Trouble strikes again as Adobe patches security vulnerabilities in Flash Player – including a zero-day vulnerability that has been spotted being exploited in the wild.

Whether you are the CIO, the CISO or a Business Engagement Manager, your life is a constant battle to ensure a reasonable security posture while balancing costs, usability, technology, user behaviour, transformation and agility. Suffering a breach is no longer a question of “if,” but “when” and “how big”.

In the month of November,  a UK law firm learnt the hard way the importance of limiting privileges of the local administration shares on their endpoints when the popular Emotet malware appeared in their estate.

Shodan is a free security tool helping defenders keep track of all the computers on their network that are directly accessible from the Internet. Shodan makes it easy to search a subnet or domain for connected devices, open ports, default credentials, even known vulnerabilities.

Spam and phishing campaigns remain a firm favourite infection vector for malicious actors but cybercriminals appear to be expanding the file types they abuse in an effort to find more effective ways to distribute malware.

Researchers at Automated Breach and Attack Simulation solution provider Cymulate have reportedly found a vulnerability in Microsoft Word’s online video feature that allows threat actors to replace legitimate YouTube iframe code with malicious HTML/JavaScript code.