Cyber Briefs

For small to medium-sized businesses, both penetration testing and vulnerability scanning offer distinct advantages, making their combined implementation ideal.

The COVID-19 pandemic has forced companies of all sizes to adapt to work-from-home models, driving companies to rely more heavily on VPNs for remote access to their infrastructure and resources. This increased use has [...]

Key Takeaways CrowdStrike experienced a significant disruption due to a misconfigured Windows update, leading to widespread issues with Windows workstations globally. The outage primarily affected enterprises using Windows 365 Cloud PCs and did not impact [...]

  The Silent Takeover: How BEC Attacks Reroute Your Reality In today’s SensCy Cyber Brief, the SensCy team is looking into a growing trend regarding email account hacking, email account takeovers, and Business Email Compromise [...]

In today’s SensCy Cyber Brief, your SensCy team is investigating the potential use of the new Artificial Intelligence (AI) ChatGPT. In this brief, we will introduce the tool and review how ChatGPT will challenge traditional [...]

In today’s Cyber Brief, SensCy analyzes a new phishing trend, evolving in sophistication like ChatGPT phishing scams, targeted at password managers, notably Bitwarden. Many users have found that Bitwarden password vaults were targeted in Google [...]

One of SensCy’s missions is to bring awareness to small and medium- sized organizations about the ever-evolving cyber threat landscape. One of cybersecurity’s main issues is managing patching for critical systems and operating systems. Unpatched [...]

  In today’s SensCy Cyber Alert, your SensCy team recommends Google Chrome Browser users to install the new Chrome Version immediately. Staying current is the only way to protect your network against the latest Google [...]

In today’s SensCy Cyber Brief, your SensCy team reviewed Microsoft’s latest series of patches released on Tuesday, January 10, 2023. Today’s Patch Tuesday comes with fixes for one zero-days including a zero-day vulnerability currently used [...]

In today’s SensCy Cyber Alert, your SensCy team recommends Fortinet customer patch their appliance to address a vulnerability in multiple versions of FortiADC. The vulnerability can be tracked as CVE-2022-39947 and is an improper neutralization [...]

In today’s SensCy Cyber Alert, your SensCy team recommends Citrix users to apply security patches for a “Critical” zero-day vulnerability in Citrix ADC and Gateway that is currently exploited by state-sponsored hackers. The vulnerability can [...]

In today’s SensCy Cyber Brief, your SensCy team reviewed Microsoft’s latest series of patches released on Tuesday, December 13, 2022. Today’s Patch Tuesday comes with fixes for two zero-days including a zero-day vulnerability currently used [...]

In today’s SensCy Cyber Alert, your SensCy team recommends Fortinet customer patch their appliance to combat an actively exploited FortiOS SSL-VPN vulnerability. The vulnerability can be tracked as CVE-2022-42475 and is a heap=based buffer overflow [...]

Key Takeaways Urgent Patch: Google Chrome users must update immediately to version 108.0.5359.94/95 (Windows) or 108.0.5359.94 (Mac/Linux). Zero-Day Exploit: The update fixes CVE-2022-4262, a high-severity vulnerability that hackers are actively exploiting in the wild. Technical [...]

Business Email Compromise scams have cost organizations over $55 billion globally between 2013 and 2023. No business, large or small, is immune. In today’s SensCy Cyber Brief, your SensCy team investigates Business Email Compromise (BEC) [...]

  On Wednesday, October 19, Microsoft confirmed that it accidentally exposed information about thousands of customers following a misconfiguration that left an endpoint publicly accessible without any authentication. Microsoft explained in an alert, “This misconfiguration [...]

  Hospital Data Breach: Advocate Aurora Health & Meta Pixel On Thursday, October 20, Advocate Aurora Health (AAH), a healthcare system based in Wisconsin and Illinois, notified its patients of a breach that exposed the [...]

In today’s SensCy Cyber Brief, your SensCy team reviewed Microsoft’s latest series of patches released on Tuesday, October 11, 2022. Today’s Patch Tuesday comes with fixes for two zero-days including a zero-day vulnerability currently used [...]

In August, the social media platform Twitter released a statement confirming the breach that allowed attackers access to the contact details of over 5 million users’ accounts. At SensCy, we understand how important social media [...]

Key Takeaways Classes were canceled at the South Redford School District in Michigan due to a cyberattack that compromised the school's computer systems. The rise in cyberattacks on K-12 schools, including ransomware incidents, poses a [...]

On Wednesday, September 21, the popular antivirus and Endpoint Protection platform Malwarebytes started flagging websites like Google and YouTube as malicious, blocking many users from accessing them. Malwarebytes customers experienced this disruption for approximately [...]

In today’s SensCy Cyber Brief, your SensCy team is reviewing Microsoft’s latest series of patches. Today’s Patch Tuesday comes with fixes for an actively exploited zero-day vulnerability, one non-exploited zero-day vulnerability, and a total of [...]

Have you received a suspicious email claiming to be from DocuSign? Cybercriminals increasingly leverage the trusted brand of DocuSign for email phishing attacks, primarily due to its widespread use in legal, HR, and finance [...]

In today’s SensCy Cyber Brief, the SensCy cybersecurity team is investigating the increase in ransomware attacks on Small and Medium Organizations (SMO) in the U.S. Although these cases don’t typically make national headlines—unlike when [...]