Cory Rey

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a medium-severity security flaw impacting Wing FTP to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. News brought to you by: cybertzar.com #cybersecurity https://lnkd.in/gHbcb4aF

2

CISA Adds Four Vulnerabilities to KEV Catalog — Time to Act The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently updated its Known Exploited Vulnerabilities (KEV) catalog, adding four security flaws after confirming evidence of active exploitation in the wild. Staying informed and responding quickly to KEV additions is critical to reducing exposure and protecting your organization. Highlighted in the update: - CVE-2025-68645 (CVSS score: 8.8) — A PHP remote file inclusion vulnerability in Synacor Zimbra Collaboration Suite (ZCS) that could allow a What this means for security teams: - Treat KEV-listed vulnerabilities as high-priority. CISA adds entries based on observed exploitation, so rapid remediation is essential. - If you run Zimbra Collaboration Suite, prioritize verification, patching, or implementing vendor-recommended mitigations. - Inventory affected assets, apply patches or mitigations, and validate remediation through scans and tests. - Monitor logs and detection systems for indicators of compromise, and update IDS/IPS and EDR signatures. - Coordinate with incident response and business stakeholders to ensure continuity and communication. Next steps: 1. Review the full KEV update and CISA guidance. 2. Identify affected systems in your environment. 3. Apply patches or mitigations immediately, or implement compensating controls if patching isn’t possible. 4. Validate remediation and continue heightened monitoring. Read the full report and details here: https://lnkd.in/gWKuscKP Staying proactive, coordinated, and transparent is our best defense. If you need to prioritize actions across your estate, now is the moment to mobilize resources and reduce risk. #Cybersecurity #CISA #KEV #VulnerabilityManagement #Zimbra #ThreatIntel #PatchNow #Infosec #IncidentResponse #SecurityOps

1

Your SOC team isn't losing to attackers, they're buried under volume. Microsoft screens ~5 billion emails daily for malware and phishing threats (per the 2025 Digital Defense Report). Most user-reported alerts? False positives. Manual triage? Often 20–30 minutes each. The numbers don't scale. Enter Security Copilot agents, included at no extra cost with Microsoft 365 E5. Since Ignite 2025, they're embedded directly in Defender XDR, Entra, Intune, and Purview. The Phishing Triage Agent in Defender autonomously classifies user-submitted phishing reports, resolves obvious false positives, explains verdicts in plain language, and escalates only real threats. From Microsoft's trials and early data: SOC analysts detected malicious emails up to 550% faster (or 6.5× in some scenarios), with major efficiency gains leading to freeing up teams to focus on genuine threats instead of noise. This augments your analysts, not replaces them and thereby letting them tackle complex issues they were hired for. Governance? Built-in: Every agent decision follows your policies, is documented as a transparent decision tree/log, audited in Purview, and keeps human-in-the-loop with overrides. If you're on E5, quick wins this week: - Check your tenant's Security Copilot activation status. - Enable the Phishing Triage Agent in the Defender portal. - Brief your CISO on the governance and auditing model - it's a strong shift to proactive, agent-assisted security. Your existing E5 license just unlocked faster, smarter SOC operations. What's your experience with the Phishing Triage Agent or Security Copilot agents so far? Learn more about optimizing your E5 license: https://hubs.la/Q0473gpt0 Shahid Mohammed I Matteo Migliori I Malissa Salzinger I Stephen Lazzara #CyberSecurity #MicrosoftSecurity #MicrosoftSentinel #XDR #SecOps #SecurityCopilot #M365Copilot

9

The National Cyber League competition preps students for careers in cybersecurity. Students work to solve challenges like identifying hackers from forensic data, auditing vulnerable websites, recovering from ransomware attacks, and more! Learn more: https://buff.ly/0c51oP7

2

Security teams are buried in dashboards, queries, and manual triage. ORDR IQ changes that. Ask a question or give a prompt in plain language: "Which devices are affected by this CVE?" or "Generate zero-trust policies for these pumps," and get verified, actionable answers in seconds. Built on our Asset Intelligence Graph spanning 100M+ devices, ORDR IQ turns insight into execution with full governance and audit trails built in. 🔗 https://bit.ly/48aQROh

9

A PenTest report alone doesn’t reduce risk, remediation does. At CyberSync Hub, we guide organizations through a structured remediation roadmap that prioritizes real threats, addresses root causes, and validates fixes through retesting. Because security isn’t about knowing your weaknesses, it’s about closing them. #CyberSecurity #PenTesting #Remediation #RiskManagement #InfoSec #CyberSyncHub

4

SOC outcomes shouldn't depend on who's on shift. We turn tribal knowledge into team knowledge. Expert-level workflows and historical context for every analyst. Stop relying on heroes. Build systems. #SOCAnalyst #CyberSecurity #SecurityOps #InfoSec #AI

8

Every SOC analyst knows the tension. Investigate alerts quickly to keep queues manageable, and risk missing critical context. Dive deep into every signal, and create latency that attackers exploit while other alerts wait uninvestigated. This impossible choice has defined security operations for years. Rush through investigations and threats slip past. Take your time and backlogs become dangerous blind spots. Security alert latency costs organizations 3-5 hours per incident in delayed response time. During this window, attackers move laterally, escalate privileges, and exfiltrate data while alerts sit unacknowledged. Dropzone AI eliminates this tradeoff entirely. Our AI SOC Analyst begins investigating the moment an alert arrives, delivering complete 3-10 minute investigations with 99.9% accuracy while reducing MTTA from hours to seconds. The outcome? 85-90% faster threat response, 100% alert coverage, zero added headcount. Speed and thoroughness no longer compete. They coexist. Link in the comments to read how we eliminated the tradeoff. #SecurityOperations #SOC #CyberSecurity #AISOC

23

2 Comments