article thumbnail

Microsoft Patch Tuesday, December 2021 Edition

Krebs on Security

“Basically the perfect ending to cybersecurity in 2021 is a 90s style Java vulnerability in an open source module, written by two volunteers with no funding, used by large cybersecurity vendors, undetected until Minecraft chat got pwned, where nobody knows how to respond properly,” researcher Kevin Beaumont quipped on Twitter.

Libraries 299
article thumbnail

Microsoft Patch Tuesday, July 2021 Edition

Krebs on Security

” Among the critical bugs is of course the official fix for the PrintNightmare print spooler flaw in most versions of Windows ( CVE-2021-34527 ) that prompted Microsoft to rush out a patch for a week ago in response to exploit code for the flaw that got accidentally published online. out of a possible 10.

Security 262
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Microsoft Patch Tuesday, April 2021 Edition

Krebs on Security

Microsoft released updates to fix four more flaws in Exchange Server versions 2013-2019 ( CVE-2021-28480 , CVE-2021-28481 , CVE-2021-28482 , CVE-2021-28483 ). ” Also patched today was a vulnerability in Windows ( CVE-2021-28310 ) that’s being exploited in active attacks already. .

article thumbnail

Microsoft Patch Tuesday, November 2021 Edition

Krebs on Security

The other critical flaw patched today that’s already being exploited in the wild is CVE-2021-42321 , yet another zero-day in Microsoft Exchange Server. As Exchange zero-days go, CVE-2021-42321 appears somewhat mild by comparison. Microsoft Corp. Microsoft has published a blog post/FAQ about the Exchange zero-day here.

article thumbnail

2021 State of Analytics: Why Users Demand Better

The sample included 1,931 knowledge workers, or end users, from financial services, healthcare, and manufacturing who are familiar with the analytics tools within their applications. Features and functionalities that are most valuable to them. Strengths and weaknesses of their current analytics solution.

article thumbnail

Patch Tuesday, October 2021 Edition

Krebs on Security

to fix a zero-day vulnerability (CVE-2021-30883) that is being leveraged in active attacks targeting iPhone and iPad users. CVE-2021-38672 affects Windows 11 and Windows Server 2022; CVE-2021-40461 impacts both Windows 11 and Windows 10 systems, as well as Server versions. Firstly, Apple has released iOS 15.0.2

Security 236
article thumbnail

Big Clinic Breach Tied to Vendor's 2021 Ransomware Attack

Data Breach Today

Florida Urgent Care Center Says Incident Involved Billing Vendor PracticeMax A Florida operator of urgent care clinics recently reported to federal regulators a health data breach affecting more than 258,000 individuals tied to a vendor's ransomware attack in May 2021.

article thumbnail

TCO Considerations of Using a Cloud Data Warehouse for BI and Analytics

According to the study conducted by Wakefield Research in 2021, only 22% of the data leaders surveyed have fully realized ROI in the past two years, with most data leaders (56%) having no consistent way of measuring it.

article thumbnail

A Page From an Information Professional’s Book of Secrets: The Right Time to Deploy Your AI

Speaker: Dick Stark and Casey Steenport

September 16, 2021 at 11:00 am PDT, 2:00 pm EDT, 7:00 pm GMT There’s no mistake about it: AI is on the rise. 70% of business decision-makers, information management professionals, and IT experts say that employees focus on more meaningful work with AI compared to those without it. This is an exclusive session you don't want to miss!

article thumbnail

Recovering from a Cyber Attack

Speaker: Mike Cramer, Director of HIPAA & Data Security at The Word & Brown Companies

IBM reported that the total damage from data breaches in 2021 was 4.24M USD (up from 3.86M USD in 2020), easily the highest aggregated amount on record. If your organization stores data and is connected to the Internet, it is not a matter of “if” a cyber-security incident will happen, but “when.”

article thumbnail

Your Team's Pragmatic Guide to Security

Speaker: Naresh Soni, CTO, Tsunami XR

Tuesday February 16th, 2021 at 9:30AM PST, 12:30PM EST, 5:30PM GMT The pandemic has led to new data vulnerabilities, and therefore new cyber security threats. As technology leaders, it's time to rethink some of your product security strategy. What methods and architectures you should consider to proactively protect your data.

article thumbnail

How to Effectively Equip Your IG Program for the Perilous Journey Into the Future

Speaker: Andrew Ysasi, Vice President of Advocacy for Vital Records Control, President of IG GURU®, MS, FIP, FIIM, CIPM, CIGO, CISM, PMP, CRM, IGP, CIP, CSAP

November 4, 2021 at 11:00 am PDT, 2:00 pm EDT, 7:00 pm GMT Over the past couple of years, these frameworks have proven to be ineffective and in need of updating. Information privacy is a critical part of an IG program. Set up a program. Operate a privacy program. Incorporate privacy program management into your IG program. Register today!

article thumbnail

Open Source & Open Standards: Navigating the Intricacies of a Symbiotic Partnership

Speaker: Guy Martin, Executive Director of OASIS Open

March 16, 2021 at 11:00 am PDT, 2:00 pm EDT, 7:00 pm GMT In the early days of technology, the building blocks of strong open standards combined with open source code that implemented these standards set the stage for breakthrough innovations. However, in more recent times, the once-close relationship between these two communities has eroded.