Cloud Security starts with you

Scroll for more

Services

01

Data breaches are a certainty. Our breach investigation service is carried out swiftly, discreetly and communicated clearly to you giving you peace of mind.

A security baseline will help you understand if your Microsoft 365 services are adequately protecting your users and data from cyber security risks. 

02

Services

The modern security perimeter now extends beyond an organisation's network to include employee and device identity. Protecting your identity is critical.

Secure Internet access anywhere, anytime on any device, whether your employees are on the corporate network or not, without any on-premises infrastructure!

03

Services

Safeguard your business against malicious threats posed by emails, attachments, links and collaboration tools across Microsoft 365 across all devices.

Data frequently travels beyond corporate network borders, but also across numerous platforms and devices over which your business have little or no control.

Microsoft has revealed that North Korea-linked state-sponsored cyber actors have begun to use artificial intelligence (AI). "They are learning to use tools powered by AI large language models (LLM) to make their operations more efficient and eff
Microsoft has revealed that North Korea-linked state-sponsored cyber actors have begun to use artificial intelligence (AI). "They are learning to use tools powered by AI large language models (LLM) to make their operations more efficient and effective," the tech giant said in its latest report. Microsoft specifically highlighted a group named Emerald Sleet, which has been observed using LLMs to bolster spear-phishing efforts. https://buff.ly/3xxW1UF #Microsoft #AI #cyberthreat #cybercloud
Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly three weeks before it was publicly revealed. Palo Alto's Unit 42 division is tracking the activity under
Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly three weeks before it was publicly revealed. Palo Alto's Unit 42 division is tracking the activity under the name Operation MidnightEclipse, and attributes it to a single unidentified threat actor. The security vulnerability, tracked as CVE-2024-3400 (CVSS score: 10.0), is a command injection flaw that enables unauthenticated attackers to execute arbitrary code with root privileges on the firewall. https://bit.ly/3Uk6dsR #PaloAlto #cybersecurity #CyberCloud
A critical security flaw in the Rust standard library could be exploited to target Windows users and stage command injection attacks. The vulnerability, tracked as CVE-2024-24576, has a CVSS score of 10.0, indicating maximum severity, however it onl
A critical security flaw in the Rust standard library could be exploited to target Windows users and stage command injection attacks. The vulnerability, tracked as CVE-2024-24576, has a CVSS score of 10.0, indicating maximum severity, however it only impacts scenarios where batch files are invoked on Windows with untrusted arguments. An attacker able to control the arguments passed to the spawned process could execute arbitrary shell commands by bypassing the escape arguments. The flaw impacts all versions of Rust before 1.77.2. https://bit.ly/3vLFoo3 #CyberSecurity #VulnerabilityManagement #CyberCloud
Red Hat recently issued a critical security advisory, alerting users that two versions of the popular data compression tool XZ Utils have been compromised with malicious code intended to permit unauthorised remote access. This software supply chain
Red Hat recently issued a critical security advisory, alerting users that two versions of the popular data compression tool XZ Utils have been compromised with malicious code intended to permit unauthorised remote access. This software supply chain breach, known as CVE-2024-3094, carries a maximum severity rating of 10.0 on the CVSS scale and impacts versions 5.6.0 and 5.6.1 of XZ Utils. The audacious compromise was brought to light by Microsoft engineer and PostgreSQL developer Andres Freund, who discovered a backdoor in the utility that enables remote attackers to bypass secure shell authentication and gain full control over a compromised system. XZ Utils is a command-line utility used for data compression and decompression on Linux and other Unix-like operating systems. https://buff.ly/4cGiIGG #RedHat #securityalert #Linux #CyberCloud
Nation-state actors linked to Russia, North Korea, Iran, and China are dabbling in artificial intelligence (AI) and advanced language models (LLMs) to enhance their cyber-attack strategies. A report by Microsoft and OpenAI reveals that they disrupt
Nation-state actors linked to Russia, North Korea, Iran, and China are dabbling in artificial intelligence (AI) and advanced language models (LLMs) to enhance their cyber-attack strategies. A report by Microsoft and OpenAI reveals that they disrupted efforts made by five state-affiliated actors to perform AI-driven malicious cyber activities by terminating their assets and accounts. LLMs inherently incorporate language capabilities, making them appealing to threat actors who rely on false and deceptive communications tailored to their targets' professions, networks, and relationships. https://buff.ly/3SEYhR1 #OpenAI #Microsoft #cyberattack #CyberCloud
