CyberSecurity Updates

All macOS users are highly recommended to not download or use pirated apps that claim to be an authentic app at a highly discounted rate. When researching apps, users should only download the app from the legitimate Apple store and from the original author of the app. https://thehackernews.com/2023/02/hackers-using-trojanized-macos-apps-to.html

The threat of leaking data if a ransom is not paid is a common tactic amongst ransomware actors. In this case, the group would still leak data even if ransom was paid. By using this model, the group was setting themselves up to not get paid by anyone because there would be no benefit to paying. Although this is a risk taken by companies paying a ransom, most groups do not follow this model to…

This new recommendation from Microsoft demonstrates how adding over-encompassing AV exclusions can negatively impact and organization’s security. Especially in the current threat landscape, many actors make use of PowerShell and malicious IIS extensions to perform their attacks. Having these exclusions in place allows for a large gap in visibility where the threat actors can go unnoticed. On top of removing these exclusions and following the other recommendations from Microsoft, it is also recommended to frequently…