A botnet exploited vulnerabilities in SPF DNS record configurations, compromising 13,000 MikroTik devices and spoofing around 20,000 web domains to spread malware. The result was a widespread spoofing attack carrying malware-laden attachments. It is recommended to avoid permissive SPF configurations, regularly check DNS records, and use Hosted SPF services with Macros in order to prevent such attacks.

The NHS needs to tighten its third-party supplier cybersecurity
The NHS should proactively fortify cybersecurity within its third-party software suppliers following recent damaging ransomware attacks, says Jonathan Lee from Trend Micro. He suggests implementing