Microsoft recently announced that the Kremlin-backed threat actor Midnight Blizzard, also known as APT29 or Cozy Bear, was able to infiltrate some of its source code repositories and internal systems after a security breach in January 2024. The com
Microsoft recently announced that the Kremlin-backed threat actor Midnight Blizzard, also known as APT29 or Cozy Bear, was able to infiltrate some of its source code repositories and internal systems after a security breach in January 2024. The company stated that they have observed evidence of Midnight Blizzard using data obtained from their corporate email systems to gain unauthorised access. This unauthorised access included entry into certain source code repositories and internal systems. Fortunately, there is no indication that any systems directly facing Microsoft customers have been compromised. https://buff.ly/43j8oQA #Microsoft #SecurityBreach #MidnightBlizzard #CyberCloud
Cybersecurity experts have detected two vulnerabilities in open-source Wi-Fi software used in Android, Linux, and ChromeOS devices that could deceive users into connecting to a fake network or enable an attacker to access a trusted network without a
Cybersecurity experts have detected two vulnerabilities in open-source Wi-Fi software used in Android, Linux, and ChromeOS devices that could deceive users into connecting to a fake network or enable an attacker to access a trusted network without a password. The security flaws, known as CVE-2023-52160 and CVE-2023-52161, were uncovered during an assessment of wpa_supplicant and Intel's iNet Wireless Daemon (IWD). The flaws allow attackers to trick victims into connecting to malicious clones of trusted networks and intercept their traffic and join otherwise secure networks without needing the password. https://buff.ly/433sH4a #Cybersecurity #InteliNet #Wi-Fi #CyberCloud
Microsoft has acknowledged the presence of a critical security flaw in Exchange Server that has been actively exploited in the wild. This vulnerability, tracked as CVE-2024-21410 (CVSS score of 9.8), involves privilege escalation affecting the Exch
Microsoft has acknowledged the presence of a critical security flaw in Exchange Server that has been actively exploited in the wild. This vulnerability, tracked as CVE-2024-21410 (CVSS score of 9.8), involves privilege escalation affecting the Exchange Server. An attacker could target an NTLM client such as Outlook with an NTLM credentials-leaking type vulnerability. The leaked credentials can then be relayed against the Exchange server to gain privileges as the victim client and to perform operations on the Exchange server on the victim's behalf. https://buff.ly/4bNOAsm #security #Microsoft #Exchange Server #CyberCloud
Nation-state actors linked to Russia, North Korea, Iran, and China are testing out artificial intelligence (AI) and large language models (LLMs) to enhance their cyberattack strategies. A recent report by Microsoft in partnership with OpenAI reveal
Nation-state actors linked to Russia, North Korea, Iran, and China are testing out artificial intelligence (AI) and large language models (LLMs) to enhance their cyberattack strategies. A recent report by Microsoft in partnership with OpenAI reveals that these actors have been utilising AI technologies to support their malicious activities. Microsoft and OpenAI have taken steps to disrupt the operations of five state-affiliated groups by shutting down their AI-based assets and accounts. https://buff.ly/49zdyJV #cyberattack #OpenAI #Microsoft #CyberCloud
Microsoft recently disclosed that it was targeted by a nation-state attack on its corporate systems. The attack resulted in the theft of emails and attachments from senior executives and individuals in the company's cybersecurity and legal department
Microsoft recently disclosed that it was targeted by a nation-state attack on its corporate systems. The attack resulted in the theft of emails and attachments from senior executives and individuals in the company's cybersecurity and legal departments. The attack was attributed to a Russian advanced persistent threat (APT) group known as Midnight Blizzard (formerly Nobelium), also identified as APT29, BlueBravo, Cloaked Ursa, Cozy Bear, and The Dukes. Microsoft took immediate action to investigate, disrupt, and mitigate the malicious activity upon its discovery on January 12, 2024. The campaign is estimated to have started in late November 2023 https://buff.ly/3OadmZE #Microsoft #Cybersecurity #MidnightBlizzard #CyberCloud
Juniper Networks has released out-of-band updates to address high-severity flaws in SRX Series and EX Series that could be exploited by a threat actor to take control of susceptible systems. The vulnerabilities, tracked as CVE-2024-21619 and CVE-202
Juniper Networks has released out-of-band updates to address high-severity flaws in SRX Series and EX Series that could be exploited by a threat actor to take control of susceptible systems. The vulnerabilities, tracked as CVE-2024-21619 and CVE-2024-21620, are rooted in the J-Web component and impact all versions of Junos OS. https://buff.ly/49gNgMm #Juniper Networks #cybersecurity #cyberthreat #Cybercloud
