Avertium

💥 FLASH NOTICE 💥 Independent cybersecurity researchers have recently uncovered an ongoing malware campaign abusing Meta’s advertising platform to distribute an information stealer known as SYS01stealer. Unlike ransomware, SYS01stealer’s goal is to steal login credentials, browsing history, and cookies to either set conditions for a more damaging attack in the future, or to sell directly via dark-web forums. Anyone who advertises via LinkedIn, Facebook, or other Meta owned company is advised to review their marketing materials to ensure no one’s impersonating them for malicious purposes. More: https://loom.ly/AP0S8OM #threatintelligence #malwarecampaign #Meta

Like many buzzwords in the cybersecurity space, XDR is nuanced. While yes, there are XDR platforms out there, it’s important to note that XDR is not just about the technology – it’s about pairing the right tools with the human expertise necessary to make those tools work. This is especially true for mid-market companies who often lack in-house specialization in specific tools. Explore how you can achieve a more proactive and more mature security posture utilizing XDR: https://loom.ly/kiAfCE4 #XDR #FusionMXDR #securityposture

PwC’s 2025 Global Digital Trust Insights survey of business and tech executives revealed significant gaps companies must bridge before achieving cyber resilience. Here's what findings stood out to us: https://loom.ly/d6Wo1OI #AssessDesignProtect

Over 90% of organizations experienced at least one identity-related incident in the past year. As workforces become more distributed and cybersecurity grows more complex, identity protection often gets overlooked, but it remains a critical security priority. Our new blog explores Microsoft's holistic approach to cybersecurity, focusing on identity protection and MXDR to protect the people behind the screens - check it out: https://loom.ly/ru0gg9c

Our Mexico Office is decorated and ready for Day of the Dead, aka Día de los Muertos! 💀💜 Día de los Muertos is a holiday celebrated to honor deceased loved ones and remember them with joy. It is 7-day cycle, starting October 27th, but is traditionally celebrated on November 1st and 2nd. To celebrate, our Mexico team shared Pan de Muerto, which means "Bread of the Dead." It is a traditional bread that symbolizes the cycle of life and death, and is always included in Ofrendas or "offerings" as a way to honor those who have passed and so they can have a taste of what they used to love to eat. We're grateful to learn more about the holiday and share these traditions with our teammates in Mexico. Feliz día de muertos!

Happy Halloween! 🎃 Today is the perfect time to review some key statistics and haunting trends that we are seeing in order to help us meet the cybersecurity challenges of the evolving ecosystem. Here's what has us spooked:

💥 FLASH NOTICE 💥 Threat researchers with Trend Micro recently uncovered attacks leveraging exposed instances of Docker Remote API. Avertium recommends to ensure any instances of Docker Remote Access API's are secure with strong access controls and to monitor your Docker Remote API servers for unusual activity. For IoC's and more details, read the full report: https://loom.ly/tbYwlv0 #threatintelligence #trendmicro #RemoteAPI

Are you considering a switch to Microsoft Defender for Endpoint? In our latest webinar, Rob Wille, Security Solutions Architect at Avertium, guides you through everything you need to know. Our new blog breaks down all the key points discussed in the webinar. Read it here: https://loom.ly/RJly4S4 Want to watch the webinar instead? You can view the recording here ⏩ https://loom.ly/G4_VcFs #DefenderforEndpoint #EDR #endpointprotection #MicrosoftSecurity #MISA

Last week, a task force said in a report that the victor of the 2024 presedential election must resolve cybersecurity regulations, better deter cyberattacks, address the cyber workforce shortage, develop plans with the private sector on critical infrastructure protection, and review how to keep the economy going in the event of major hacks. These immediate priorities help position the United States to maintain the lead in the growing global digital economy, foster innovation, and recognize that cybersecurity now impacts every aspect of American life. Beyond the immediate priorities, here are just some of the other recommendations from the report: 💡 Developing an offensive cyber strategy 💡 Establishing security standards for operational technology and information technology systems in each sector 💡 Creating a national K-12 cybersecurity curriculum You can download the full report here: https://loom.ly/tnNxDek Source: https://loom.ly/rGGmszo #AssessDesignProtect #cyberstrategy #cyberregulations

While some may have a general idea of what phishing is, others may be out of loop when it comes to how many phishing techniques actually exist. This guide provides an in-depth exploration of diverse phishing techniques, including HTTPS phishing, clone phishing, angler phishing, and pop-up phishing. By understanding these tactics and implementing proactive security measures, individuals and organizations can protect themselves against phishing attacks. You can read the guide here: https://loom.ly/8QX1Qhw #phishing #phishingscam #phishingtactics