by Jesper Kråkhede, Sweden
Posted in Security Architecture, Technology on Dec 31st, 2020
It is New Year´s Eve again. A quieter one this year. Fewer guests, a bit of champagne and, as usual, the security architect writing a blog post. What a year. A year ago I wrote about a strange pneumonia in China and hoped it would stay there. It didn´t. A month later I was thinking […]
Posted in Business, Security Architecture on Dec 24th, 2020
A last business post for this year, about patching. It is the least exciting topic in security and one of the most important. This year we have seen VPN gateways, remote desktop servers and old drivers used to get into companies. In almost every case the patch already existed. Sometimes for months, sometimes for years. […]
Posted in Business, Methodology, Security Architecture on Dec 14th, 2020
In my previous post I wrote about attackers using old vulnerable drivers to switch off security products. Let me continue on the same theme from a patching perspective. Most companies are fairly good at patching Windows by now. Some are good at patching applications. Very few patch drivers and firmware. They come from a long […]