Today's Headlines and the latest #cybernews from the desk of the #CISO:
Zero-Days Under Attack: Microsoft Plugs Exchange Server, Excel Holes
TeamTNT hackers target your poorly configured Docker servers
SAP Patches Critical Vulnerability in ABAP Platform Kernel
These invisible characters could be hidden backdoors in your JS code
Cyber-mercenary group Void Balaur has been hacking companies for years
Story Links:
https://www.securityweek.com/zero-days-under-attack-microsoft-plugs-exchange-server-excel-holes (https://www.securityweek.com/zero-days-under-attack-microsoft-plugs-exchange-server-excel-holes)
https://www.bleepingcomputer.com/news/security/teamtnt-hackers-target-your-poorly-configured-docker-servers/ (https://www.bleepingcomputer.com/news/security/teamtnt-hackers-target-your-poorly-configured-docker-servers/)
https://www.securityweek.com/sap-patches-critical-vulnerability-abap-platform-kernel (https://www.securityweek.com/sap-patches-critical-vulnerability-abap-platform-kernel)
https://www.bleepingcomputer.com/news/security/these-invisible-characters-could-be-hidden-backdoors-in-your-js-code/ (https://www.bleepingcomputer.com/news/security/these-invisible-characters-could-be-hidden-backdoors-in-your-js-code/)
https://therecord.media/cyber-mercenary-group-void-balaur-has-been-hacking-companies-for-years/ (https://therecord.media/cyber-mercenary-group-void-balaur-has-been-hacking-companies-for-years/)
“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine (https://jamesazar.substack.com/p/the-microsoft-doctrine)
The Practitioner Brief is sponsored by:
KnowBe4: https://info.knowbe4.com/phishing-security-test-cyberhub (https://info.knowbe4.com/phishing-security-test-cyberhub)
****
Find James Azar Host of CyberHub Podcast, CISO Talk, Goodbye Privacy, Tech Town Square, and Other Side of Cyber
James on Linkedin: https://www.linkedin.com/in/james-j-azar/ (https://www.linkedin.com/in/james-j-azar/)
James on Parler: @realjamesazar
Telegram: CyberHub Podcast
Locals: https://cyberhubpodcast.locals.com
******
Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month: http://bit.ly/cyberhubengage-newsletter (https://www.youtube.com/redirect?v=64OtAZsDEeo&event=video_description&redir_token=7clfSb1AyXDXZa4GVIPiUJ3h9LB8MTU5MDU5MjczOUAxNTkwNTA2MzM5&q=http%3A%2F%2Fbit.ly%2Fcyberhubengage-newsletter)
******
Website: https://www.cyberhubpodcast.com (https://www.youtube.com/redirect?v=64OtAZsDEeo&event=video_description&redir_token=7clfSb1AyXDXZa4GVIPiUJ3h9LB8MTU5MDU5MjczOUAxNTkwNTA2MzM5&q=https%3A%2F%2Fwww.cyberhubpodcast.com)
Youtube: https://www.youtube.com/channel/UCPoU8iZfKFIsJ1gk0UrvGFw (https://www.youtube.com/channel/UCPoU8iZfKFIsJ1gk0UrvGFw)
Facebook: https://www.facebook.com/CyberHubpodcast/ (https://www.facebook.com/CyberHubpodcast/)
Linkedin: https://www.linkedin.com/company/cyberhubpodcast/
Twitter: https://twitter.com/cyberhubpodcast (http://www.twitter.com/cyberhubpodcast)
Instagram: https://www.instagram.com/cyberhubpodcast
Listen here: https://linktr.ee/cyberhubpodcast (https://linktr.ee/cyberhubpodcast)
The Hub of the Infosec Community.
Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.