Insights

Security Update (Updated 14/12/2021 15.30)

On 10th December 2021, Apache announced a new critical vulnerability and fix for Log4j, CVE-2021-44228 dubbed ‘Log4Shell’. This vulnerability affects any organisation that utilises Log4J or has software with underlying Log4J dependencies. Apache is strongly recommending Log4j systems be updated to fixed versions as soon as possible.

Security Update (14/09/2021)

Microsoft’s “Patch Tuesday” has included a fix for CVE-2021-40444. You can find the patch details for each Operating System version here. This round of updates also fixes 85 other vulnerabilities as shown here.

This week, Microsoft disclosed a newly discovered remote code execution vulnerability in MSHTML that affects Microsoft Windows. Integrity360 can confirm that it is actively being exploited in the wild.

Yesterday, it was announced that Fortinet discovered a breach, resulting in the disclosure of almost 500,000 FortiGate SSL-VPN credentials from 87,000 FortiGate SSL-VPN Devices. The attack vector was identified as a system unpatched against CVE-2018-13379.

Microsoft Patch Tuesday January Update

CVE-2020-0610

CVE-2020-0609

CVE-2019-19781

CVE-2020-0601

Integrity360 is delighted to announce that we have won the award for Managed Security Service Provider of the Year at the Tech Excellence Awards 2017.

The global WannaCry Ransomware pandemic is still making headline news and has been well covered by news and tech media outlets. The security teams at Integrity360 have been following analysis & updates closely, from both our industry partners and the wider security community, and working with our customers around the clock to improve their security posture and close any avenues of attack in light of WannaCry.

This update provides a summary of the pertinent details, new developments, our short term expectations and the current recommendations.

Please note that we have issued an updated advisory. (15/05/2017)

Integrity360 is delighted to announce that we have been shortlisted for Managed Security Service Provider of the Year at this year’s Tech Excellence Awards 2017.