Welcome to the Threat Room, where small and medium-sized enterprise (SME) leaders, managers, and IT and cyber professionals can find useful information, resources, and tools for helping manage their organizational cyber defense. Resources provided here are free or low-cost and come from trusted, reliable sources. Visit often to keep apprised of threats targeting businesses, critical best practices for protecting your business and customer data, and a supportive community of educators and professionals dedicated to making Florida the most cyber secure state!

THREAT ADVISORIES

Technical reports on recent malware for cyber professionals

  • Volt Typhoon Attacks U.S. Critical Infrastructures Using LOTL Techniques

    04.01.24

  • Multiple Vulnerabilities Found in ConnectWise ScreenConnect

    02.27.24

  • Unauthenticated Remote Code Execution (RCE) Vulnerability Affecting NetScaler

    11.14.23

  • Vulnerability in Ivanti Endpoint Manager Mobile Could Allow for Unauthorized Access to API Paths

    08.31.23

  • Zero-Day Vulnerability in MOVEit

    06.23.23

  • Critical Vulnerabilities in Microsoft and Fortinet Products

    04.13.23

  • Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution

    03.14.23

  • RedLine Stealer Malware Analysis

    03.10.23

  • Malware with Sandbox Evasion Techniques Observed Stealing Browser Cached Credentials

    11.30.22

  • Colorado State Website Attacked by Russian Hacktivists

    10.19.22

  • Student Loan Breach Discloses 2.5 Million Records

    09.02.22

  • Phishers Spoof 2FA in Coinbase Accounts Stealing

    08.16.22

  • Phishing Attacks Increase as Facebook and Microsoft are Most Abused

    08.01.22

  • Google Patches Exploited Chrome Bug

    07.14.22

  • Microsoft Releases Workaround for Zero-Day Flaw

    06.16.22

  • Microsoft Releases Workaround for Zero-Day Flaw

    06.07.22

  • REvil is Back and Executes DDoS Attacks

    06.06.22

  • Trojan Attacks Google Play Store Again

    05.17.22

  • Trojan Attacks Google Play Store Again

    03.09.22

  • Cyberattackers Exploit DocuSign to Steal Microsoft Outlook Logins

    03.03.22

  • Ransomware Group Releases NFL Team’s Files

    02.24.22

  • Attackers Target Tax-Filing Service Users

    02.15.22

  • Amazon, Azure, Clouds Host RAT-ty Trio in Info-stealing Campaign

    01.25.22

  • Cybercriminal Group Exploits Microsoft’s E-Signature Verification

    01.10.22

  • 200 Million User Records Exposed in Stripchat Breach

    12.01.21

  • SquirrelWaffle Loader

    10.29.21

  • FreakOut Botnet

    10.22.21

  • Weaponized Telegram Bots

    10.01.21

  • FamousSparrow APT: SparrowDoor Backdoor

    09.24.21

  • FIN7 Windows 11 Alpha Campaign

    09.10.21

  • Ransomware Group Publishes Airline Customer Data

    09.03.21

  • Windows 10 Admin Rights Impacted by Razer Devices

    08.27.21

GUIDES

Helpful reading for organizations

    • 04.20.22

      Sharing Cyber Event Information: Observe, Act, Report.

    • 10.12.21

      A guide for small businesses to help maintain a secure network when transitioning to a remote work environment.

    • 10.22.19

      A guide to help local government managers implement cybersecurity best practices within their departments.

    • 08.02.19

      A quick guide to help managers understand and some key steps to take to significantly reduce the ransomware threat.

    • 01.29.19

      A guide to help small business leaders understand cybersecurity fundamentals for their business through real-world examples.

    Security Threats and Scam Alerts

    Recent threat news and common scams to look out for

    • Cyber Safety Tips for Travel

      06.21.23

    • Phishing Attacks – Helpful Ways to Identify and Avoid Them

      01.09.23

    • The Top Red Flags of a Veterans Day Scam

      11.09.22

    • Student Loan Forgiveness Scams Are On The Rise

      08.11.22