Forest Global Training Partners

Cyber Risks · Cisco Talos

Know thyself, know thy environment

Summary: Cisco Talos disclosed vulnerabilities in catdoc, Parallel, NVIDIA and High-Logic FontCreator software, and because the catdoc vendor was unreachable, Talos provided patches directly. The newsletter also notes a Qilin ransomware attack on the NHS in England that caused a severe shortage of O-negative blood and prompted a call for one million donors.

Bottom line: A vendor Talos could not reach left patching to the security firm itself, so software you depend on may carry privilege escalation, memory corruption and data leak risks with no one on the other end to fix them. The NHS attack shows the downstream cost: one ransomware incident drove a national call for one million blood donors.

Read the original at Cisco Talos ↗

Topics
Malware
Related