The Cyber Unc

1.4K Followers
706 Following
1.4K Posts

Above-average tech nerd. Husband. Father. Millennial. Associate C|CISO.

I work in IT with a focus on Managed Services and Cybersecurity, helping small and midsize orgs stay online and less on fire.

Interests include:
#CyberSecurity #InfoSec #Privacy #IT #RMM #SysAdmin #Python #Apple #iOS #Tech

searchable
Formerly (@beardedtechguy)

Bloghttps://kylereddoch.me
Socialshttps://profile.kylereddoch.me
GitHubhttps://github.com/kylereddoch
/Useshttps://www.kylereddoch.me/uses/
Buy me a coffeehttps://purl.kylereddoch.me/kofi
Apparently you can't escape Microsoft Outlook issues even in space as Artemis II astronauts ask NASA for help with the software

Yes, Microsoft apps can cause a problem even in space.

PC Gamer
EvilTokens abuses Microsoft device code flow for account takeovers

The phishing-as-a-service toolkit leverages legitimate authentication to capture tokens and access Microsoft 365 services.

CSO Online
New CrystalRAT malware adds RAT, stealer and prankware features

A new malware-as-a-service called CrystalRAT is being promoted on Telegram, offering remote access, data theft, keylogging, and clipboard hijacking capabilities.

BleepingComputer
Cybersecurity in the age of instant software

As AI advances, the rise of instant, customized, and often ephemeral software solutions will alter the dynamics of vulnerability hunting and patching, and thus the battle between attackers and defenders.

CSO Online

Just another day with Cisco in the news.

Critical Cisco IMC auth bypass gives attackers Admin access https://www.bleepingcomputer.com/news/security/critical-cisco-imc-auth-bypass-gives-attackers-admin-access/

#cybersecurity #infosec #cisco

Critical Cisco IMC auth bypass gives attackers Admin access

Cisco has patched several critical and high-severity vulnerabilities, including an Integrated Management Controller (IMC) authentication bypass that enables attackers to gain Admin access.

BleepingComputer
15-Year-Old strongSwan Flaw Lets Attackers Crash VPNs via Integer Underflow https://hackread.com/strongswan-flaw-attackers-crash-vpn-integer-underflow/
15-Year-Old “Ghost” Bug in strongSwan Could Take VPN Networks Offline

15-year-old strongSwan flaw allows attackers to crash VPNs via integer underflow bug, affecting EAP-TTLS plugin and multiple versions worldwide.

Hackread - Cybersecurity News, Data Breaches, AI and More

New by me: The biggest cybersecurity risk for SMBs still isn’t the flashy stuff.

The latest SonicWall Cyber Protect Report really drove that home for me. Good security is usually less about hype and more about execution.

https://www.kylereddoch.me/blog/the-biggest-cybersecurity-risk-for-smbs-still-isnt-the-fancy-stuff/

#cybersecurity #infosec #msp #smb #security

The Biggest Cybersecurity Risk for SMBs Still Isn’t the Fancy Stuff

The latest Cyber Protect Report from SonicWall makes a strong case that most small business security failures still come down to weak fundamentals, false confidence, and poor execution rather than flashy advanced threats.

CybersecKyle

New by me: The biggest cybersecurity risk for SMBs still isn’t the flashy stuff.

The latest SonicWall Cyber Protect Report really drove that home for me. Good security is usually less about hype and more about execution.

https://www.kylereddoch.me/blog/the-biggest-cybersecurity-risk-for-smbs-still-isnt-the-fancy-stuff/

#cybersecurity #infosec #msp #smb #security

The Biggest Cybersecurity Risk for SMBs Still Isn’t the Fancy Stuff

The latest Cyber Protect Report from SonicWall makes a strong case that most small business security failures still come down to weak fundamentals, false confidence, and poor execution rather than flashy advanced threats.

CybersecKyle
I’m thinking about a total redesign of my site.

My desire for a foldable grows stronger every single day.

#Tech #IT #FoldableTech #iPhone #Samsung