Online Security Threats | Security Challenges

Critical Alert: Microsoft SharePoint Zero-Day Exploited in Active Attacks (CVE-2025-53770)

By: Bethany Kozal 07.21.25

Unpatched SharePoint? This Zero-Day Could Let Attackers In Microsoft has issued an urgent warning regarding a newly weaponized zero-day vulnerability, CVE-2025-53770, affecting on-premise SharePoint Server deployments. With a CVSS score of 9.8, this remote code execution (RCE) flaw is being actively exploited and poses a severe risk to unpatched environments. What’s the Threat? This unauthenticated… Read more »

Tales From the Road: Establishing a Common Language Using NIST

By: Bethany Kozal 03.25.25

Getting a wastewater utility’s OT and IT departments on the same page to address vulnerabilities they didn’t know they had. Wastewater utilities are among some of the most targeted industries for cyber attacks, and the implications can be devastating as operational interruptions or shut-downs could directly affect public health. The Environmental Protection Agency (EPA) does… Read more »

Generative AI in Cybersecurity

By: Charly Bun 01.03.25

Opportunities and Challenges in AI-Driven Threat Detection. Authenticity matters in business and relationships, and the noticeable lack of authenticity in AI-generated communications can limit its practical application. Generative AI in cybersecurity is a perfect example of the dichotomy between automation and human intelligence – AI can provide all the best data, but you have to… Read more »

The Rise of Supply Chain Attacks

By: Christopher Walcutt 12.30.24

Prevent supply chain attacks by securing third-party vendor access to your network and practicing routine patch management.

Ten Cybersecurity Predictions for 2025 That You Need to Prepare For

By: Jim Broome 12.19.24

Attackers Have Evolved – But Most Companies Have Not The greatest gift a cyber attacker gets during the holiday season is another year of largely unfettered access to company data. While we ring in 2025 with the renewed sense of promise a new year brings, threat actors are also celebrating – because while they’ve been… Read more »

Transitioning to Zero Trust Data Protection

By: Jim Broome 10.24.24

Companies are exploring zero trust data protection to insulate their networks against cyber attacks – but are these policies the best option?

Why Does Bob From HR Need Your Email Password?  Because Bob’s Not Bob.

By: Phil Brass 10.21.24

Employees fall for phishing scams frequently, giving attackers an open door to your data. Get smart about these scams with our expert insights.

Proof of Compliance is in the Human Factor

By: Jim Broome 10.17.24

Automating your security can save time and effort – but for proof of cybersecurity compliance, you need the human factor.

A Blocked Security Alert Doesn’t Always Mean “Case Closed”

By: Bethany Kozal 10.15.24

Digging Deeper to Uncover a Fenix Botnet Targeting HR & Payroll Tax Employees in Mexico When a client’s EDR platform alerted that it had blocked a file being accessed through a non-domain address, that could have been “case closed” – the file was blocked and the activity was halted. Or so it seemed. Our… Read more »

Everyone Likes Money — Especially Cyber Criminals.

By: Charly Bun 10.15.24

It’s no secret that new cybercrime trends largely revolve around AI, but what may surprise you is how much attackers are willing to invest for bigger payouts.

DirectDefense Blog