The IT-ISAC is a non-profit corporation formed by IT companies as a specialized forum for managing risks to their corporations and the IT infrastructure.
Manassas, VA
Joined November 2010
- Tweets2.7K
- Following607
- Followers2.4K
- Likes904
Pinned Tweet
Cyber threats evolve, but the fundamentals still matter. 🛡️
Join IT-ISAC for an upcoming Cybersecurity Awareness Month webinar on Wednesday, October 21 at 3 PM ET -- Make It Harder: Turning Today’s Cyber Threats Into Action.
Drawing directly from our latest State of the Threat report, this session translates current threat data into actionable steps to make it harder to get in. We’ll cover real-world cybercriminal behavior, practical ways to lock down your credentials, and strategies to build lasting resilience.
Secure your spot:
🔗 hubs.ly/Q04z5SLB0
#CybersecurityAwarenessMonth #InformationSharing #ThreatIntelligence #Cybersecurity #Webinar
💡 DID YOU KNOW?
According to the 2026 @Verizon Data Breach Investigations Report (DBIR), vulnerability exploitation has officially become the #1 initial access vector for breaches, accounting for 31% of incidents -- surpassing credential abuse.
Leaving known software weaknesses unpatched gives attackers a direct path in. While disclosure volumes continue to grow rapidly, defenders cannot simply treat patch management as an all-or-nothing task. Moving toward a risk-based approach that prioritizes high-impact, actively exploited vulnerabilities is one of the most vital steps organizations can take to eliminate entry points before attackers take advantage.
Make It Harder for Attackers to Exploit You. Modernize your patching strategy with our brand-new Patching & Updates one-pager, or explore our full suite of resources on our #CybersecurityAwarenessMonth landing page: hubs.ly/Q04CN0JK0
#StaySafeOnline #InformationSharing #PatchManagement #Cybersecurity #VulnerabilityManagement #ISAC
It's time for a #CyberByte!
A critical buffer-overflow flaw (CVE-2026-97631, CVSS 9.5) in the open-source EDK II UEFI PXE network-boot driver could allow unauthenticated attackers to execute arbitrary code before OS-level security or Secure Boot kicks in. Exploitation requires sending crafted ICMP error messages while a vulnerable system is actively performing a network boot.
Organizations should immediately restrict PXE network access to trusted devices, disable unused network-boot options, and monitor for vendor firmware patches.
Read More: hubs.ly/Q04CPRwd0
#informationsharing #cybersecurity #vulnerability #infosec
Stop giving attackers a free pass through unpatched systems!
Our final #CybersecurityAwarenessMonth article breaks down how to transform routine software updates into a proactive defense strategy that puts up a better shield against adversaries.
Inside the blog:
⚙️ The Fundamentals: 5 essential practices for securing devices, edge perimeter systems, and end-of-life software.
🎯 Beyond the Basics: How to use CISA's KEV catalog, EPSS scores, and SBOMs to prioritize active threats and secure your supply chain.
Upgrade your vulnerability strategy today.
Read the full post: hubs.ly/Q04CC9ml0
#ITISAC #Cybersecurity #PatchManagement #ThreatIntelligence #VulnerabilityManagement #InfoSec
🔐 Make It Harder to Exploit You!
Keeping software and devices updated is one of the simplest ways to reduce your exposure to cyber threats.
For this week of Cybersecurity Awareness Month, the IT-ISAC is highlighting five essential practices to help organizations stay ahead of vulnerabilities, from timely patching to verifying updates are successfully installed.
🎥 Watch our short video to learn more!
#CybersecurityAwarenessMonth #Cybersecurity #PatchManagement #InformationSharing
New One-Pager Available! 🚨
To help the sector defend against recent PHP remote code execution (RCE) vulnerabilities, the IT-ISAC has compiled remediation guidance into our new PHP2Shell mitigation map.
Download the guide on our Resources Page: hubs.ly/Q04CmC4j0
#Cybersecurity #ThreatIntelligence #InfoSec #VulnerabilityManagement #PHP #ISAC #CyberDefense
Software vulnerabilities are open doors for attackers. Don't make it easy to walk right in! 🚪
Lock them out by keeping your devices, applications, browsers, and systems patched and up to date.
This #CybersecurityAwarenessMonth, Make It Harder to Exploit You (and your organization!):
📱 Enable automatic updates across operating systems, apps, and browsers.
⚡ Prioritize critical patches to close high-risk entry points fast.
📡 Update firmware on routers, network appliances, and IoT devices.
Ready to go beyond the fundamentals? Elevate your defense with risk-based vulnerability management. Utilize tools like KEV, EPSS, asset criticality, exposure, and threat intelligence to prioritize vulnerabilities that pose the greatest risk.