Operation Triangulation spyware attacks targeted Apple iOS devices using never-before-seen exploits to bypass hardware-based security protections. Four zero-day flaws were leveraged to gain unprecedented access and gather sensitive information from d
Operation Triangulation spyware attacks targeted Apple iOS devices using never-before-seen exploits to bypass hardware-based security protections. Four zero-day flaws were leveraged to gain unprecedented access and gather sensitive information from devices running iOS versions up to iOS 16.2. https://buff.ly/3vlStDW #cybersecurity #spyware #CyberCloud
Microsoft is once again disabling the ms-appinstaller protocol handler by default due to its abuse by threat actors. They have been using this protocol handler to distribute malware, particularly ransomware. The attacks involve signed malicious MSIX
Microsoft is once again disabling the ms-appinstaller protocol handler by default due to its abuse by threat actors. They have been using this protocol handler to distribute malware, particularly ransomware. The attacks involve signed malicious MSIX application packages being distributed through Microsoft Teams or malicious advertisements on search engines like Google. https://buff.ly/3GXjxw7 #CyberCloud #malware #microsoft
A new zero-day security flaw has been discovered in Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system that could be exploited to bypass authentication protections. The vulnerability, tracked as CVE-2023-51467, resides in the log
A new zero-day security flaw has been discovered in Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system that could be exploited to bypass authentication protections. The vulnerability, tracked as CVE-2023-51467, resides in the login functionality and is the result of an incomplete patch for another critical vulnerability (CVE-2023-49070, CVSS score: 9.8). https://buff.ly/48BeOf5 #Securityflaw #OfBiz #ERP #CyberCloud
Microsoft warns about Storm-0539, a new threat engaging in gift card fraud and theft through sophisticated phishing attacks. Attackers aim to deceive victims with malicious links, bypassing multi-factor authentication. Stay vigilant against suspiciou
Microsoft warns about Storm-0539, a new threat engaging in gift card fraud and theft through sophisticated phishing attacks. Attackers aim to deceive victims with malicious links, bypassing multi-factor authentication. Stay vigilant against suspicious emails and messages this holiday season. https://buff.ly/48kLDwK #Cybersecurity #PhishingThreats #CyberCloud
The UEFI code used by BIOS vendors has vulnerabilities in its image parsing libraries. These vulnerabilities, known as LogoFAIL, can allow threat actors to exploit the firmware and bypass security technologies like Secure Boot and Intel Boot Guard.
The UEFI code used by BIOS vendors has vulnerabilities in its image parsing libraries. These vulnerabilities, known as LogoFAIL, can allow threat actors to exploit the firmware and bypass security technologies like Secure Boot and Intel Boot Guard. By injecting a malicious logo image file into the EFI system partition during boot, malware can be delivered to compromised systems. https://buff.ly/3tg3Oow #UEFI #firmwaresecurity #CyberCloud
New research reveals security flaws in fingerprint sensors on Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops that can be used to bypass Windows Hello. The flaws were discovered by researchers at Blackwing Intelligence, w
New research reveals security flaws in fingerprint sensors on Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops that can be used to bypass Windows Hello. The flaws were discovered by researchers at Blackwing Intelligence, who found weaknesses in the fingerprint sensors from Goodix, Synaptics, and ELAN that are embedded into the devices. Exploitation is possible with pre-existing fingerprint authentication https://buff.ly/47HHTFi #Cybersecurity #Vulnerabilities #FingerprintSensors #LaptopSecurity
Intel has released fixes for a high-severity flaw called Reptar that affects its desktop, mobile, and server CPUs. The flaw, known as CVE-2023-23583 (CVSS score: 8.8), could potentially allow privilege escalation, information disclosure, and denial o
Intel has released fixes for a high-severity flaw called Reptar that affects its desktop, mobile, and server CPUs. The flaw, known as CVE-2023-23583 (CVSS score: 8.8), could potentially allow privilege escalation, information disclosure, and denial of service through local access. It could also bypass the CPU's security boundaries by exploiting how redundant prefixes are interpreted by the processor. https://buff.ly/4101RsW
VMware has warned of a critical and unpatched security flaw in Cloud Director that could be exploited by a malicious actor to get around authentication protections. Tracked as CVE-2023-34060 (CVSS: 9.8), the vulnerability impacts instances that have
