XP could have serious ramifications, even with a patch.

05/15/2019

Security Vulnerability!
Are your systems patched??? We can help.
Windows Systems 2008 R2 and below
Unauthenticated RDP Remote Code Ex*****on

In need of a security audit, security hardening or upgrades. We are here to help. Send us a message.

03/20/2019

Excellent poster and guide for Security Teams
Sans Security Leadership & CIS Controls

03/16/2019

2 factor authentication in Office 365 and G suite bypassed

• 72% of tenants were targeted at least once by threat actors
• 40% of tenants had at least one compromised account in their environment
• Over 2% of active user-accounts were targeted by malicious actors
• 15 out of every 10,000 active user-accounts were successfully breached by attackers

Massive IMAP-based password-spraying attacks successfully breached Microsoft Office 365 and G Suite accounts, circumventing multi-factor authentication (MFA) according to an analysis by Proofpoint.

03/13/2019

IRIDIUM bags some l00t. Remember to check https://haveibeenpwned.com to see if your data has ever been collected.

Stay Secure my friends -
Use 2factor authentication
Rotate passwords
Don't reuse passwords across multiple sites

Remote-desktop giant 'among more than 200 govt agencies, oil, gas, tech corps' hit by gang

03/13/2019

You may be missing a bit If you recently keyed a certificate.

Certificates with 63-bit serial numbers touch off mass revocation blitz.

03/06/2019

Cisco has released fixes for several models of wireless VPN firewalls and routers, plugging CVE-2019-1663, a critical RCE flaw.

03/06/2019

browser extensions for Google Chrome, Opera, Mozilla Firefox, and Apple Safari which make it easy to pull up Recorded Future's Intelligence Cards on the following indicator types: IP address, file hashes, domains, vulnerabilities, malware, and threat actor (groups).

We offer browser extensions for Google Chrome, Opera, Mozilla Firefox, and Apple Safari which make it easy to pull up Recorded Future's Intelligence Cards on the following indicator types: IP addre...

03/03/2019

Check Point researchers show how cyber criminals could infiltrate any home or corporate network by exploiting all-in-one printer-fax machines by dialing up to a fax. Exploit can give attacker network access and more.

Secure Data Solutions has the solution to securing your network. Give us a call to discuss a solution.

In ground breaking research, dubbed ‘Faxploit’, Check Point researchers show how cyber criminals could infiltrate any home or corporate network by exploiting all-in-one printer-fax machines. A fax number is the only thing required to carry out the attack. HP all-in-one printer fax machines were ...

02/27/2019

Security flaw detected public cloud bare metal system rentals. Researchers were able to alter system firmware which lived on even after the system was handed to another user.

Researchers point out a tough-to-fix in some cloud computing setups: hackable firmware.