Avishai Avivi

SPECTRA announced the release of its Certification of Resilience for MSPs, Standards v.1.0, the first-ever cyber resilience certification warrantied to performance outcomes and directly tied to insurance qualification. #MSP #MSSP #cybersecurity #infosec https://bit.ly/44yNvTs

Cybersecurity and Infrastructure Security Agency CISA has released Cybersecurity Performance Goals 2.0, offering updated, measurable guidance for critical infrastructure organizations seeking to strengthen baseline security. CPG 2.0 incorporates lessons learned, aligns with the latest NIST CSF updates, and includes a stronger emphasis on governance - highlighting accountability, risk management, and the need to embed cybersecurity into operational decision-making. The new goals aim to help organizations: • Prioritize controls based on real-world threats • Adopt outcome-driven practices for IT and OT environments • Benchmark security maturity and guide long-term investment How prepared do you think critical infrastructure sectors are to adopt governance-focused cybersecurity requirements? Share your insights below - and follow TechNadu for more developments in national and cross-sector cybersecurity guidance. #Cybersecurity #CriticalInfrastructure #CISA #CPG #NISTCSF #RiskManagement #OTSecurity #Governance #Infosec #CyberResilience #TechNadu

CISA Adds Gladinet and Control Web Panel Flaws to KEV — Active Exploitation Reported This week, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two security flaws impacting Gladinet and Control Web Panel (CWP) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. Organizations using these products should treat the additions as high-priority for assessment and remediation. Key details - Affected products: Gladinet and Control Web Panel (CWP) - Source: CISA added both issues to the KEV catalog on Tuesday, noting active exploitation - Notable entry: CVE-2025-11371 (CVSS score: 7.5) — described in the source as “a vulnerability in files or directories accessible to” (original description truncated in the public notice) - Coverage: Inclusion in KEV means federal agencies and many private organizations should prioritize mitigation according to CISA guidance Why this matters - KEV catalog entries reflect real-world exploitation — not just theoretical risk. - A CVSS 7.5 vulnerability with confirmed exploitation can lead to data exposure, unauthorized access, or footholds for further attacks if left unaddressed. - Organizations that use Gladinet or CWP (including in hosted or self-managed environments) must assume potential impact and act quickly. Recommended next steps for security and IT teams 1. Inventory and scope: Identify all instances of Gladinet and Control Web Panel across on-prem and cloud environments. 2. Validate exposure: Determine which installations are internet-facing or have privileged file/directory access patterns. 3. Patch and mitigate: Apply vendor patches or vendor-recommended mitigations immediately. If a patch isn’t available, implement compensating controls (network segmentation, access restrictions, WAF rules). 4. Monitor and hunt: Review logs and endpoint alerts for suspicious activity correlated with exploitation timelines. Look for unexpected file access, new accounts, or lateral movement indicators. 5. Backups and recovery: Ensure backups are current and tested in case remediation requires rollback or recovery. 6. Report and share: If exploitation is observed, report to appropriate internal teams and coordinate with public-sector partners as required. Stay informed Read the full coverage and original reporting for details and updates: https://lnkd.in/gYUpcsCG Action now prevents incidents later. If your organization uses Gladinet or CWP, prioritize discovery and remediation today — and ensure your vulnerability management program can respond quickly to KEV additions. #Cybersecurity #CISA #VulnerabilityManagement #KEV #ThreatIntelligence #Patching #IncidentResponse #InfoSec #Gladinet #CWP #CyberRisk #SecurityOperations

Cybercriminals are increasingly exploiting vulnerabilities in Microsoft Exchange hybrid deployments, posing significant risks to organizations. The Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive 25-02, urging immediate action to mitigate CVE-2025-53786. ([okoha.com](https://lnkd.in/gP3PTJaZ)) This vulnerability allows attackers with administrative access to escalate privileges, potentially compromising both on-premises and cloud environments. Such breaches can lead to data theft, operational disruptions, and substantial financial losses. To protect your organization, promptly implement Microsoft's guidance for mitigating this vulnerability. This includes applying the latest security updates and reviewing your Exchange hybrid configurations. ([okoha.com](https://lnkd.in/gP3PTJaZ)) Staying proactive in addressing such vulnerabilities is crucial to maintaining the security and integrity of your systems. How does your organization ensure timely patch management for critical vulnerabilities? #CybersecurityTip #BusinessSecurity #TechLeadership

CISA issued a critical 9.8 CVSS advisory for Survision LPR cameras, warning of risks to license-plate recognition deployments. Our write-up summarizes the flaw, affected components, and mitigation guidance. https://lnkd.in/gyF7kHAR

📌CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence ==== The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting Gladinet and Control Web Panel (CWP) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerabilities in question are listed below - CVE-2025-11371 (CVSS score: 7.5) - A vulnerability in files or directories accessible to --- 📲 Follow us on ✈️ Telegram: https://t.me/cybercacheen 🐦 Twitter: https://x.com/cyberetweet 📺 YouTube for real-time updates and weekly CVE exploitation videos: https://lnkd.in/gh657MR9 🔗 Visit our blog to learn more: https://cybercache.cc #CyberSecurity #InfoSec #MalwareAnalysis #Botnet #IoTSecurity #LinuxSecurity #ThreatIntel #ZeroDat #CVE #NetworkSecurity #HackingNews #CyberThreats #CyberAwareness #Pentesting