Shawn Pride

You need to back up your data and know how your backup provider handles it. You back up your data off site because you could have a fire, flood, theft, or ransomware. If you don't have a local backup as well, your backup service better have a location 25+ miles away too. This is why I didn't like using Microsoft to backup M365 data. They kept it in the same data center. It needs to be far away so that the storms, floods, fires, or whatever causing the catastrophic loss doesn't affect both copies. It blows my mind that the South Korean government. It should have known better.

10

2 Comments

TOP 3 DECISIONS 1 Hardware security model assessment TEE.Fail compromises foundational confidential computing assumptions 2 WSUS exploitation containment CVE-2025-59287 under active attack; partial mitigation inadequate 3 Credential verification acceleration 183M Gmail breach demands MFA enforcement and passwordless migration This week exposed security verification gaps across every infrastructure layer, requiring strategic assessment within Q4 reviews rather than emergency response. +++Foundation-Level Threats Materialized: +TEE.Fail hardware attack extracts cryptographic keys from Intel, AMD, and Nvidia secure computing environments by exploiting DDR5 memory—bypassing CPU-based security entirely.[1] This threatens $billions in confidential computing investments for regulatory compliance and zero-trust architectures. +Microsoft WSUS vulnerability (CVE-2025-59287) weaponized within 24 hours of disclosure, with initial patches proving insufficient. [2] Demonstrates compressed exploitation timelines overwhelming traditional patch management. +183 million Gmail passwords leaked via infostealer malware [3] validating industry shift toward passwordless authentication as credential-based models fail at scale. +Azure outages affecting Office 365, Xbox, and Alaska Airlines—one week after AWS disruption—confirms cloud concentration risk across providers controlling 65% of market share. [4] +Amazon announced 14,000-30,000 job cuts while Meta reduced 600 AI roles. 5] raising vendor workforce continuity questions for critical services.

4

As many as 2 million Cisco devices affected by actively exploited 0-day - Arstechnica Dan Goodin Search shows 2 million vulnerable Cisco SNMP interfaces exposed to the Internet. As many as 2 million Cisco devices are susceptible to an actively exploited zeroday that can remotely crash or execute code on vulnerable systems. Cisco said Wednesday that the vulnerability, tracked as CVE-2025-20352, was present in all supported versions of Cisco IOS and Cisco IOS XE, the operating system that powers a wide variety of the company’s networking devices. The vulnerability can be exploited by low-privileged users to create a denial-of-service attack or by higher-privileged users to execute code that runs with unfettered root privileges. It carries a severity rating of 7.7 out of a possible 10. Exposing SNMP to the Internet? Yep “The Cisco Product Security Incident Response Team (PSIRT) became aware of successful exploitation of this vulnerability in the wild after local Administrator credentials were compromised,” Wednesday’s advisory stated. “Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.” The vulnerability is the result of a stack overflow bug in the IOS component that handles SNMP (simple network management protocol), which routers and other devices use to collect and handle information about devices inside a network. The vulnerability is exploited by sending crafted SNMP packets. “If you get RCE as root, you’re getting higher than admin privileges,” independent researcher Kevin Beaumont wrote in an online interview. “You’re not supposed to be able to get root on those devices.” To perform a DOS, all an attacker needs is the read-only community string or valid SNMPv3 user credentials. Making SNMP devices accessible to Internet interfaces is frowned upon because it unnecessarily exposes networks to precisely these sorts of risks. As Beaumont noted on Mastodon, however, the Shodon search engine indicates that more than 2 million devices around the world do just that. #cybersecurity #Cisco #SNMP #0day #RCE #DOS

298

81 Comments

🕊 ARKGPT™ STRATEGIC INTELLIGENCE Windows 11 finally finds files when you type two characters instead of three Direct Portal Access:🌬https://lnkd.in/ex6fQJ-s 🌀 #TheKingsArk #shipper #carrier #buyers #sellers #governments #funder #tech #news #globalnews #Trending #market #ai #intelligence #opportunties #alerts #loans #StrategicIntelligence #Innovation

1

“It’s not how you start, it’s how you finish.” -Said no ransomware victim ever. When backups fail, detection lags, and response plans live only on paper — the finish line is regret. Security controls matter. From CMMC readiness to immutable backup strategy, Breadcrumb helps manufacturers harden what matters — production continuity, data integrity, and regulatory compliance. #CMMC #ManufacturingCybersecurity #Resilience #DFIR Breadcrumb Cybersecurity

12

1 Comment

Intel dropped a big announncement. Link: https://lnkd.in/epjvuWii “To completely protect data from risks like side attacks, #DMA attacks, or hypervisor #snooping, Intel has developed a processor that operates on encrypted data without first decrypting it. Now the company has demoed the chip, reports IEEE Spectrum, and Intel claims impressive gains in math operations used to process fully-encrypted data. #Intel introduced and demonstrated its #Heracles accelerator featuring fully homomorphic encryption (FHE) — meaning that it ingests encrypted data, processes it, and outputs it in an encrypted format — last month at the International Solid-State-Circuits Conference [ISSCC] (ISSCC). The chip is by no means an x86 CPU. It cannot execute normal software or run an operating system, as it is designed exclusively to accelerate fully homomorphic encryption (FHE) math.” Link to paper (research gate): https://lnkd.in/dwmc2vtC Link to IEEE spectrum article: https://lnkd.in/dKJ5-KHa Zack Huhn / Mike Bausano / Matt Borneman / Kevin Pressler / James Downs / Rob Thompson / Jack Nebraski Nexigen Is constantly thinking about how to keep our customers protected. Added for educating us comment by Sven Trieflinger. Very welcomed. Thank you! “Wow! Having worked on Computing on Encrypted Data (CoEDs) technologies for the last 5 years and pushing people towards adoption, I am really excited to see this kind of progress being made. However, IMHO, the community should accept and honestly communicate that the performance a) should be compared to *plain text computing* in the context of specific workloads b) is only one (and maybe the minor part) of the factors that define the total cost of ownership of such solutions. For example, CoEDs are totally different architectures that would require to rewrite most of your IT stack and in fact for many things it would not be possible at all.Don't get me wrong, CoEDs are fantastic tools, but the uneducated reader might understand this like as if the technology is anywhere close to suitability for a significantly broader range of use cases. It is not and probably will not in the foreseeable future. But it will have its place in important niche application areas where data confidentiality is crucial and workloads lend themselves well towards tolerating the intrinsic limitations of CoED technologies.”

588

48 Comments