GTIA ISAO

The GTIA ISAO is dedicated to providing critical threat intelligence to technology vendors, MSPs, solution providers, distributors, and their customers.

[GTIA ISAO @GTIAISAO]

📣 Join us TODAY as MJ Shoer, CompTIA, and Patrick Beggs, ConnectWise, delve into the recent ScreenConnect vulnerability and provide valuable insights on how to enhance #cybersecurity hygiene to safeguard against attacks 🌐 🔒

🔗 https://t.co/VxnVFDdHZg

#CompTIACommunity

[GTIA ISAO @GTIAISAO]

Nominations for the 2023 Spotlight Awards are closing soon!

Do you know an active ISAO member who is a good fit for the Cybersecurity Award? Nominate them today!

Find the full details and nomination link here👇
https://t.co/6p1M2iCU5t

[GTIA ISAO @GTIAISAO]

Nominations for the 2023 Spotlight Awards are open. Do you know an active ISAO member who is a good fit for the Cybersecurity Award? Nominate them today!

Find the full details and nomination link here👇
https://t.co/6p1M2iCU5t

[GTIA ISAO @GTIAISAO]

Wayne Selk, executive director of the CompTIA ISAO, is back to review this week's activity in the Cyber Forums. https://t.co/SXM7Gu3ow0

[GTIA ISAO @GTIAISAO]

This week on the Cyber5 podcast, we discuss a report that impacts all Cisco VPN routers, which have been end-of-life with a remote code executable needing attention. https://t.co/Vde7O397ak

[GTIA ISAO @GTIAISAO]

Wayne Selk, executive director of the CompTIA ISAO, is back to review the latest activity in the Cyber Forums, including the Microsoft June Server Patch release and backups failing. https://t.co/nwjU5vlYzh

[GTIA ISAO @GTIAISAO]

Wayne Selk, executive director of the CompTIA ISAO, is back to review last week's activity in the Cyber Forums. https://t.co/xg35RK3YAO

[GTIA ISAO @GTIAISAO]

Chinese-linked threat actors are now actively exploiting a Microsoft Office zero-day vulnerability (known as 'Follina') to execute malicious code remotely on Windows systems. https://t.co/8ogMASpRMl

[GTIA ISAO @GTIAISAO]

Phishing campaigns attributed to an advanced threat actor called SideWinder involved a fake VPN app for Android devices published on Google Play Store along with a custom tool that filters victims for better targeting. https://t.co/IduccCxLVZ

[GTIA ISAO @GTIAISAO]

Microsoft has shared mitigation measures to block attacks exploiting a newly discovered Microsoft Office zero-day flaw abused in the wild to execute malicious code remotely.

Read: https://t.co/jL0r10lnAH

#ISAO #Cybersecurity

[GTIA ISAO @GTIAISAO]

Taiwan-based network-attached storage (NAS) maker QNAP warned customers on Thursday to secure their devices against attacks pushing DeadBolt ransomware payloads. https://t.co/XQBdhZz2aP

#ISAO

[GTIA ISAO @GTIAISAO]

Microsoft warned of brute-forcing attacks targeting Internet-exposed and poorly secured Microsoft SQL Server database servers using weak passwords. https://t.co/Slh0NEjctM

#ISAO

[GTIA ISAO @GTIAISAO]

WordPress security analysts have discovered a set of vulnerabilities impacting the Jupiter Theme and JupiterX Core plugins for WordPress, one of which is a critical privilege escalation flaw. https://t.co/AxYBtOE2Q5

#ISAO

[GTIA ISAO @GTIAISAO]

Hackers are massively exploiting a remote code execution vulnerability, CVE-2021-25094, in the Tatsu Builder plugin for WordPress, which is installed on about 100,000 websites. https://t.co/u6rbmi6HYU

#ISAO

[GTIA ISAO @GTIAISAO]

Security researchers have found a new post-exploitation framework that they dubbed IceApple, deployed mainly on Microsoft Exchange servers across a wide geography. https://t.co/rHXi1ivBga

#ISAO

[GTIA ISAO @GTIAISAO]

The U.S. Cybersecurity and Infrastructure Security Agency has added a new security vulnerability to its list of actively exploited bugs, the critical severity CVE-2022-1388 affecting BIG-IP network devices. https://t.co/DMKaqMoJgr

#ISAO

[GTIA ISAO @GTIAISAO]

Members of the Five Eyes intelligence alliance are warning #MSPs and their customers that they're increasingly targeted by supply chain attacks. https://t.co/0c4fFe3GGL

#ISAO

[GTIA ISAO @GTIAISAO]

Yesterday was Microsoft's May 2022 Patch Tuesday, and with it came fixes for three zero-day vulnerabilities, with one actively exploited, and a total of 75 flaws. https://t.co/iuebbpuqRT

#ISAO

[GTIA ISAO @GTIAISAO]

The notorious ransomware operation known as REvil (aka Sodin or Sodinokibi) has resumed after six months of inactivity, an analysis of new ransomware samples has revealed. https://t.co/z0USnKGPkb

#ISAO

[GTIA ISAO @GTIAISAO]

Threat actors started massively exploiting the critical remote code execution vulnerability, tracked as CVE-2022-1388, affecting F5 BIG-IP. https://t.co/ian3zUbW3N

#ISAO