VMware has warned of a critical and unpatched security flaw in Cloud Director that could be exploited by a malicious actor to get around authentication protections. Tracked as CVE-2023-34060 (CVSS: 9.8), the vulnerability impacts instances that have been upgraded to version 10.5 from an older version. On VMware Cloud Director Appliance 10.5, a malicious actor with network access to the appliance can bypass login restrictions when authenticating on port 22 (ssh) or port 5480 (appliance management console). https://buff.ly/3R6pkFs #VMware #securityflaw #vulnerability #CloudDirector #cybersecurity #CyberCloud
Microsoft has revealed that North Korea-linked state-sponsored cyber actors have begun to use artificial intelligence (AI). "They are learning to use tools powered by AI large language models (LLM) to make their operations more efficient and eff Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly three weeks before it was publicly revealed. Palo Alto's Unit 42 division is tracking the activity under A critical security flaw in the Rust standard library could be exploited to target Windows users and stage command injection attacks. The vulnerability, tracked as CVE-2024-24576, has a CVSS score of 10.0, indicating maximum severity, however it onl Red Hat recently issued a critical security advisory, alerting users that two versions of the popular data compression tool XZ Utils have been compromised with malicious code intended to permit unauthorised remote access. This software supply chain Nation-state actors linked to Russia, North Korea, Iran, and China are dabbling in artificial intelligence (AI) and advanced language models (LLMs) to enhance their cyber-attack strategies. A report by Microsoft and OpenAI reveals that they disrupt Microsoft recently announced that the Kremlin-backed threat actor Midnight Blizzard, also known as APT29 or Cozy Bear, was able to infiltrate some of its source code repositories and internal systems after a security breach in January 2024. The com Cybersecurity experts have detected two vulnerabilities in open-source Wi-Fi software used in Android, Linux, and ChromeOS devices that could deceive users into connecting to a fake network or enable an attacker to access a trusted network without a Microsoft has acknowledged the presence of a critical security flaw in Exchange Server that has been actively exploited in the wild. This vulnerability, tracked as CVE-2024-21410 (CVSS score of 9.8), involves privilege escalation affecting the Exch Nation-state actors linked to Russia, North Korea, Iran, and China are testing out artificial intelligence (AI) and large language models (LLMs) to enhance their cyberattack strategies. A recent report by Microsoft in partnership with OpenAI reveal Microsoft recently disclosed that it was targeted by a nation-state attack on its corporate systems. The attack resulted in the theft of emails and attachments from senior executives and individuals in the company's cybersecurity and legal department Juniper Networks has released out-of-band updates to address high-severity flaws in SRX Series and EX Series that could be exploited by a threat actor to take control of susceptible systems. The vulnerabilities, tracked as CVE-2024-21619 and CVE-202 Operation Triangulation spyware attacks targeted Apple iOS devices using never-before-seen exploits to bypass hardware-based security protections. Four zero-day flaws were leveraged to gain unprecedented access and gather sensitive information from d Microsoft is once again disabling the ms-appinstaller protocol handler by default due to its abuse by threat actors. They have been using this protocol handler to distribute malware, particularly ransomware. The attacks involve signed malicious MSIX A new zero-day security flaw has been discovered in Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system that could be exploited to bypass authentication protections. The vulnerability, tracked as CVE-2023-51467, resides in the log Microsoft warns about Storm-0539, a new threat engaging in gift card fraud and theft through sophisticated phishing attacks. Attackers aim to deceive victims with malicious links, bypassing multi-factor authentication. Stay vigilant against suspiciou The UEFI code used by BIOS vendors has vulnerabilities in its image parsing libraries. These vulnerabilities, known as LogoFAIL, can allow threat actors to exploit the firmware and bypass security technologies like Secure Boot and Intel Boot Guard. New research reveals security flaws in fingerprint sensors on Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops that can be used to bypass Windows Hello. The flaws were discovered by researchers at Blackwing Intelligence, w Intel has released fixes for a high-severity flaw called Reptar that affects its desktop, mobile, and server CPUs. The flaw, known as CVE-2023-23583 (CVSS score: 8.8), could potentially allow privilege escalation, information disclosure, and denial o VMware has warned of a critical and unpatched security flaw in Cloud Director that could be exploited by a malicious actor to get around authentication protections. Tracked as CVE-2023-34060 (CVSS: 9.8), the vulnerability impacts instances that have