MOXFIVE

We’re beyond excited to announce that Falfurrias Management Partners, a leading private equity firm, has invested in MOXFIVE! https://bit.ly/3YVHz4J Since 2019, MOXFIVE has helped clients respond to incidents faster and more efficiently and to build more resilient environments. With Falfurrias’ investment, we’re ready to take our innovative approach and our MOXFIVE Platform to the next level and minimize the impact of cyber-attacks on an even broader scale. We’re also thrilled to welcome Joe Price and Wilson Sullivan to our board as new advisors. Their expertise and insights will be invaluable in helping us grow. We’re incredibly proud of our MOXFIVE team for making this moment possible. Thank you all!

🎃 We had a lot of super creative submissions for our Pumpkin Carving/Decorating Challenge this year! Happy Halloween! 🎃

Akira ransomware first emerged in 2023 and quickly gained popularity among threat actors becoming the most active ransomware observed by MOXFIVE so far this year. https://bit.ly/40rFZZc Check out our latest Threat Actor Spotlight for more information about this popular #ransomware variant. #Akira #cybersecurity #ir #incidentresponse #threatintelligence

We love seeing our team out making a difference in their community! Shout out to Michael Rogers for helping to raise awareness about online safety and cyberbullying! 👏 👏 👏

Attending the Zywave Cyber Risk Insights Conference next week in NYC? MOXFIVE's James Gimbi will be part of the Ransomware Decision Matrix panel at 11:05am on Wednesday, Nov. 6th so join us there for a great discussion on how to handle a modern-day cyber event, analyze optimal strategies, avoid missteps, and gain valuable advice for the future. See the full agenda at https://bit.ly/3C2hmbk #cyberrisk #cybersecurity #incidentresponse #ir #ransomware

We're Hiring! We're looking for a Product Manager to join the MOXFIVE team. In this role, you'll be part of the team that builds and manages our industry-changing MOXFIVE Platform and will be responsible for managing and defining the prioritization of product features, ensuring timely delivery of high-quality products that meet customer needs, and driving the execution of the product roadmap. Check out the full description at https://lnkd.in/gSwM4vfg!

We're Hiring! We're looking for a Product Manager to join the MOXFIVE team. In this role, you'll be part of the team that builds and manages our industry-changing MOXFIVE Platform and will be responsible for managing and defining the prioritization of product features, ensuring timely delivery of high-quality products that meet customer needs, and driving the execution of the product roadmap. Check out the full description at https://lnkd.in/gSwM4vfg!

Oh no! It's Friday and more news of new #vulnerabilities is being announced! Do we kiss our weekend goodbye? Why does it always seem like the sky is falling... just falling worse at some times? When should I actually be worried? You probably have seen some variation of this #cyber #risk chart. It shows that when the impact of a vulnerability and the exploitation of a vulnerability are both high, your risk is at its highest. So what? You probably want to know what does that actually mean, and how can you use it to gauge whether The Next Big Thing™ is going to truly impact you? First, impact. This measures how big of a hit you will take if someone exploits this vulnerability you have. Low impact might be someone can figure out which version of software you are using. High impact might be someone can gain complete control over your computer. Second, exploitability. How easy is it to exploit this vulnerability? This doesn't necessarily require skill, as people can release exploits with point-and-click ease, but what I want to know are things like: 1. Do you need physical access to the system? 2. Do you need to be on the same network as the system? 3. Do you need to have working credentials to the system? 4. Does the vulnerability only exist in some non-standard situation (e.g., old version of the software, must also have a special add-on installed, and also default language must be set to Klingon)? So when you triage a new vulnerability alert and are trying to figure out if you should cancel your weekend pickleball tournament, think through this: 1. What is the scope of this? Is it for every version of Windows ever, that is running on billions of devices (scary), or does it only apply to some obscure application no one is really running (pickleball time!)? 2. What is the impact? Does it allow for someone to take over the system (e.g., remote command/code execution (RCE) with administrator privileges) or something else extremely bad? 3. How exploitable is it? Is there a public exploit available that will allow me to put an IP address into a program I download and it instantly gives me full control of any vulnerable system on the internet with no credentials required? Low impact vulnerabilities can be combined to result in a high impact attack, exploitability can potentially change over time, but this is a quick way to triage the plethora of vulnerability notifications that come across our desk every day to gauge the risk severity of an issue. #cybersecurity #ransomware #cyberinsurance #digitalprivacy #vulnmanagement #vulnerabilitymanagement #exploits #redteam #blueteam #purpleteam #offsec

Our latest MOXFIVE Monthly Insights for September 2024 are now available! https://bit.ly/3BINhxo This month, we explore the evolving ransomware landscape, where established groups like Akira and BianLian continue to pose a threat, while Ransomware-as-a-Service (RaaS) platforms like RansomHub and Rhysida gain traction. Cl0p, known for the 2023 MOVEit exploit campaign, also made a return. Plus, we’ve identified a new player on the scene—INTERLOCK ransomware. Check out the full insights here: https://bit.ly/3BINhxo #CyberSecurity #Ransomware #ThreatLandscape #IncidentResponse #IR #RaaS #Akira #BianLian #RansomHub #Cl0p #Rhysida #INTERLOCK #ThreatIntelligence

Our latest MOXFIVE Monthly Insights for September 2024 are now available! https://bit.ly/3BINhxo This month, we explore the evolving ransomware landscape, where established groups like Akira and BianLian continue to pose a threat, while Ransomware-as-a-Service (RaaS) platforms like RansomHub and Rhysida gain traction. Cl0p, known for the 2023 MOVEit exploit campaign, also made a return. Plus, we’ve identified a new player on the scene—INTERLOCK ransomware. Check out the full insights here: bit.ly/3BINhxo #CyberSecurity #Ransomware #ThreatLandscape #RaaS #BianLian #Akira #RansomHub #Rhysida #Cl0p #INTERLOCK #ThreatIntelligence #IncidentResponse #IR