Clear Ridge Defense

Mission Focused. Mission Driven. Mission First.

[Clear Ridge Defense @clridgellc]

Wondering whether to use #PTO or a company-paid #CodeRed day this lovely #snow day? Don't. @clridgellc announced virtually unlimited PTO the day before the first snow day of the season, along w/ adding #Juneteenth for 11 paid holidays. Ready to join our work-hard play-hard team?

[Clear Ridge Defense @clridgellc]

British cryptocurrency exchange EXMO has disclosed that unknown attackers withdrew almost 5% of its total assets after compromising its hot wallets.

#cryptocurrency #CyberSecurity

https://t.co/m00HjOjh7d

[Clear Ridge Defense @clridgellc]

@NDSU engineers are spending their evenings hacking popular toys so that kids with disabilities can enjoy toys of their own this holiday season.

#Hacking @NDSU #HolidaySeason

https://t.co/0SHXndbt24

[Clear Ridge Defense @clridgellc]

Microsoft has released guidance for how organizations can bolster security to attempt to avoid future attacks.

#CyberSecurity #infosec

https://t.co/LyxlC4f0eu

[Clear Ridge Defense @clridgellc]

A key malicious domain name used to control potentially thousands of computer systems compromised during the SolarWinds breach was commandeered by security experts and used as a killswitch designed to turn the sprawling cybercrime operation against itself

https://t.co/qpu3Hw62Vx

[Clear Ridge Defense @clridgellc]

The National Security Agency’s Research Directorate selected “Spectre Attacks: Exploiting Speculative Execution” as the winner of its 8th Annual Best Cybersecurity Research Paper competition. Twelve researchers collaborated to win.

#CyberSecurity

https://t.co/5CEFYHOex8

[Clear Ridge Defense @clridgellc]

Clear Ridge Defense has received a place on the Baltimore Sun's list of Top Small Employers for 2020! Our employees took part in an survey of 24 questions which gathered responses regarding issues relating to workplace culture. See the entire list at:

https://t.co/qmqyqhNrLZ

[Clear Ridge Defense @clridgellc]

A threat actor, who goes online with the moniker “pumpedkicks,” has leaked online a list of exploits that could be exploited to steal VPN credentials from almost 50,000 Fortinet VPN devices.

#CyberSecurity

https://t.co/UiBeJq9DVV

[Clear Ridge Defense @clridgellc]

A number of hacking groups, including those employing ransomware, are teaming up to expand the threat landscape and take advantage of stolen data troves in cloud-based operations

#CyberSecurity #infosec #Ransomware

https://t.co/gp2lNISraO

[Clear Ridge Defense @clridgellc]

Researchers have uncovered a wide-ranging global scam targeting Facebook users, after finding an unsecured database used by fraudsters to store the usernames and passwords of at least 100,000 victims.

#CyberSecurity #infosec #Facebook

https://t.co/MsL2V1zaXE

[Clear Ridge Defense @clridgellc]

Google has released a security update for its Chrome browser that patches ten security bugs, including a 0-day vulnerability currently seen exploited. Details about the 0-day and the group exploiting the bug have not been made public.

#CyberSecurity

https://t.co/hYKGpMfuTK

[Clear Ridge Defense @clridgellc]

Federal agencies warned that cybercriminals are unleashing a wave of data-scrambling extortion attempts against the U.S. healthcare system designed to lock up hospital information systems, just as nationwide cases of COVID-19 are spiking.

#CyberSecurity

https://t.co/jELn19dIRa

[Clear Ridge Defense @clridgellc]

More than 100 smart-irrigation systems deployed across the globe were installed without changing the factory’s default, passwordless setting, leaving them vulnerable to malicious attacks.

#CyberSecurity

https://t.co/LQnEyFE3WK

[Clear Ridge Defense @clridgellc]

Pharma giant Pfizer has been leaking the private medical data of prescription-drug (Lyrica, Chantix, Viagra, Premarin, Aromasin, Depo-Medrol and Ibrance) users in the U.S. thanks to an unprotected Google Cloud storage bucket

#CyberSecurity #privacy

https://t.co/rBTEEUfB2J

[Clear Ridge Defense @clridgellc]

NCSC, the cybersecurity arm of the UK's GCHQ intelligence service, urges organizations to make sure that all Microsoft SharePoint products in their environments are patched against CVE-2020-16952 to block takeover attempts.

#cybersecurity #Microsoft

https://t.co/DHdvsRS6Q1

[Clear Ridge Defense @clridgellc]

After 'accidentally' routing calls through China (even if they weren’t made there) and being slammed for insecure meetings being 'ZoomBombed' over the last few months, Zoom finally appears to be making an effort to fix those issues.

#CyberSecurity

https://t.co/RiDIOBa49s

[Clear Ridge Defense @clridgellc]

Office 365 user account takeover – particularly during the COVID-19 pandemic with so many working from home – is one of the most effective ways for an attacker to gain a foothold in an organization’s network.

#CyberSecurity #CybersecurityAwarenessMonth

https://t.co/1Ri1ZO0TKg

[Clear Ridge Defense @clridgellc]

A new botnet (HEH) has been identified that attacks internet-connected system that has SSH ports exposed online.

Once the botnet gains access to a system, it immediately downloads one of seven binaries that installs malware.

#hacking #cybersecurity

https://t.co/wHXhyBR3KP

[Clear Ridge Defense @clridgellc]

APT-C-23- a threat group also known as a Two-tailed Scorpion- has been discovered using new spyware targeting Android users in the Middle East through a fake Android app store.

#Android #CyberSecurity #CybersecurityAwarenessMonth

https://t.co/C9XGOgbcdo

[Clear Ridge Defense @clridgellc]

A hacker published documents containing SSNs, student grades and other private information stolen from a large public-school district in Las Vegas after officials refused a ransom demanded in return for unlocking district computer servers.

#cybersecurity

https://t.co/VgRt8hZCji