Shut Down, Then Patch
A maximum-severity flaw in Kiteworks' email gateway could let attackers take full control, days after the company told customers to go offline.
Key terms
AP Cybersecurity alignment
- 2.1.E.2Risk avoidance stops the activity that is generating the risk. If the activity is a critical part of an organization’s mission or purpose, then avoidance is not possible.Learning objective: Identify strategies for managing risk.
- 4.1.C.1Adversaries can develop exploits for known vulnerabilities in software (including operating systems). Devices with unpatched software are vulnerable to these exploits, which could allow an adversary to crash a system, view…Learning objective: Explain how adversaries can exploit common device vulnerabilities to cause loss, damage, disruption, or destruction.
- 4.3.C.2Ensuring that a computer’s operating system and software applications are updated to the most recent version prevents adversaries from taking advantage of a known vulnerability.Learning objective: Explain why keeping a device’s operating system and software updated makes it more secure.
AP Networking alignment
- 4.1.B.1Network connectivity supports essential tasks such as communication, data access, and service delivery. When connectivity is unreliable, users or employees may lose access to essential systems, which can lead to delays,…Learning objective: Explain how unreliable connectivity impacts organizations.
- 4.6.B.4Applying and documenting software updates and patches reduces the risk of failure and reduces recovery time if an outage occurs.Learning objective: Identify ways to improve the reliability and availability of networked systems.