January 9, 2020 / by Blogger / CFTC, Cyber, OCIE, Regulatory, SEC
In December 2019, the U.S. government issued indictments against two hackers who were allegedly involved in a multiyear effort to penetrate the systems of several IT Vendors and Managed Services Providers (MSPs). The attack known today as the “Cloud Hopper Mega Hack” was first noticed in 2016, as indicated by the Wall Street Journal. Preview […]
Read more
Protect what's important to you!
CDPwn – Cisco patches 5 critical vulnerabilities that affect millions of devices.
February 6, 2020 / by Blogger / Cisco, Cyber, Vulnerability
Five critical vulnerabilities found in various implementations of the Cisco Discovery Protocol (CDP) could allow attackers on a local network to take over enterprise devices, as discovered by IoT security company Armis. (It is important to note that attacks can not be performed remotely and requires attackers to have access to internal networks.) CDP is […]
Read more
The SEC’s OCIE Releases Their Observations From Examinations
January 30, 2020 / by Blogger / Cyber, Regulatory, SEC
On January 27, 2020 the Securities and Exchange Commission Commission’s Office of Compliance Inspections and Examinations issued examination observations related to cybersecurity and operational resiliency practices undertaken by market participants. We reviewed this alert and simplified it into major points that are easily digestible. The OCIE provided the following observations: Governance and Risk Management Senior leadership is […]
Read more
Citrix ADC CVE-2019-19781 Public Exploits Available
January 12, 2020 / by Blogger / Cyber, Exploit
On December 17, 2019, Citrix published an article describing vulnerability affecting the Citrix Application Delivery Controller (ADC) and Citrix Gateway formerly known as NetScaler ADC and Gateway. The vulnerability was assigned the following CVE number: CVE-2019-19781 : Vulnerability in Citrix Application Delivery Controller and Citrix Gateway leading to arbitrary code execution The vulnerability affects all product […]
Read more
CFTC issues alerts and expects responses!
January 9, 2020 / by Blogger / CFTC, Cyber, OCIE, Regulatory, SEC
In December 2019, the U.S. government issued indictments against two hackers who were allegedly involved in a multiyear effort to penetrate the systems of several IT Vendors and Managed Services Providers (MSPs). The attack known today as the “Cloud Hopper Mega Hack” was first noticed in 2016, as indicated by the Wall Street Journal. Preview […]
Read more
Information Leakage and Improper Error Handling vulnerability found in Axcient / eFolder Synced Tool
January 8, 2020 / by Blogger / Vulnerability, Vulnerability Disclosure
This vulnerability was responsibly disclosed to Axcient/Anchor on November 4, 2019. Affected versions: > 2.7.1.1498 During a penetration test we came across a file sharing application called SynedTool. When performing some of the more simpler tests we identified that this application is vulnerable to an Information Leakage and Improper Error Handling vulnerability. The application allows […]
Read more
Shortlisted for the HFM US 2020 Awards – Best Cybersecurity Provider
November 25, 2019 / by Blogger / Cyber
We’re honored to be shortlisted for the HFM US Technology Awards 2020 in the category of Best Cybersecurity Provider. THANK YOU for your support and appreciation, and encouraging us to be a little different. The awards ceremony will take place February 5, 2020. Wish us luck. We’re thrilled to be selected as a finalist. We […]
Read more
National Cybersecurity Awareness Month – Moving or already moved to the public cloud?
October 15, 2019 / by Blogger / Awareness, Cloud, Cyber
So, you are thinking of moving to the public cloud, or have already made the move. While there are many benefits (we will not list them) to moving to the public cloud, proceed with caution. The biggest threat to cloud security does not come in the form of bots or zombie networks or hackers, it […]
Read more
National Cybersecurity Awareness Month – Know your Attack Surface
October 1, 2019 / by Blogger / Cyber
October is National Cybersecurity Awareness Month. Our goal this month is to provide you meaningful information to help you make well-informed, conscious decisions about how you should be protecting yourself and company from cyber threats. To start this month off we felt it was important for everyone to become familiar with the term “attack surface”. […]
Read more
Brokerage firm pays $1.5 million due to a cyber attack
September 16, 2019 / by Blogger / Cyber
Phillip Capital Inc. (“PCI”)., a Chicago-based brokerage firm was ordered to pay $1.5 million dollars due to a cyber attack. Per the CFTC, PCI allowed “cyber criminals to breach PCI email systems, access customer information, and successfully withdraw $1 million in PCI customer funds.” The order also finds that “PCI failed to disclose the cyber […]
Read more
Phishing attack evades detection
August 30, 2019 / by Blogger / Cyber, Malware, Phishing
Inform your HR departments, internal recruiting teams, and hiring managers to be on the lookout for emails that come from someone submitting a resume for an open position in your firm. Why? There has been a significant increase in the use of this type of email attack to deliver malware. What makes these emails different? […]
Read more