Exoweb Brings You The Latest Tech News
Malware Threats
- Crystal Valley Farm Coop Hit with Ransomware
It's the second agricultural business to be seized this week and portends a bitter harvest with yet another nasty jab at critical infrastructure.
- How REvil May Have Ripped Off Its Own Affiliates
A newly discovered backdoor and double chats could have enabled REvil ransomware-as-a-service operators to hijack victim cases and snatch affiliates’ cuts of ransom payments.
- VMware Warns of Ransomware-Friendly Bug in vCenter Server
VMware urged immediate patching of the max-severity, arbitrary file upload flaw in Analytics service, which affects all appliances running default 6.5, 6.7 and 7.0 installs.
- Feds Sanctions SUEX Cryptocurrency Exchange for Laundering Ransomware Payouts
The action is the first of its kind in the U.S., as the government increases efforts to get a handle on cybercrime.
- Hackers Are Going ‘Deep-Sea Phishing,’ So What Can You Do About It?
Nick Kael, CTO at Ericom, discusses how phishing is gaining sophistication and what it means for businesses.
CyberSecurity Issues
- Crystal Valley Farm Coop Hit with Ransomware
It's the second agricultural business to be seized this week and portends a bitter harvest with yet another nasty jab at critical infrastructure.
- Netgear SOHO Security Bug Allows RCE, Corporate Attacks
The issue lies in a parental-control function that's always enabled by default, even if users don't configure for child security.
- Unpatched Apple Zero-Day in macOS Finder Allows Code Execution
All a user needs to do is click on an email attachment, and boom – the code is silently executed without the victim knowing. It affects Big Sur and prior versions of macOS.
- How REvil May Have Ripped Off Its Own Affiliates
A newly discovered backdoor and double chats could have enabled REvil ransomware-as-a-service operators to hijack victim cases and snatch affiliates’ cuts of ransom payments.
- VMware Warns of Ransomware-Friendly Bug in vCenter Server
VMware urged immediate patching of the max-severity, arbitrary file upload flaw in Analytics service, which affects all appliances running default 6.5, 6.7 and 7.0 installs.
Office 365
- Azure AD App Management Method Policies Harden Application Security Posture
Still in public preview, new application authentication method policies will help Microsoft 365 customers adhere to best practices for managing application credentials, while asserting pressure on ISVs to do the same. Going forward we can expect this to turn into a standard configuration, enforced across many organizations. To address the problem, Microsoft is ready to release a set of features to help. In this article, we introduce you to Azure AD application authentication method policies, one of the features in the set. The post Azure AD App Management Method Policies Harden Application Security Posture appeared first on Practical 365.
- The Practical 365 Update: Episode 27 – News and Commsverse Roundup
In this week's show, Steve and Paul are joined by Mike weaver for a post-Commsverse roundup, and the latest Microsoft 365, Teams, Viva and Exchange news this week. The post The Practical 365 Update: Episode 27 – News and Commsverse Roundup appeared first on Practical 365.
- Contemplating Commsverse
Paul Robichaux provides insights from the independent Microsoft Teams conference, Commsverse, that just took place last week at Mercedez-Benz World outside of London. The post Contemplating Commsverse appeared first on Practical 365.
- Old Versions of Outlook for Windows Stop Connecting to Exchange Online November 1
From November 1, 2021, Microsoft requires Outlook 2013 Service Pack 1 (with fixes) as the minimum client version to connect to Exchange Online. Given all the publicity about attacks against the on-premises version of Exchange earlier this year, it's a wonder why organizations continue to allow people to use outdated client software to connect to Exchange Online. In any case, the drop-dead date is November 1. If you have any old Outlook 2007, Outlook 2010, or Outlook 2013 (before SP1) clients, it's time to start upgrading. The post Old Versions of Outlook for Windows Stop Connecting to Exchange Online November 1 appeared first on Practical 365.
- The Case for Azure AD Join
Despite the growing acceptance of Azure AD to manage identities, one of its main advantages as a platform that manages and secures identities is Azure AD join (AADJ), which still elicits hesitation amongst many IT professionals. This article delves into the justifications for switching to Azure AD join, breaks down some myths around it, and explains why your default position should be Azure AD join. The post The Case for Azure AD Join appeared first on Practical 365.