Securin Inc.’s Post

⏰ Q4 is well underway. Know where you stand on compliance.  From HIPAA to PCI DSS, NERC CIP, H.R. 8403, and more. Whether you’re a financial services provider, government agency, energy provider or retailer, as year-end approaches, know where your organization stands on compliance obligations for risk and vulnerability management. Contact Securin to know where you stand - https://lnkd.in/g8KYrVhE #compliance #cybersecurity #regulations #meetcompliance #staycompliant

🚨You’re never too old to be patched… Wordpress plugin Jetpack issued a critical update for a 10-year-old vulnerability yesterday. Here’s what you need to know - and what to do: ⚠️ Impact: The vulnerability has persisted since v3.9.9 - released in 2016. 27 million WordPress sites run in Jetpack. 🛠️ Exploit: The critical vulnerability is in the Contact Form feature, and could be used by logged-in users to access forms submitted by others on a website. There is no evidence to date that the vulnerability has ever been exploited in the wild, but now that the news is out, it’s likely that attackers will target it. 🔑 Remediation: Jetpack says it has worked with WordPress to automatically update the plugin on installed sites and that “Most websites have been or will soon be automatically updated to a secured version.” To be on the safe side, don't wait 👉 update to v 13.9.1 to ensure your WordPress site is secured. https://lnkd.in/dSyBeam6 #ProactiveSecurity #VulnerabilityManagement #Cybersecurity

Securin Inc. is bringing our cybersecurity expertise to Response Con. Come learn how we can help protect your organization!

💡 “Don't put a product out there, saying it’s a silver bullet. Rather hear what the customer has to say, and let’s go solve the problem.” 🎙 From employee #185 at TIBCO to CEO & Founder - Securin CEO Ram Movva joined Douglas Noll on the Listening with Leaders podcast to share his leadership journey, along with insights into how today’s leaders can navigate the cybersecurity landscape. Have a listen 👇 https://lnkd.in/gzSPFDN9 #ProactiveCybersecurity #Leadership

🎣 How sure are you that you wouldn’t fall for a phishing scam? Understanding the anatomy of a phishing email is key to spotting these deceptive attempts. Learn how scammers craft their messages to look convincing and safeguard your inbox from these threats. While you’re enhancing your cyber awareness, don’t miss out on Securin’s blog on Social Media and Privacy to empower yourself and take control of your online presence. https://lnkd.in/gG9ijBjn #CyberSecurity #PhishingAwareness #OnlineSafety #Securin #StaySafeOnline #ThinkBeforeYouClick

🚱 With attacks on water and wastewater systems on the rise, Securin’s Aviral Verma took a dive into the most common attack vectors. As the image shows, there’s a lot of low-hanging fruit available for attackers: 🚨 Vulnerability / misconfiguration exploitation (27.5%) 🚨 Exploit of public-facing application (15%) 🚨 External remote services (15%) 🚨 Compromised credentials (10%) As Aviral notes, these “indicate that threat actors don’t need to rely on sophisticated attack mechanisms. They’re going after the low-hanging fruit and internet-exposed assets with known, persistent vulnerabilities. For example, Cyber Av3ngers exploited Unitronics PLCs vulnerability CVE-2023-6448 to target the Municipal Water Authority of Aliquippa last year.” (Link in comments) What’s the solution? “Water and wastewater utilities especially need to pay attention to their IT and OT convergence,” says Aviral. “These interconnected systems control critical infrastructure. Vulnerabilities in the IT integration can expose vital operations to cyberattacks, potentially disrupting services and compromising public safety. To counter threat actors, constant awareness, analysis and action is needed.” #ProactiveSecurity #CVE #CriticalInfrastructure

🔥 20,000 followers! 🔥 And counting... Thanks to everyone who has shared, commented and helped grow this amazing community. Looking forward to more great discussions ahead with our customers, partners and industry colleagues! Let’s keep fighting the good fight and make proactive security a reality for everyone 💪 #ProactiveSecurity #Cybersecurity

🚨 ZERO-DAY Alert: CVE-2024-47095 - Reflected XSS in Follett School Solutions Destiny Library Manager 🚨 Securin researchers have discovered a reflected cross-site scripting (XSS) vulnerability in Follett School Solutions Destiny Library Manager (before v22.0.1 AU1). Here’s what you need to know: ⚠️ Impact: If the application is accessed via a malicious link, attackers can display arbitrary, potentially harmful content on the otherwise legitimate website. 🛠️ Proof of Concept (PoC - see image below):  We tested this on version 21.2.0 RC2 of the software, where malicious actors could manipulate a valid site URL to exploit this vulnerability. 🔑 Remediation: Encode special characters before reflecting in HTML or JavaScript context via server-side templating. ⏱ Timeline breakdown: May 21, 2024: Vulnerability discovered by Securin. July 01, 2024: Reported to Follett, who confirmed the issue on July 8. August 16, 2024: Official fix released by Follett. Security teams using Destiny Library Manager should upgrade to the latest version ASAP to protect against this vulnerability. Stay vigilant, get the full story: link in comments 👇 #Cybersecurity #ZeroDay #ProactiveSecurity