Threats evolve, and your patch strategy should too. Check out our special Cybersecurity Awareness Month webpage for more: hubs.ly/Q04CgL4d0
#Cybersecurity #VulnerabilityManagement #Patching #InformationSharing #ISAC #CyberRisk #InfoSec
💡 DID YOU KNOW?
According to a recent report from @Pistachioapp_ analyzing 2.47 million simulated phishing attacks across more than 600 organizations, 1 in 3 employees (33%) clicked on a phishing link.
Attackers rely on speed, high-volume automation, and convincing psychological tactics to trick users, whether through traditional email, SMS, phone calls, or QR codes.
Make It Harder to Fool You by slowing down, looking for key red flags, and verifying unexpected requests before taking action.
Go beyond the fundamentals with our one-pager highlighting advanced phishing tactics and technical social engineering controls, or visit our #CybersecurityAwarenessMonth landing page for more details:
🔗 hubs.ly/Q04C7-k10
#StaySafeOnline #InformationSharing #Phishing #Cybersecurity #SocialEngineering
It's time for a #CyberByte!
A joint cyber attack on a Ukrainian grain logistics company revealed a tag-team effort between Russia-linked hacking groups UAC-0099 and Sandworm. UAC-0099 breached the firm through email phishing before access was subsequently transferred to Sandworm; attackers planted a backdoor called MatchWok to maintain access, and later deployed a previously undocumented tool named MythicRatatoskr, which supported remote command execution, file theft, and screenshot capture.
Read More: hubs.ly/Q04C513W0
#cybersecurity #informationsharing #infosec #phishing
🎣 Phishing is no longer just a bad email -- it's a multi-channel trap.
Attackers are leveraging text messages, QR codes, phone calls, and malicious sites to trick users into handing over access. This week for #CybersecurityAwarenessMonth, our latest blog post breaks down how to Make It Harder to Fool You by spotting the lures and verifying before you trust.
We also go beyond the fundamentals to discuss more sophisticated techniques used by some attackers, how to detect them, and how to respond.
Read the full blog post to sharpen your defenses → hubs.ly/Q04BTMb30
#Phishing #SocialEngineering #Cybersecurity #InformationSharing #StaySafeOnline #Blog #IdentitySecurity
⏰ LAST CALL! Cyber threats aren't slowing down. Neither should your defenses.
Cyber threats evolve, but the fundamentals still matter. Don't miss the IT-ISAC’s Cybersecurity Awareness Month webinar: Make It Harder: Turning Today’s Cyber Threats Into Action.
📆 When: Tomorrow, Wednesday, October 21 at 3 PM ET
🎟️ Cost: FREE & Open to the Sector!
Drawing directly from our latest State of the Threat report, we’ll translate real-world threat data into actionable steps to lock down your credentials, defend against cybercriminals, and build resilience.
💡 Cybersecurity is a team effort. Tag a colleague, share the invite, and help more defenders get ahead of the threats.
🔗 Save your seat now: hubs.ly/Q04BvDLh0
#CybersecurityAwarenessMonth #InformationSharing #ThreatIntelligence #Cybersecurity #Webinar #CyberThreats #Ransomware
Phishing has left the inbox. Have your defenses kept up? Attackers use SMS, voice calls, QR codes, and malicious links to bypass your guardrails. 🎣
This #CybersecurityAwarenessMonth, Make It Harder to Fool You (and your organization!):
🛑 Slow down and inspect unexpected requests across email, text, phone calls, and QR codes
🛑 Verify senders through official channels before sharing credentials or clicking links
🛑 Report suspicious messages immediately to help defend your organization’s environment
Ready to go beyond the fundamentals? Attackers are raising the stakes with advanced social engineering techniques, including Adversary-in-the-Middle attacks, QR code scams (quishing), and ClickFix exploits.
Tactics are evolving and that means your defenses should too.
🔒 Check out our special Cybersecurity Awareness Month webpage for more: hubs.ly/Q04BvBdC0
#Cybersecurity #Phishing #SocialEngineering #StaySafeOnline #ISAC #ClickFix
💡 DID YOU KNOW?
According to research from @okta, multi-factor authentication adoption has reached up to 70% — yet nearly a third of users still lack MFA protection.
Leaving administrative and employee accounts guarded by passwords alone gives attackers an unguarded path into your perimeter. Enforcing MFA across every entry point and transitioning toward phishing-resistant identity controls is one of the most effective steps defenders can take to eliminate account takeover risks.
Make It Harder for Attackers to Take Over. Strengthen your access controls with our new MFA one-pager, or explore our full suite of resources on our #CybersecurityAwarenessMonth landing page:
🔗 hubs.ly/Q04BpNkR0
#StaySafeOnline #InformationSharing #MFA #Cybersecurity #IdentitySecurity #Phishing
It's time for a #CyberByte!
