Sugar Security

🚨 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗔𝗹𝗲𝗿𝘁 𝗳𝗿𝗼𝗺 𝗡𝗔𝗗𝗔 🚨 𝗪𝗲'𝗿𝗲 𝗲𝘅𝗰𝗶𝘁𝗲𝗱 𝘁𝗼 𝗮𝗻𝗻𝗼𝘂𝗻𝗰𝗲 𝘁𝗵𝗮𝘁 𝗕𝗹𝗮𝗰𝗸 𝗕𝗿𝗲𝗮𝗰𝗵 𝗵𝗮𝘀 𝗰𝗼𝗹𝗹𝗮𝗯𝗼𝗿𝗮𝘁𝗲𝗱 𝘄𝗶𝘁𝗵 𝗡𝗔𝗗𝗔 𝘁𝗼 𝗽𝗿𝗼𝘃𝗶𝗱𝗲 𝗰𝗿𝘂𝗰𝗶𝗮𝗹 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗶𝗻 𝘁𝗵𝗲 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗔𝗹𝗲𝗿𝘁 𝘀𝗲𝗻𝘁 𝗼𝘂𝘁 𝘁𝗵𝗶𝘀 𝗺𝗼𝗿𝗻𝗶𝗻𝗴 𝘁𝗼 𝗮𝗹𝗹 𝗡𝗔𝗗𝗔 𝗺𝗲𝗺𝗯𝗲𝗿𝘀. 🛡️ At Black Breach, we're dedicated to being a cybersecurity leader in the dealership space earning your trust and protecting dealers from threats, liability, and compliance. We’re actively monitoring changes to the CrowdStrike URLs list and will keep you updated on our blog: Black Breach Blog Post. https://lnkd.in/eMNegpuR Mark your calendars for August 6th! 📅 Join us for a webinar with NADA to explore cost-effective ways to handle FTC compliance, liability, and cybersecurity in the post-CDK, CrowdStrike, and KnowBe4 world. Don’t miss out – RSVP today! https://lnkd.in/ekhnN6E2 #CyberSecurity #Dealership #Automotive #BlackBreach #NADA #Webinar #CrowdStrike #FTC #ITSecurity

🚨 𝐁𝐥𝐚𝐜𝐤 𝐁𝐫𝐞𝐚𝐜𝐡 𝐀𝐮𝐭𝐨 𝐃𝐞𝐚𝐥𝐞𝐫 𝐂𝐲𝐛𝐞𝐫 𝐓𝐡𝐫𝐞𝐚𝐭 𝐀𝐥𝐞𝐫𝐭 🚨 Threat actors are exploiting the global CrowdStrike outage to create counterfeit domains for phishing emails (see them all below).  𝐃𝐨𝐧’𝐭 𝐅𝐚𝐥𝐥 𝐟𝐨𝐫 𝐈𝐭. 𝐖𝐞 𝐬𝐭𝐫𝐨𝐧𝐠𝐥𝐲 𝐫𝐞𝐜𝐨𝐦𝐦𝐞𝐧𝐝 𝐭𝐡𝐚𝐭 𝐲𝐨𝐮𝐫 𝐈𝐓 𝐭𝐞𝐚𝐦 𝐛𝐥𝐨𝐜𝐤 𝐭𝐡𝐞𝐬𝐞 𝐜𝐨𝐮𝐧𝐭𝐞𝐫𝐟𝐞𝐢𝐭 𝐝𝐨𝐦𝐚𝐢𝐧𝐬 𝐢𝐦𝐦𝐞𝐝𝐢𝐚𝐭𝐞𝐥𝐲. 𝐏𝐥𝐞𝐚𝐬𝐞 𝐩𝐚𝐬𝐬 𝐭𝐡𝐢𝐬 𝐨𝐧 𝐭𝐨 𝐭𝐡𝐨𝐬𝐞 𝐮𝐬𝐢𝐧𝐠 𝐂𝐫𝐨𝐰𝐝𝐒𝐭𝐫𝐢𝐤𝐞. CrowdStrike has also reported that cybercriminals are using the outage as bait to hack prospective targets. This includes: • Impersonating CrowdStrike staff in phone calls • Posing as independent researchers, claiming to have evidence that the technical issue is linked to a cyberattack • Stay vigilant and ensure your team is aware of these tactics. #CyberSecurity #automotive #AutoDealers #CrowdStrike #ITSecurity #BlackBreach, National Automobile Dealers Association (NADA), CBT News Automotive News, Peter Smith, ✭ Charity Dunning✭, David Spisak, Brian Kramer, John Acosta

if you are only running wifite, you are missing out!

Dealers are asking me if they are the next targets for BlackSuit ransomware following the public attack on CDK Global. Here’s how BlackSuit ransomware is distributed and whether current FTC cybersecurity compliance will protect you: 📧 1. Infected Email Attachments (Macros): Cybercriminals often use email attachments containing infected links or macros to distribute BlackSuit. Opening these attachments or enabling macros can trigger ransomware execution. ❌ FTC Safeguards compliance does not require protections against these methods and social engineering tactics. 💻 2. Torrent Websites: BlackSuit can be embedded in torrent files. Downloading and opening these infected files from peer-to-peer networks can lead to system infection. ❌ FTC Safeguards do not cover web traffic protection. 📢 3. Malicious Ads (Malvertising): Clicking on malicious ads can redirect users to websites that automatically download and install ransomware. ❌ FTC Safeguards do not cover protection against clicking on malicious ads. ☣ 4. Trojans: BlackSuit can be delivered via Trojans, which are malicious programs capable of downloading and installing other malware, including ransomware. Trojans are often spread through phishing emails, fake software updates, or compromised websites. ✅ FTC Safeguards can cover this if properly implemented. ✅ Dealerships must ensure their cybersecurity teams implement FTC Safeguards correctly and proactively. Continuous monitoring, MDR licensing, patching, and a 24/7 SOC can detect and prevent traditional ransomware attacks. #cybersecurity #autodealers #automotive #dealers

Happy to open-source another component within Sugar - our OpenVas scanner! https://lnkd.in/gDqaDtzP OpenVAS is an incredible free security tool by Greenbone and many teams *want* to use it but can't figure out the installation. This makes it easier. This open-source version is not production-ready out of the box, it's got two different "modes" that teams will need to look into while building it out.

This past week we learned from 🍬 Logan Evans, CISSP, OSCP or Sugar Security on the Top Cybersecurity Risks for Startups and how to be proactive for your venture. Check it out and learn from the workshop below https://lnkd.in/ea_ixMYB

Join us for Securing Your B2B SaaS Startup: Proactive Cybersecurity Strategies with Sugar Security on Thursday at 1PM EST, sign up below! https://lnkd.in/exQ3bq4b

That's right! We're twice as sweet now.

We're getting even sweeter 😎