720-891-1663

July 27th, 2025

  • Katie has 15 Days to Secure the Defense Industrial Base
  • Vibe Coding is Interesting But Caveat Emptor
  • CMMC Q&A
  • Pentagon Says it Was Not Impacted by Sharepoint Bug
  • Cisco Wins Again – 3 “10”s in a Row
  • Canadian Cyber in Context
  • Arizona Woman Sentenced in DeepFake IT Worker Scam
  • The Hidden Battlefield – Undersea (Internet Fiber) Cables
  • CoinDCX Confirms Breach Loss of $44 Million
  • That’s the Way the Breach Crumbls

Security News for the week ending July 25th, 2025

This week’s news: AI is great – but is it secure, multiple medical practices permanently shut
down after cyberattack, Google took a month to shutter phone malware using its servers, Google AI overviews make users half as likely to click, but Google still charges websites and
DHS puts 22 year old gardener in charge of fighting domestic terror.

Read details here.

We don’t know what is next for defense contractors, but waiting is not one of them
Between the release of the last piece of CMMC from the Pentagon to the OMB, to Hegseth’s
directive to DoD CIO Arrington, to what the primes are telling their subs, if you are not already
actively engaged in CMMC preparation, you may be too late. We have heard of primes
cancelling contracts, moving work to different subs and primes telling subs your ability to get
new work depends on your SPRS score. If you are not ready, please contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]

July 20th, 2025

  • After Getting Outed, Microsoft Says Stoped using Chinese Engineers to Support DoD
  • CMMC Q&A
  • United Natural Foods (UNFI) Says Ransomware Cost Them $400 Million in Lost Sales Alone
  • Cisco Wins Again – 3 “10”s in a Row
  • DoD Gets $250 Million a Year to Improve Offensive Cyber in New Tax & Spend Bill
  • Flaw in Windows Server 2025 Allows Hackers to Generate Passwords for Every Managed Service Account in an Active Directory Forest
  • Are You Ready to Comply With the Colorado AI Act?
  • Is AI a Silver Bullet for Software Developers?
  • Louis Vuitton Breach Affects Customers in Multiple Countries
  • Seychelles Commercial Bank Hacked, Gigabytes of Tax-Haven Personal Data Sold
  • Maryland Dermatology and Virginia Imaging Practices Lose 3 Million Patient Records

Security News for the week ending July 18th, 2025

This week’s news: DOGE staffer leaked private xAI API key, reading terms of service –
necessary but not fun, TikTok Global sues ByteDance for $58 billion over sale, China’s rare
elements are hot stuff – hot as in stolen and Meta investors settle with Zuckerberg over $8 billion
privacy lawsuit.

Read details here.

Vendor Risk Management Should be High on Your Priority List
I know I keep beating this drum, but the problem is still a problem. That Microsoft was using
Chinese engineers to support sensitive DoD systems until they got outed is the tip of the
iceberg. Do YOU know how YOUR vendors support systems with your customers’ data on it?
Remember that, whether you do or do not know, you will be the one that gets sued. If you need
assistance, please contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]

July 13th, 2025

  • Reminder for NY DFS Regulated Entities – New Requirements
  • AMD Discloses New CPU Flaw
  • CMMC Q&A
  • More States Try Their Hand at “Age Appropriate Design Code” Laws
  • Google Gemini Can Read Your WhatApp Messages … Even if You Said No
  • If You Run ServiceNow, You Need to Fix Your Access Rules
  • It is a Good Thing Hackers Don’t Listen to me
  • Tech Giant Ingram Micro Hit By Ransomware
  • Here is a Cyberattack Some People are Cheering About

Security News for the week ending July 11th, 2025

This week’s news: how to trick ChatGPT? I give up, IT guy let his girlfriend into Deutsche Bank
server rooms, thieves don’t need your keys to steal your car, Paris prosecutors ask police to join
investigation of Twitter and FBI seizes site sharing unreleased and pirated games.

Read details here.

Google Gemini, along with AI in general, is becoming more invasive, whether you want to
use it or not. That means you need to understand where AI exists in your organization
and make sure that you are okay with that. If you have questions or concerns, please
contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]

July 7th, 2025

  • Norwegian Dam Valve Forced Open for Hours by Hacker
  • HPE and Juniper Reach Deal with DoJ to Allow Merger
  • CMMC Q&A
  • AI Lawsuits Explained – Who is Getting Sued?
  • Microsoft Previews New Version Eliminating Kernel Access for Third Party Tools
  • Ban on State AI Laws Removed From Trump’s Bill
  • The Quantum Apocalypse Is Coming, Be Very Afraid, says Wired
  • Qantas is Newest Airline to Get Hacked by Scattered Spider

Security News for the week ending July 4th, 2025

This week’s news: Fake DMV test scams, Meta, TikTok to face wrongful death lawsuits,in
controlled experiments, AI is more accurate than doctors, Qualcomm fixes 3 zero days being
exploited and EU appeals court says tracking based online ads illegal.

Read details here.

Internet of Things (IoT) and Industrial IoT security is at least 10-20 years behind IT
security and IT security is still a challenge. If you need to protect Industrial IoT and many
of you do, please contact us if we can assist.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
[email protected]