GTIA ISAO

📣 Join us TODAY as MJ Shoer, CompTIA, and Patrick Beggs, ConnectWise, delve into the recent ScreenConnect vulnerability and provide valuable insights on how to enhance #cybersecurity hygiene to safeguard against attacks 🌐 🔒 🔗 s.comptia.org/3T8TibN #CompTIACommunity

Nominations for the 2023 Spotlight Awards are closing soon! Do you know an active ISAO member who is a good fit for the Cybersecurity Award? Nominate them today! Find the full details and nomination link here👇 s.comptia.org/3V97O2E

Nominations for the 2023 Spotlight Awards are open. Do you know an active ISAO member who is a good fit for the Cybersecurity Award? Nominate them today! Find the full details and nomination link here👇 s.comptia.org/3V97O2E

Wayne Selk, executive director of the CompTIA ISAO, is back to review this week's activity in the Cyber Forums. s.comptia.org/3Ib5uCE

This week on the Cyber5 podcast, we discuss a report that impacts all Cisco VPN routers, which have been end-of-life with a remote code executable needing attention. s.comptia.org/39XFpuq

Wayne Selk, executive director of the CompTIA ISAO, is back to review the latest activity in the Cyber Forums, including the Microsoft June Server Patch release and backups failing. s.comptia.org/3yhtd0Z

Wayne Selk, executive director of the CompTIA ISAO, is back to review last week's activity in the Cyber Forums. s.comptia.org/3NUJlKV

Chinese-linked threat actors are now actively exploiting a Microsoft Office zero-day vulnerability (known as 'Follina') to execute malicious code remotely on Windows systems. s.comptia.org/3M7d2GZ

Phishing campaigns attributed to an advanced threat actor called SideWinder involved a fake VPN app for Android devices published on Google Play Store along with a custom tool that filters victims for better targeting. s.comptia.org/3t8TiMz

Microsoft has shared mitigation measures to block attacks exploiting a newly discovered Microsoft Office zero-day flaw abused in the wild to execute malicious code remotely. Read: s.comptia.org/3NFDRmO #ISAO #Cybersecurity

Taiwan-based network-attached storage (NAS) maker QNAP warned customers on Thursday to secure their devices against attacks pushing DeadBolt ransomware payloads. s.comptia.org/3FYZThX #ISAO

Microsoft warned of brute-forcing attacks targeting Internet-exposed and poorly secured Microsoft SQL Server database servers using weak passwords. s.comptia.org/3PvS33K #ISAO

WordPress security analysts have discovered a set of vulnerabilities impacting the Jupiter Theme and JupiterX Core plugins for WordPress, one of which is a critical privilege escalation flaw. s.comptia.org/3LwaJx1 #ISAO

Hackers are massively exploiting a remote code execution vulnerability, CVE-2021-25094, in the Tatsu Builder plugin for WordPress, which is installed on about 100,000 websites. s.comptia.org/3lvmnNO #ISAO

Security researchers have found a new post-exploitation framework that they dubbed IceApple, deployed mainly on Microsoft Exchange servers across a wide geography. s.comptia.org/3N6vDnp #ISAO

The U.S. Cybersecurity and Infrastructure Security Agency has added a new security vulnerability to its list of actively exploited bugs, the critical severity CVE-2022-1388 affecting BIG-IP network devices. s.comptia.org/3L5hsOd #ISAO

Members of the Five Eyes intelligence alliance are warning #MSPs and their customers that they're increasingly targeted by supply chain attacks. s.comptia.org/3wnmIYc #ISAO

Yesterday was Microsoft's May 2022 Patch Tuesday, and with it came fixes for three zero-day vulnerabilities, with one actively exploited, and a total of 75 flaws. s.comptia.org/3N5z6CL #ISAO

The notorious ransomware operation known as REvil (aka Sodin or Sodinokibi) has resumed after six months of inactivity, an analysis of new ransomware samples has revealed. s.comptia.org/395gOTw #ISAO

Threat actors started massively exploiting the critical remote code execution vulnerability, tracked as CVE-2022-1388, affecting F5 BIG-IP. s.comptia.org/3wp0uoO #ISAO