Enjoying the content? Let us know your feedback!

The episode before last, we've looked at the Malware targetting the Mac world, this time we will look at the other side of the fense, the Linux echo systems.
The linux platform is the one operating system business rely on for their  mission critical applications regardless whether they are on-premise, cloud native or somewhere in between i.e. hybrid.

Yusuf on Security is 1 year old! Time flies when you are talking security every week for 52 weeks consecutively. And in doing you are informing the people.

https://www.centos.org: CentOS end of life
https://thehackernews.com: Patching the CentOS Encryption is urgent...
- arstechnica.com: Google drops FLoC after widespread opposition, pivots to “Topics API” plan
- blog.google: Get to know the new Topics API for Privacy Sandbox


Be sure to subscribe!

If you like the content. Follow me @iayusuf or read my blog at [https://yusufonsecurity.com](https://yusufonsecurity.com/)

You will find a list of all previous episodes in there too.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

Attackers are  resorting to way to cut corners. In doing so they cleverly are increasing their ROI while at the same time keeping pace with  technology advancement
With a new finding by Cisco Talos, we will look into a new campaign employing remote access trojans (RAT), not one or two but three variants of RAT!

-https://www.cisa.gov: Implement Cybersecurity Measures Now to
Protect Against Potential Critical Threats
-https://thehackernews.com: Experts Find Strategic Similarities b/w NotPetya and WhisperGate Attacks on Ukraine
- https://blog.talosintelligence.com: Nanocore, Netwire and AsyncRAT spreading campaign uses public cloud infrastructure
- https://blog.talosintelligence.com: WhisperGate

Be sure to subscribe!

If you like the content. Follow me @iayusuf or read my blog at [https://yusufonsecurity.com](https://yusufonsecurity.com/)

You will find a list of all previous episodes in there too.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

In this show I will have a look at the recent feature to Apple's ecosystem and in particular the Private Relay.
In addition, we will recap other top trending security news which includes poisoned USB drives are sent to businesses and REvil ransomware gangs  allegedly arrested by Russian agents.

-https://therecord.media: FBI - FIN7 Hackers target US companies with BadUS- devices to install ransomware
-https://en.wikipedia.org: REvil
-https://thehackernews.com: Russia arrests REvil ransomware gang
-https://www.macworld.com: icloud plus private relay Safari vpn encryption privacy
-https://support.apple.com: About iCloud Private Relay

-https://developer.apple.com: Technical presentation video on Private Relay

sure to subscribe!

If you like the content. Follow me @iayusuf or read my blog at [https://yusufonsecurity.com](https://yusufonsecurity.com/)

You will find a list of all previous episodes in there too.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

In this episode we will look at a growing threat  facing the Mac world.  While not attacked as much as Windows platform, the signs are showing Mac is indeed not unvulnerable

Before we get into the main topic, lets have a look at a couple of trending security news. This will we briefly talk about Norton 360 which brings you a crypto-mining feature and an important bug patched by VMWare.

-https://krebsonsecurity.com: Norton 360 now comes with a cryptominer
- threatpost.com: Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover
- www.vmware.com: VMware Workstation, Fusion and ESXi updates address a heap-overflow vulnerability (CVE-2021-22045)
-https://vuldb.com: Vulnerability database
-http://objective-see.com: The Mac Malware of 2021

Be sure to subscribe!

If you like the content. Follow me @iayusuf or read my blog at [https://yusufonsecurity.com](https://yusufonsecurity.com/)

You will find a list of all previous episodes in there too.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

There is no better way to start the year than stepping back and having a good look at where you are in your security journey. To that end, a good baseline is not a bad idea. In this episode we will dive into the The Center for Internet Security (CIS) Critical controls. These are great ways to steps through your existing (or lack of) controls.

- www.bleepingcomputer.com: QNAP NAS devices hit in surge of ech0raix ransomware attacks
-https://www.qnap.com: QNAP Recommendations
https://www.sans.org/blog/cis-controls-v8/
- My look at the road ahead - 2022 landscape.
-https://www.sans.org:  CIS Controls v8

Be sure to subscribe!
If you like the content. Follow me @iayusuf or read my blog at [https://yusufonsecurity.com](https://yusufonsecurity.com/)

You will find a list of all previous episodes in there too.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

It is time for YusufOnSecurity, welcome back once again!

In this episode we will go back to the best of 2021 episodes. There are quite a few popular ones.
But first, lets recap the top trending security news.
- techcommunity.microsoft.com: SAM Name impersonation
- www.bleepingcomputer.com: Microsoft warns of easy Windows domain takeover via Active Directory bugs
-https://www.cisa.gov:  CISA, FBI, NSA and international partners issue advisory to mitigate Apache Log4j vulnerabilities

- https://github.com: CISA Scanner

Be sure to subscribe!

If you like the content. Follow me @iayusuf or read my blog at [https://yusufonsecurity.com](https://yusufonsecurity.com/)

You will find a list of all previous episodes in there too.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

It is time for YusufOnSecurity, welcome back once again!

In this episode we will stay on the topic of Log4j still developing vulnerability.

-https://threatpost.com : Malicious Joker App Scores Half-Million Downloads on Google Play

-https://www.bleepingcomputer.com:  Karakurt: A New Emerging Data Theft and Cyber Extortion Hacking Group

-https://yusufonsecurity.com: Log4j vulnerabilities


Be sure to subscribe!

If you like the content. Follow me @iayusuf or read my blog at https://yusufonsecurity.com

You will find a list of all previous episodes in there too.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

In this episode we will cover an actively exploited vulnerability whose importance can not overstated. Well the Internet is on fire, as someone put it. 

In addition, we will recap other top trending security news which includes:

-https://blog.mozilla.org: Site Isolation in Firefox
-https://en.wikipedia.org: Same Origin Policy
-eclypsium.com: When honey bees become murder hornets
- logging.apche.org: Apache log4j vulnerability
-https://www.cisa.gov Most commonly exploited vulnerabilities

Be sure to subscribe!

 If you like the content. Follow me @iayusuf or read my blog at https://yusufonsecurity.com

 You will find a list of all previous episodes in there too.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

In today's episode, we will cover the best practice that we mostly forget this time of the year.

I am sure a lot of you become the Help Desk for the entire family for anything to do with IT or technology.

We will recap the top trending security news which includes:

-https://blog.talosintelligence.com: Attackers exploiting zero-day vulnerability in Windows Installer 

- thehackernews.com: Researches Detail 17 Malicious Frameworks Used to Attack Air-Gapped Networks

- blog.talosintelligence.com: Tips for holiday season from Talos Intelligence
-www.first.org: CVSS FAQ
-www.adobe.com: Adobe Insight’s recent "Holiday Shopping Forecast"

It is all coming up next on YusufOnsecurity!

Be sure to subscribe!

If you like the content. Follow me @iayusuf or read my blog at https://yusufonsecurity.com

You will find a list of all previous episodes in there too.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

In today's episode, lets talk about password and the future of password for that matter.

We will recap the top trending security news which includes:

-www.bbc.co.uk: UK proposed to ban default passwords
-www.apple.com: Apple sues the NSO Group
- www.nytimes.com: The secret life of passwords
-https://fidoalliance.org: What is FIDO?
-https://www.cisco.com: Kiss Passwords G00dby3: Cisco Secure Unveils Passwordless Future with Stronger Security for All

Be sure to subscribe!

If you like the content, follow me @iayusuf or read my blog at https://yusufonsecurity.com

You will find a list of all previous episodes in there too.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.