Webinar Topic: Ransomware: Threats, Understanding, and Prevention Date: March 25, 2024 Time: 1:30 p.m. – 2:30 p.m. EST   In today's rapidly evolving digital landscape, SMBs face unique challenges and threats. This webinar series aims to equip participants with essential knowledge to navigate these challenges effectively. Our upcoming session will delve into the critical topic of Ransomware, shedding light on the prevailing threats, strategies for understanding Ransomware, and proactive measures for prevention.   This session will feature insights from experts at CISA alongside industry leaders, offering invaluable perspectives and practical advice. Moreover, we encourage active participation by providing dedicated time for questions and answers, ensuring that attendees can engage directly with the presenters.   Who should attend? This webinar is tailored for federal, state, local, and private sector stakeholders interested in gaining a deeper understanding of the risks associated with critical infrastructure systems and their interdependencies.   Don't miss out on this opportunity to enhance your cybersecurity posture and safeguard your organization against evolving threats.   Join Now View More

Please share the "Common Resources," or lack thereof, that you hear frequently from SMBS. Thank you! View More

Raspberry Robin, a new worm exploiting windows endpoints is here. The report reads: "Raspberry Robin is spreading to new Windows systems via infected USB drives containing a malicious .LNK file. Once the USB device is attached and the user clicks the link, the worm spawns a msiexec process using cmd.exe to launch a malicious file stored on the infected drive. It infects new Windows devices, communicates with its command and control servers (C2), and executes malicious payloads using several legitimate Windows utilities: 1. fodhelper (a trusted binary for managing features in Windows settings), 2. msiexec (command line Windows Installer component), 3. and odbcconf (a tool for configuring ODBC drivers)."   Link to the full report: https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/microsoft-finds-raspberry-robin-worm-in-hundreds-of-windows-networks/amp/ View More

Hi colleagues,   Are there any frameworked recommendations for endpoint (host-based) firewall rules for end-user workstations?  I understand my request may result in varying opinions...and that's ok. 🙂 I also know that I will need to review the existing buisness-sanctioned connections to ensure I don't break anything that the bsuiness needs to operate.  Thanks in advance for any advice, links to frameworks that provide specific guidance etc. View More