What are the infection risks for a SMB/Samba file share from an infected client PC?

I have a PC on my home network that I consider potentially infected by exposure to an untrusted program from the internet. (Antivirus detected nothing, and the PC runs fine, but I’m choosing to err on the side of caution. The PC is current… Continue reading What are the infection risks for a SMB/Samba file share from an infected client PC?

Veeam fixes auth bypass flaw in Backup Enterprise Manager (CVE-2024-29849)

Veeam has patched four vulnerabilities in Backup Enterprise Manager (VBEM), one of which (CVE-2024-29849) may allow attackers to bypass authentication and log in to its web interface as any user. With no user interaction required for remote exploitatio… Continue reading Veeam fixes auth bypass flaw in Backup Enterprise Manager (CVE-2024-29849)

Are you meeting your cyber insurance requirements?

Cyber insurance policies are specifically designed to offer financial protection to organizations in the face of cyber attacks, data breaches, or other cybersecurity incidents. While they can provide a sense of security, it’s crucial to be aware … Continue reading Are you meeting your cyber insurance requirements?

Veeam fixes RCE flaw in backup management platform (CVE-2024-29212)

Veeam has patched a high-severity vulnerability (CVE-2024-29212) in Veeam Service Provider Console (VSPC) and is urging customers to implement the patch. About CVE-2024-29212 Veeam Service Provider Console is a cloud platform used by managed services p… Continue reading Veeam fixes RCE flaw in backup management platform (CVE-2024-29212)

What makes a ransomware attack eight times as costly? Compromised backups

New research has found that ransomware remediation costs can explode when backups have been compromised by malicious hackers – with overall recovery costs eight times higher than for those whose backups are not impacted.

Read more in my article on t… Continue reading What makes a ransomware attack eight times as costly? Compromised backups

Is Windows 10 ‘Backup and Restore’ sending my password in plaintext on unencryped link?

[Note: I have a Windows 10 system in an air-gapped network as the only computer on the network where it is the acting "server", as part of an RMF-compliant, DAAPM (link to PDF on dcsa.mil) defined "Multi User Standalone
(MUS… Continue reading Is Windows 10 ‘Backup and Restore’ sending my password in plaintext on unencryped link?

Essential elements of a strong data protection strategy

In this Help Net Security interview, Matt Waxman, SVP and GM for data protection at Veritas Technologies, discusses the components of a robust data protection strategy, emphasizing the escalating threat of ransomware. He highlights the importance of ba… Continue reading Essential elements of a strong data protection strategy