What Contractors Should Know While the Department of War Reviews the CMMC Program. On July 12, the Department of War suspended CMMC Phase 2 requirements. Set to kick in November 10, 2026, they’re now on hold for at least 60 days while a CMMC Reform Task Force reviews the entire program top to bottom. On…
If you’ve been following along with our State of InfoSec series this year, you’ll know that we have been reviewing 162 incident response cases over the last two years to provide a snapshot of the InfoSec industry in the SMB market. In this edition of the series, we examine trends in business email compromise payloads.…
Welcome to the second post in our series of incident response stories following our recent engagements. Over the past two years, our team has managed 135 incident response cases, addressing incidents that have affected small, medium-sized, and enterprise-level entities alike. Through our analysis of these incident response cases, we’ve discovered and documented the tactics, techniques,…
If you’ve been interacting with FRSecure for a while, you may recall our State of Information Security report. Published in 2023, it provided a detailed look at security in the SMB space based on statistics gathered from our risk assessment control data and incident response cases. As is often the case at FRSecure, we’re shifting…
It might be impossible to not know of ChatGPT by now, especially if you’re involved in the tech world in any capacity. The AI has more than 100 million users, and Open AI’s website now garners more than a billion visits each month on average. The possibilities behind such a groundbreaking tool have been widely…
Mean time to report is a critical metric to consider in incident response. While the time it takes to detect is important, there is a direct correlation between a speedy report and the minimization of damage.
Update as of Wednesday, December, 15 It has been discovered the Log4j 2.15.0 RC2 patch does not properly remediate the Log4j vulnerabilities. We are now recommending you upgrade to version 2.16.0. https://github.com/apache/logging-log4j2/releases/tag/rel%2F2.16.0 Update as of Tuesday, December, 14 As promised, we’re continuing to update this page as we find and new information is made public…
We are currently observing a high volume of incidents related to Microsoft Exchange proxy logon vulnerabilities related to the following CVE’s. CVE-2021-34473 Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-31206 Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-34523 Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-31207 Microsoft Exchange Server Remote Code Execution Vulnerability In many cases, we have…
I am very excited to announce a new initiative powered by FRSecure that will be known as Project Hyphae. We will be dedicating time and resources from our technical services team, Team Ambush, to identify risks or indicators of breaches within Hyphae member organizations’ environments that may be impactful—providing the information needed to remediate systems,…
A novel exploit explained and why default deny and user awareness are still king! Ever heard of REBOL? If not, you may be seeing and hearing a lot of it soon. We recently discovered a REBOL exploit used for command-and-control. So, what is REBOL? How is it being used as an exploit? And most importantly,…
With recent high-publicity attacks involving IoT technology such as the Colonial Pipeline attack and the Florida water treatment plant attack, IoT penetration testing has become a hot topic. I’m sure a lot of the readers who landed here are wondering, “what should I do? How do I secure my IoT infrastructure?” We’re going to answer…
Ahhh, summer is upon us. Barbecues, fireworks, swimming pools, and (of course) zero-day vulnerabilities and ransomware. Wait… what? If you were like me last weekend, you were gearing up for a weekend of fun in the sun when you heard the news of a widespread ransomware event affecting Kaseya VSA customers. The timing couldn’t have…