The @FBI and @CrowdStrike disrupted several U.S.-based "laptop farms" operated by FAMOUS CHOLLIMA, a North Korean threat group that uses stolen identities to secure remote IT jobs at American companies. The scheme allowed illicit remote workers to funnel corporate earnings back to the North Korean regime while maintaining unauthorized insider access to critical industry networks.
Read More: hubs.ly/Q04BjVwk0
#cybersecurity #informationsharing #threatintelligence #cyberattack
🔐 MFA stops attackers in their tracks, even when credentials leak.
Compromised passwords are bad, but allowing an attacker to turn those credentials into full account access is worse. This week for #CybersecurityAwarenessMonth, our latest blog post focuses on how to Make It Harder to Take Over by putting multi-factor authentication (MFA) to work.
Going beyond the basics, we dive into phishing-resistant MFA, stronger authentication methods, and robust identity controls designed to shut down account takeovers before they start.
Read the full post to level up your defenses here → hubs.ly/Q04B7KHn0
#MFA #IdentitySecurity #Cybersecurity #InformationSharing #StaySafeOnline #Phishing #Blog
Even if an attacker gets your password, they shouldn't get your account or your data. 🛡️
This #CybersecurityAwarenessMonth, Make It Harder to Take Over:
⚡ Enable Multi-Factor Authentication (MFA) to add a crucial second layer of defense
⚡ Upgrade to phishing-resistant MFA to block account takeovers through social engineering tactics
⚡ Implement identity controls that make stolen credentials useless to attackers
This week, we're breaking down the fundamentals of MFA—and what it takes to go beyond the basics to better protect accounts, identities, and the information they access.
🔒 Check out our Cybersecurity Awareness Month specific webpage for more: hubs.ly/Q04B0Qd50
#StaySafeOnline #IdentitySecurity #MFA #Cybersecurity
IT-ISAC retweeted
The recent cyberattack affecting refrigeration systems at supermarkets across France serves as an important reminder that cybersecurity and operational resilience go hand in hand.
For the food and agriculture sector, connected systems support everything from refrigeration and temperature monitoring to food processing, storage, and distribution. Protecting these systems is essential to maintaining safe, reliable operations.
A few important resilience considerations for organizations:
✔️ Know which operational systems are connected to the internet and who can access them.
✔️ Review remote access, including connections maintained by equipment vendors and service providers.
✔️ Keep equipment firmware updated and address known vulnerabilities.
✔️ Ensure monitoring, response, and recovery procedures account for disruptions to critical equipment.
Cybersecurity isn't just about protecting data. It's about protecting the operations that keep our food supply chain moving.
#Cybersecurity #FoodandAgriculture #OperationalTechnology #CyberResilience
Hackers forced the temperature of fridges and freezers in many French supermarkets up to 122 degrees Fahrenheit, causing fires and spoiling food at several hundred stores in a major cyber attack reut.rs/4jk2etA
💡 DID YOU KNOW?
According to data from the National Cybersecurity Alliance (@StaySafeOnline), only 62% of people regularly create unique passwords for their accounts. 41% never use a password manager.
That lack of basic password hygiene is a huge vulnerability — handing attackers a master key to test across multiple accounts.
This Cybersecurity Awareness Month, IT-ISAC is encouraging organizations to Make It Harder to get In. Pairing long, unique passwords with password managers and passkeys shuts down easy access points.
Go beyond the fundamentals with our one-pager highlighting the importance of password managers, or visit our #CybersecurityAwarenessMonth landing page for more details:
🔗 hubs.ly/Q04zLbR90
#CybersecurityAwarenessMonth #InformationSharing #Passkeys #Cybersecurity #PasswordManager
It's time for a #CyberByte!
Researchers have uncovered "PoeLLM," a dynamic malware campaign actively targeting enterprise AI infrastructure like LiteLLM and Ollama to mine cryptocurrency and scan for vulnerabilities. The malware relies on a novel command-and-control mechanism that decodes IP addresses using changing words from a public GitHub poem to stay hidden.
To protect your environment, audit external open-source deployments and restrict unnecessary public access to service ports.
Read More: hubs.ly/Q04zFqDk0
#cybersecurity #informationsharing #threatintelligence #malware
Attackers don’t always break in. Sometimes they simply log in.
Stolen, reused, or exposed credentials remain one of the easiest access points into your company's data. This week's blog for #CybersecurityAwarenessMonth breaks down how to make it harder for attackers to get in by moving beyond password basics to passkeys, service account hygiene, and proactive credential monitoring.
Check out the full post to explore key questions every defender should be asking:
🔗 hubs.ly/Q04zsXPf0
#StaySafeOnline #InformationSharing #Blog #Passkeys #IdentitySecurity #Cybersecurity
