by Jesper Kråkhede, Sweden
Posted in Business on Dec 31st, 2019
It is New Year´s Eve again. The family is getting ready, the champagne is cooling and the security architect is writing a blog post. Some things never change. What did 2019 teach management? For me it was the year when the supply chain became the attack surface. Outsourcing providers were used as a way into […]
Posted in Security Architecture, Technology on Dec 23rd, 2019
On the 17th of December Citrix released an advisory for a critical vulnerability in Citrix ADC and Citrix Gateway, formerly known as NetScaler. An attacker without credentials can execute code on the device. There is no patch yet, only a configuration change that mitigates it. Think about where these devices sit. At the edge of […]
Posted in Business, Security Architecture on Dec 19th, 2019
On the 4th of November one of Spain´s largest IT consultancies was hit by ransomware. The employees were told to keep their computers turned off and the company disconnected the network to its clients. Some of their customers cut the connections from their side as well, just to be on the safe side. Imagine being […]
Posted in Technology on Dec 19th, 2019
In July I wrote that BlueKeep was a matter of time. On the 2nd of November security researcher Kevin Beaumont saw his honeypots crash, and it turned out that someone was using BlueKeep to install cryptocurrency miners on exposed RDP servers. The good news is that this was not the big worm everyone feared. It […]