ADK Cyber

ADK Cyber is a boutique security firm helping healthcare organizations and regional businesses defend against modern threats — with the depth of a national MSSP

[ADK Cyber @ADKCyber]

New MedusaHVNC malware provides covert remote access on Windows systems. SMBs should verify endpoint detection effectiveness. https://t.co/JWMuOSp6gb

via SecurityWeek

#CyberSecurity #InfoSec #Malware #Ransomware

[ADK Cyber @ADKCyber]

A PoC exploit for the Certighost vulnerability in Windows Active Directory Certificate Services can enable domain compromise. Review certificate services configurations promptly. https://t.co/rDFzvSARv6

via BleepingComputer

#CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning

[ADK Cyber @ADKCyber]

Arista patched a critical zero-day in on-premises VeloCloud Orchestrator under active attack. Review your SD-WAN deployments and apply updates immediately.

via BleepingComputer

#CyberSecurity #InfoSec

[ADK Cyber @ADKCyber]

Organizations using FastJson in Java apps should audit dependencies now due to active zero-day exploitation targeting US firms. https://t.co/uMFVJewgyj…

via BleepingComputer

#CyberSecurity #InfoSec #Vulnerability

[ADK Cyber @ADKCyber]

Sen. Wyden urges federal agencies to replace legacy public-facing VPNs after major attacks. Businesses using similar setups should review remote access now. https://t.co/JWMuOSp6gb

via CyberScoop

#CyberSecurity #InfoSec

[ADK Cyber @ADKCyber]

Arista VeloCloud Orchestrator On-Prem OS command injection added to CISA KEV. If you use this solution, review and apply updates to protect confidentiality and availability.

via CISA KEV

#CyberSecurity #InfoSec #AI #MachineLearning

[ADK Cyber @ADKCyber]

CISA KEV: Fortinet FortiOS vulnerability enables sensitive data exposure via crafted requests after prior compromise. Review and update FortiOS deployments promptly.

via CISA KEV

#CyberSecurity #InfoSec #Vulnerability

[ADK Cyber @ADKCyber]

MainWP Child WordPress plugin before 6.1.2 vulnerable to identity bypass in site registration (CVE-2026-12255, CVSS 8.1). Update if password auth is disabled. https://t.co/BEBTbzp1ub…

via NVD Recent High CVSS

#CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning

[ADK Cyber @ADKCyber]

DentaQuest breach may impact 23M people with personal and dental data. Healthcare providers should review incident response plans and vendor controls. https://t.co/JWMuOSp6gb

via SecurityWeek

#CyberSecurity #InfoSec

[ADK Cyber @ADKCyber]

Hacked public Wi-Fi gateways are harvesting Microsoft 365 credentials from corporate travelers. Ensure staff use VPNs on any public network.

via SecurityWeek

#CyberSecurity #InfoSec

[ADK Cyber @ADKCyber]

MCBS data breach impacts 1.2M individuals after ransomware theft of 3TB. Healthcare organizations should review incident response plans. https://t.co/JWMuOSp6gb

via SecurityWeek

#CyberSecurity #InfoSec #Malware #Ransomware

[ADK Cyber @ADKCyber]

PTC Windchill is under active ransomware exploitation. Organizations using this software should verify patches and review access controls immediately: https://t.co/vhiGdof0xD…

via SecurityWeek

#CyberSecurity #InfoSec #Malware #Ransomware #Vulnerability

[ADK Cyber @ADKCyber]

GitHub and PyPI added time-based defenses in Dependabot to limit supply chain attack impact. Review your dependency workflows.

via BleepingComputer

#CyberSecurity #InfoSec #AI #MachineLearning

[ADK Cyber @ADKCyber]

CVE-2026-17497 (CVSS 8.3): NoteGen before 0.32.0 ships overly permissive Tauri shell capabilities. Update to 0.32.0+ if in use. https://t.co/rT6KbdlNvr

via NVD Recent High CVSS

#CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning

[ADK Cyber @ADKCyber]

Chick-fil-A breach hit 13k+ accounts via credential stuffing. Businesses: enforce MFA and unique passwords to protect logins. https://t.co/JWMuOSp6gb

via BleepingComputer

#CyberSecurity #InfoSec

[ADK Cyber @ADKCyber]

Malvertising is using fake Solana, Luno, and TradingView sites to assemble malware in browsers. Verify URLs and review web security controls. https://t.co/JWMuOSp6gb

via BleepingComputer

#CyberSecurity #InfoSec #Malware #Ransomware

[ADK Cyber @ADKCyber]

CVE-2026-15962 (CVSS 8.8): Fluent Forms Pro Add On Pack for WordPress vulnerable to PHP Object Injection up to v6.2.6. Update immediately if in use. https://t.co/LUu5kz54Tt…

via NVD Recent High CVSS

#CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning

[ADK Cyber @ADKCyber]

Knot Resolver versions before 6.4.1 contain a CVSS 8.1 RCE flaw (CVE-2026-66374). Check deployments and update promptly.

via NVD Recent High CVSS

#CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning

[ADK Cyber @ADKCyber]

CVE-2026-66012 (CVSS 10.0) in SiYuan < v3.7.2 allows unauthorized access via the /mcp endpoint. Update to 3.7.2+ if deployed.

via NVD Recent High CVSS

#CyberSecurity #InfoSec #Vulnerability

[Unit 42 @Unit42_Intel]

Four evasion techniques deliver stealthy device code phishing: blob URLs evade network analyzers, custom CAPTCHA gates block URL scanners, SaaS multi-step flows bypass domain reputation checks, plus source-code evasion. Details at https://t.co/OdXKcZ2FWr