Today's Headlines and the latest #cybernews from the desk of the #CISO:
Fake Kaseya VSA security update backdoors networks with Cobalt Strike
Critical Sage X3 RCE Bug Allows Full System Takeovers
MacOS Targeted in WildPressure APT Malware Campaign
Android Updates for July 2021 Patch Tens of High-Severity Vulnerabilities
Story Links:
https://www.bleepingcomputer.com/news/security/fake-kaseya-vsa-security-update-backdoors-networks-with-cobalt-strike/ (https://www.bleepingcomputer.com/news/security/fake-kaseya-vsa-security-update-backdoors-networks-with-cobalt-strike/)
https://threatpost.com/critical-sage-x3-rce-bug-allows-full-system-takeovers/167612/ (https://threatpost.com/critical-sage-x3-rce-bug-allows-full-system-takeovers/167612/)
https://threatpost.com/macos-wildpressure-apt/167606/ (https://threatpost.com/macos-wildpressure-apt/167606/)
https://www.securityweek.com/android-updates-july-2021-patch-tens-high-severity-vulnerabilities (https://www.securityweek.com/android-updates-july-2021-patch-tens-high-severity-vulnerabilities)
“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine (https://jamesazar.substack.com/p/the-microsoft-doctrine)
CISOTalk Webinar Series: Closing the Gap Between Endpoints and Identity Protection with Carolyn Crandall and Joseph Salazar from Attivo Networks: Sign up here: https://us06web.zoom.us/webinar/register/WN_UNRepQ7mST-D8j46os228Q
The Practitioner Brief is sponsored by:
KnowBe4: https://info.knowbe4.com/phishing-security-test-cyberhub (https://info.knowbe4.com/phishing-security-test-cyberhub)
Whistic: www.whistic.com/cyberhub (http://www.whistic.com/cyberhub)
Attivo Networks: www.attivonetworks.com
****
Find James Azar Host of CyberHub Podcast, CISO Talk, Goodbye Privacy, Tech Town Square, and Other Side of Cyber
James on Linkedin: https://www.linkedin.com/in/james-azar-a1655316/ (https://www.linkedin.com/in/james-azar-a1655316/)
James on Parler: @realjamesazar
Telegram: CyberHub Podcast
******
Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month: http://bit.ly/cyberhubengage-newsletter (https://www.youtube.com/redirect?v=64OtAZsDEeo&event=video_description&redir_token=7clfSb1AyXDXZa4GVIPiUJ3h9LB8MTU5MDU5MjczOUAxNTkwNTA2MzM5&q=http%3A%2F%2Fbit.ly%2Fcyberhubengage-newsletter)
******
Website: https://www.cyberhubpodcast.com (https://www.youtube.com/redirect?v=64OtAZsDEeo&event=video_description&redir_token=7clfSb1AyXDXZa4GVIPiUJ3h9LB8MTU5MDU5MjczOUAxNTkwNTA2MzM5&q=https%3A%2F%2Fwww.cyberhubpodcast.com)
Youtube: https://www.youtube.com/channel/UCPoU8iZfKFIsJ1gk0UrvGFw (https://www.youtube.com/channel/UCPoU8iZfKFIsJ1gk0UrvGFw)
Facebook: https://www.facebook.com/CyberHubpodcast/ (https://www.facebook.com/CyberHubpodcast/)
Linkedin: https://www.linkedin.com/company/cyberhubpodcast/
Twitter: https://twitter.com/cyberhubpodcast (http://www.twitter.com/cyberhubpodcast)
Instagram: https://www.instagram.com/cyberhubpodcast
Listen here: https://linktr.ee/cyberhubpodcast (https://linktr.ee/cyberhubpodcast)
The Hub of the Infosec Community.
Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.