Techsico IT

Cybersecurity & cyber insurance readiness for behavioral health practices. MFA, EDR, SIEM, SOC. Built for HIPAA + 42 CFR Part 2. Tulsa, remote nationwide.

[Techsico IT @Techsico_IT]

Small healthcare practices face the same cyber threats as hospitals without the budget or staff to fight back. That's where we come in. 24/7 security monitoring, HIPAA-aligned IT, done for you. DM 'HIPAA' for a free risk snapshot.

[Techsico IT @Techsico_IT]

Security teams: GPT-6 Astra is rated Critical; 100% on ExploitBench, finding unknown zero-days and building working exploits. Access is gated to vetted defenders via Daybreak. Are you ready?

[Techsico IT @Techsico_IT]

Healthcare owners: 5 providers hit by ransomware in one week: 54,000+ patients affected. Data leaked even when ransom was refused. Monitor the dark web, enforce MFA, and test offline backups.

[Techsico IT @Techsico_IT]

Windows 11 25H2/Server 2025 admins: FalconFlank is a public PoC for CrowdStrike Falcon local privilege escalation. No CVE assigned. Investigate: disable Office macro removal; keep cloud anti-malware on.

[Techsico IT @Techsico_IT]

Chrome users and IT admins: UPDATE NOW. CVE-2026-85046 is actively exploited. A malicious site can trigger it. Upgrade to 152.0.7977.82+ via Help > About Chrome, then relaunch.

[Techsico IT @Techsico_IT]

UPDATE: CISA added 7 CVEs to KEV Sept. 2. 3 target AI infra: LiteLLM, Starlette/FastAPI and JFrog Artifactory. Kestra is CVSS 10; PaperCut and SonicWall are active threats. BOD 26-04 applies. Patch now.

[Techsico IT @Techsico_IT]

Developers: GitSpawn can turn a malicious repo into code execution. A crafted .git config makes AI coding agents run attacker commands during git status/diff: without approval. SSH keys, cloud creds, API tokens at risk.

[Techsico IT @Techsico_IT]

IT/security leaders: AI agents completed a ransomware intrusion in under 10 hours, per Unit 42. Recon → hardcoded tokens → root → CI/CD hijack. No zero-day needed. Can your pipeline withstand this?

[Techsico IT @Techsico_IT]

Healthcare practices: Aesto Health’s breach exposed 9.54M people; SSNs, medical records and financial data; after an AWS compromise. Freeze credit. Watch insurance EOBs. Ask: which vendors hold your patient data?

[Techsico IT @Techsico_IT]

CISOs: Berlin/Rhysida shows the cost of a 7-day containment gap: ~5.79 TB exfiltrated, including water-supply assessments and plaintext creds. The lesson: response speed beats malware. Can your team isolate faster?

[Techsico IT @Techsico_IT]

Exchange admins: CVE-2026-62911 now has a public PoC. MRSProxy/HTTP.sys + no EPA → NTLM relay → SYSTEM webshell. ~22K servers exposed. Patch KB5121573–76 now. Don’t wait.

[Techsico IT @Techsico_IT]

DevOps & CISOs: JFrog Artifactory CVE-2026-82329 (CVSS 9.8) is being exploited in the wild. Attackers are minting admin tokens via auth bypass. Self-hosted? Patch to 7.161.20+ now. Are you patched?

[Techsico IT @Techsico_IT]

PostgreSQL DBAs: AUDIT NOW. CVE-2026-6471 (“PostGREShell”) can turn a low-privilege replication account into a persistent superuser backdoor. 114 malicious plugins are in the wild. Patch + review access.

[Techsico IT @Techsico_IT]

Healthcare security teams: McKesson’s ShinyHunters deadline is TODAY, Sept. 1. Demand: $55.2M over a claimed 284M-record theft. McKesson hasn’t said if it will negotiate. Are your IR contacts ready?

[Techsico IT @Techsico_IT]

Security teams: Aurora ransomware operators used Cursor AI in attacks on 10 organizations; speeding intrusions 30–50%. Guardrails were bypassed by framing requests as “authorized tests.” Are your AI tools monitored?

[Techsico IT @Techsico_IT]

Rails devs and DevOps: CVE-2026-66066 (“KindaRails2Shell”) is an actively exploited, unauthenticated RCE via Active Storage/libvips. Patch now: Rails 7.2.3.2, 8.0.5.1 or 8.1.3.1.

[Techsico IT @Techsico_IT]

Windows admins: Lazarus is actively exploiting zero-day CVE-2026-68820 (FudModule). Microsoft patched it Aug. 11; CISA’s Aug. 25 deadline has passed. Verify your patches NOW.

[Techsico IT @Techsico_IT]

Patients: your provider may not be the breached party. CareCloud says 3.75M+ people may be affected. SSNs and medical data may be exposed. Practice teams: review vendor risk now.

[Techsico IT @Techsico_IT]

Healthcare teams: CareCloud says 3.75M+ people may be affected after an AWS environment was accessed March 10–16. Exposed data may include SSNs, medical and financial info. Watch for medical identity theft.

[Techsico IT @Techsico_IT]

Security teams: Rhysida claims 5.79 TB stolen from Berlin’s government network (~1.44M files) and demands 30 BTC. Officials confirmed the incident: and refuse to pay. Forensics continue.

[Techsico IT @Techsico_IT]

Security teams: OpenAI says its upcoming Astra model may reach “Critical” cyber capability: autonomous zero-day discovery and end-to-end attacks. Findings are preliminary; safeguards are being tightened.