Threat actors continue to exploit ToolShell to gain unauthorized access to on-premises SharePoint servers. On August 6, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) released a malware analysis report after analyzing six files “including two Dynamic Link-Library (.DLL), one cryptographic key stealer, and three web shells. Cyber threat actors could leverage this malware
Cybersecurity
CISA + Partners Release Advisory on Scattered Spider
By Linn Foster Freedman on
Posted in Cybersecurity
On July 29, 2025, the Cybersecurity & Infrastructure Security Agency (CISA), along with the Federal Bureau of Investigation, Canadian Centre for Cyber Security, Royal Canadian Mounted Police, the Australian Cyber Security Centre’s Australian Signals Directorate, and the Australian Federal Police and National Cyber Security Centre, issued an updated advisory on threat actor Scattered Spider, which…
NIST Updates Controls on Secure + Reliable Patches
By Linn Foster Freedman on
Posted in Cybersecurity
On July 22, 2025, the National Institute of Standards and Technology (NIST) issued proposed updates to NIST SP 800-53 Controls on Secure and Reliable Patches designed to “address software resiliency, developer testing, secure logging, least privilege for functions and tools, deployment management of updates, software integrity and validation, delineation of roles and responsibilities between organizations…
SharePoint Server Vulnerabilities Exploited Despite Emergency Patch
By Linn Foster Freedman on
Posted in Cybersecurity
Microsoft has confirmed that vulnerabilities in its on-premises SharePoint Server installations, a network spoofing vulnerability (CVE-202549706), and a remote code execution vulnerability (CVE-2025-49704) are being actively exploited despite releasing an emergency patch on July 20, 2025. The vulnerabilities allow threat actors to “execute code remotely, bypass identity protections such as multi-factor authentication and access system…
June Sees Significant Jump in BECs
By Linn Foster Freedman on
Posted in Cybersecurity
According to Cybersecurity Dive, “Americans lost $16.6 billion to cyber fraud and internet crimes last year (2024), up 33% from the previous year. Phishing, spoofing and extortion topped the list of complaints, but investment and business email compromise (BEC) scams cost victims the most money.” Yes, phishing continues to be a significant problem in…
CISA Alert: Liteon Electric Vehicle Chargers
By Linn Foster Freedman on
Posted in Cybersecurity
If you own an electric vehicle, keep an eye on cybersecurity issues that may affect your car and its accessories. You wouldn’t think that an electric vehicle charger could include a vulnerability that allows threat actors to access information, but the Cybersecurity & Infrastructure Security Agency (CISA) issued an Alert on July 15, 2025, warning…
What to Know About SafePay Ransomware Group
By Linn Foster Freedman on
Posted in Cybersecurity
The SafePay ransomware group has been active since fall 2024 and has increased its activity this spring and summer. According to NCC Group, SafePay hit the most victims of any threat actor in May 2025—it is linked to 248 victims to date, according to Ransomware.live and RansomFeed.
The group uses common tactics, including social…
Joint Release Warns of Iranian-Backed Cyber-Attacks
By Linn Foster Freedman on
Posted in Cybersecurity
On June 30, 2025, a Joint Advisory was issued by the National Security Agency, the Cybersecurity and Infrastructure Security Agency, the Federal Bureau of Investigation and the Department of Defense Cyber Crime Center issued a Joint Cybersecurity Information Sheet (CIS) titled “Iranian Cyber Actors May Target Vulnerable U.S. Networks and Entities of Interest,” warning…
FBI Warns Airline and Transportation Sectors About Scattered Spider
By Linn Foster Freedman on
Posted in Cybersecurity
…These actors rely on social engineering techniques, often impersonating employees or contractors to deceive IT help desks into granting
New Hires More Likely to Fall for Phishing + Social Engineering Attacks
By Linn Foster Freedman on
Posted in Cybersecurity
When assessing cybersecurity risk in your organization, it is important to understand your users and their behavior. A new study by Keepnet sheds light on new hire behavior concerning phishing susceptibility. According to its recent survey, the 2025 New Hires Phishing Susceptibility Report, a whopping “71% of new hires click on phishing emails within…