Securin Inc.

?? The recent Linux kernel / Android zero day announcement (CVE-2024-36971) was a timely reminder of the dangers of zero-day vulnerabilities. The #RCE vulnerability impacting the Linux / Android kernel - which was actively being exploited in the wild - has been patched. Unfortunately, there are plenty more where that came from. So what can organizations do to protect themselves? ?? Our blog post takes a look at what makes zero-day attacks so dangerous, walking through the attack lifecycle and outlining some key actions software developers can take to help eliminate weakness and make code more secure. Link in the comments ?? #ProactiveSecurity #CVE #ZeroDay

Cybercrime is costing Australian businesses millions annually. With cyber attacks increasing in frequency and sophistication, the financial impact on organizations—especially mid-sized businesses—is staggering. From lost revenue to recovery expenses, the consequences are far-reaching.? ?? The key to protecting your business lies in proactive vulnerability management. Identifying and addressing vulnerabilities early can save you from costly breaches and ensure the security of your critical data.? ?? Did you know? Small and medium businesses account for a significant portion of cybercrime victims, with many unable to recover after a major attack. Strengthening your cyber defenses today safeguards your tomorrow.? ?? Take control of your security posture and reduce your risk. Learn how vulnerability management can make a difference: https://lnkd.in/gqGFPhwG #CyberCosts #FinancialImpact #SMBCybersecurity #RiskMitigation #DataProtection #BusinessSafety #AusCyber #SecureYourBusiness

?? Vulnerable by default, exploited with ease: Water and wastewater Industrial Control Systems are the third most vulnerable in 2024 –? Securin analysts have uncovered 800+ vulnerabilities, and counting… ?? With more than 150,000 public water systems in the USA it’s time for urgent action to mitigate weakness across IT and OT systems, for example: CVE-2023-6448: The Unitronics PLC vulnerability exploited by Cyber Av3ngers to target the Municipal Water Authority of Aliquippa. The USA’s Environmental Protection Agency found that 70% of utilities inspected by federal officials in the past year violated standards designed to prevent breaches. Even the smallest providers can be targeted. Who’s attacking? More on that later in the week… #ProactiveSecurity #Water #BeResilient

?? New CVEs are being published all the time - 30,000+ in the last year alone - but it’s important not to overlook the old timers that continue to provide fertile ground for attackers, years after they were first uncovered ?? ?? Here are some old favorites that continue to be exploited - and reintroduced during development: ?? CWE-79 (Cross-site Scripting) tops the list with 30,820 CVEs mapped to it, highlighting the prevalent risk of #XSS attacks in web applications. ?? Other consistent performers: CWE-787: Out-of-bounds Write, CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, CWE-20: Improper Input Validation & CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') are the other CVEs that have been consistently in the Top 10. ?? What can you do? Two quick takeaways: 1?? We need more secure coding practices. Modern web applications are complex, but there's no need to keep re-introducing flaws like XSS in 2024. 2?? Keeping pace with the latest threats is critical, but it’s also important not to fall behind. The best proactive security postures keep a strategic eye on prevention as well as prediction. Ready for more? Checkour?blog post - link in the comments. #ProactiveSecurity #SecureByDesign #Cybersecurity #BeResilient

A big shoutout to everyone who stopped by our booth during the NM Technology In Education (NMTIE) conference on Nov 14th! It was a pleasure meeting you and hearing your amazing stories about how technology is transforming education and innovation. Conferences like NMTIE remind us of the incredible work happening in our community and the power of collaboration.?? CONGRATULATIONS to Erica Keppel for winning the raffle. If you did not get a chance to connect with us, feel free to reach out here on LinkedIn or visit our website https://www.securin.io/. We’d love to continue the conversation! Here’s to shaping the future together. #NMTIE #Networking #Innovation #ThankYou #NMTIE2024 Richard Bowman, Duane Arruti, Daniel Lunceford, David McGee, Ben Glickler, Daniel Archuleta, and many, many more...

??? Weak as water? Cyber attacks against US water supplies are increasing, and the stark reality is that it’s too easy. Securin analysis of 75 attacks in 2024 alone shows a sector struggling to implement even basic cybersecurity hygiene. When CISA stated that threat actors are breaching US operational technology using “unsophisticated means”, here’s what that looks like in practice: ?? Vulnerability and misconfiguration exploits: 34% ?? Exploitation of public-facing applications: 19% ?? Compromised credentials: 13% Following several high-profile attacks, water companies have responded well to mitigate the potential damage. But with so much at stake, water and wastewater utilities must prioritize proactive security, and pay attention to IT and OT convergence. What vulnerabilities should water utility defenders be looking for? More on that in our next post. #ProactiveSecurity #BeResilient #Water

Playing cyber defense for AI is no different from elsewhere in the software supply chain. The best approach is built on transparency and a thorough understanding of every component, vulnerability and potential entry point within your AI system: a Bill of Materials. ?? Where do you even start? Securin’s analysts headed to Hugging Face and the LVE Project, fired up the machine learning weaponry and started defining and generating an #AIBoM for #LLMs. How did it turn out? Read on (link in the comments)?? #proactivesecurity #cybersecurity #vulnerabilitymanagement

?? Securin is proud to be a sponsor at the New Mexico Technology in Education Conference! Join us as we continue to promote a safer digital world for educators and students alike. If you're at the event, connect with our great team members Gaurav Mehta, Ryan Riley, Deb Miller, and Shaundra S.! #Securin #Cybersecurity #EdTech #NMTIE2024

?? As 2024 draws to a close, Australia is experiencing an unprecedented rise in cyber attacks, with the Australian Cyber Security Centre (ACSC) reporting a steady increase in data breaches since 2021. ?? Critical industries like energy, healthcare, and finance must stay vigilant and strategically manage their vulnerabilities to protect against cyber threats. ?? The stakes are high: one successful attack can impact millions, disrupt essential services, and erode public trust. ?? Now is the time to step up defenses. Embracing advanced tools like Vulnerability Management as a Service (VMaaS) enables organizations to efficiently identify, prioritize, and remediate threats. Ready to fortify your defenses and stay a step ahead? Find out how VMaaS can streamline your path to resilience: https://lnkd.in/gqGFPhwG #CyberSecurity #Australia #CyberThreats #Securin #InformationSecurity #InformationSecurity #VMaaS #AusCyber #CyberSafeAustralia #ACSC #CriticalInfrastructure

?? Every 6 minutes, an Australian business encounters a cyber attack. If successful, it's tomorrow's headline; if blocked, attackers only refine their tactics, often leveraging AI and sophisticated strategies to break through. The solution? Proactive cybersecurity. Australian organizations need best practices and advanced vulnerability management to stay ahead of evolving threats. Discover how to strengthen your security posture and build resilience against the next wave of attacks. ???? Tech-based cyber solutions like Vulnerability-Management-as-a-Service help busy organizations automate the whole vulnerability management process. https://lnkd.in/gE385uup #CyberAwareness #BusinessResilience #AusCyber #DataProtection #Ransomware #CyberProtection #AustralianSignalsDirectorate #ACSC #Securin #CyberSafeAustralia