CulperSec

CulperSec is a next generation Cybersecurity Software and Services company located in Boston, Massachusetts.

[CulperSec @culpersec]

CMMC Phase II is suspended. Your obligations are not.

DFARS 7012, CUI protection, self-assessments, and incident reporting still apply.

What SMB defense contractors should do now:
https://t.co/MFd6hMucXw

#CMMC #DIB

[CulperSec @culpersec]

React Server Components CVE-2025-55182 (CVSS 10.0) allows unauthenticated RCE. If you use React or modern frameworks that implement RSC (including Next.js, React Router, Expo, Redwood SDK, Vite’s RSC plugin, Parcel RSC, and more), update to patched releases immediately. Details from the React team: https://t.co/Z5rHPjSa4w
CulperSec's here to help assess exposure and response for your organization.

[CulperSec @culpersec]

Interlock ransomware is hitting healthcare, pharma & critical infrastructure with stealthy drive-by downloads, FileFix social-engineering & double-extortion tactics. Learn how to protect PHI, maintain operations & ensure HIPAA/NIST CSF 2.0 compliance. Defend your assets now! https://t.co/xU2A4tNXqg

[CulperSec @culpersec]

🎙️ Voice cloning is the new #cybersecurity threat, and CulperSec is leading the charge in defense! 🛡️ We where the first to incorporate AI voice cloning in our penetration tests. Learn how to protect your organization in our latest blog post: https://t.co/Z8HZzkIE3t

[CulperSec @culpersec]

New Zero-Day Alert: CVE-2023-36884. A critical vulnerability is being exploited in the wild, putting businesses at risk. Learn about the threat, who's behind it, and the crucial steps your organization needs to take right now. More information on our blog.

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft has detected increased credential attack activity by the threat actor Midnight Blizzard using residential proxy services to obfuscate the source of their attacks. These attacks target governments, IT service providers, NGOs, defense industry, and critical manufacturing.

[CulperSec @culpersec]

🔒Unlock the secrets to stronger cybersecurity and compliance in biotech, pharmaceuticals, and therapeutics! Learn how CulperSec can boost your security posture, simplify vendor risk, and win over auditors and investors. https://t.co/3dDHMEVevc

[CulperSec @culpersec]

Are you prepared for Operational Due Diligence from Private Equity and Venture Capital partners? Learn how outsourcing IT and cybersecurity to a reputable provider like CulperSec can help you navigate the process and attract the right investment partners. https://t.co/Oq1RJREkUO

[CulperSec @culpersec]

Learn why every organization needs a robust Patch Management program in our latest blog post! https://t.co/osJdNqz45G

[CulperSec @culpersec]

Improve your security posture with some of our top IT security best practices! https://t.co/EcIYxyuAxV

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft researchers investigated an attack targeting cryptocurrency investment companies. The threat actor, tracked as DEV-0139, identified and gained the trust of targets on chat groups to ultimately deploy a backdoor in the target network. Get details: https://t.co/qjoWE9yRFK

[CulperSec @culpersec]

The FBI and CISA warn of an increase in Cuba Ransomware attacks, with the number of US entities impacted doubling since December 2021. More information on this alert can be found at: https://t.co/72cIhrAJNN

[CulperSec @culpersec]

The "Bleed You" campaign is trying to take advantage of a known remote code execution (RCE) vulnerability in Windows Internet Key Exchange (IKE) Protocol Extensions, and more than 1,000 systems are unpatched and vulnerable to compromise. https://t.co/Cj50cPr39r