The CISA and FBI have released a joint advisory detailing the threats posed by a new Ransomware-as-a-Service (RaaS) variant, referred to as DarkSide. DarkSide was recently used in a ransomware attack against a critical infrastructure company and the CISA, and FBI see these attacks as growing in the near future. The advisory contains a number Continue Reading
CMA Blog
Thoughts and updates on everything CMA
Microsoft Announces Critical Exchange Server Vulnerability – Patch ASAP
Microsoft has announced a critical vulnerability in Exchange Server currently being exploited by HAFNIUM. Microsoft recommends applying patches for your installed version of Exchange in the link below: https://techcommunity.microsoft.com/t5/exchange-team-blog/released-march-2021-exchange-server-security-updates/ba-p/2175901
Poor Cyber Hygiene Puts Water Treatment Plant in Crosshairs
US-CERT recently released a report detailing how a water treatment plant in Florida experienced a cyber security breach in which the attackers were able to change the dosing of chemicals being used in the water treatment process. Luckily the operators at the plant noticed the change and were able to fix the problem before any Continue Reading
CISA Alert on Ongoing Threat Activity in Cloud Environments
CISA has evidence on ongoing APT activity in cloud environments as a result of recent widespread compromises. They have released details of this activity as well as ways to detect and monitor for it in cloud environments. See the link below for more details on how to monitor your cloud environments for this type of Continue Reading
Cybersecurity Holiday Shopping Tips
Black Friday and Cyber Monday are two of the busiest shopping days of the year, and deal seekers are preparing to make their moves. These shopping ‘holidays’ bring ample opportunity for cybercriminals to take advantage of unsuspecting shoppers. Check out our tips on how to stay safe while online shopping this holiday season. Be wary Continue Reading