Welcome to the Threat Room, where small and medium-sized enterprise (SME) leaders, managers, and IT and cyber professionals can find useful information, resources, and tools for helping manage their organizational cyber defense. Resources provided here are free or low-cost and come from trusted, reliable sources. Visit often to keep apprised of threats targeting businesses, critical best practices for protecting your business and customer data, and a supportive community of educators and professionals dedicated to making Florida the most cyber secure state!

RSS Cybersecurity Advisories from MS-ISAC

Threat advisories

Threat advisories are researched and produced by the talented students in Cyber Florida’s Security Operations Center Apprenticeship Program (SOCAP).

BIG-IP Integrity Vulnerability Threat Report

11.04.25

Scattered Spider Threat Report

09.11.25

Deepfake Cyber Threats: Understanding the Risks of AI-Powered Fraud and Scams

07.02.25

Russian GRU Targeting Western Logistics Entities and Technology Companies

06.26.25

Gorilla Bot Malware Analysis

05.20.25

Apache Tomcat RCE Vulnerability (CVE-2025-24813)

05.13.25

North Korea Responsible for $1.5 Billion Bybit Hack

04.09.25

DieNet: A Rising Hacktivist Group Targeting Critical Infrastructure

04.07.25

Malware Campaign Exploits Microsoft Dev Tunnels

03.31.25

SparkRAT: A Multi-Platform Remote Access Tool

03.04.25

Critical Vulnerability in Meta Llama-Stack Threatens AI Systems

02.11.25

FunkSec: A Top Ransomware Group Leveraging AI

01.29.25

LandUpdate808

12.03.24

SocGholish Holds Top Spot as Leading Malware in Q3 2024

11.25.24

Critical Vulnerability in Fortinet FortiManager Under Active Exploitation

11.12.24

Zimbra Collaboration RCE Vulnerability

10.28.24

Blacksuit Ransomware Updated IOCs

07.24.24

LockBit Operators Utilizing New AV-Bypass Tool

07.08.24

Volt Typhoon Attacks U.S. Critical Infrastructures Using LOTL Techniques

04.01.24

Multiple Vulnerabilities Found in ConnectWise ScreenConnect

02.27.24

Unauthenticated Remote Code Execution (RCE) Vulnerability Affecting NetScaler

11.14.23

Vulnerability in Ivanti Endpoint Manager Mobile Could Allow for Unauthorized Access to API Paths

08.31.23

Zero-Day Vulnerability in MOVEit

06.23.23

Critical Vulnerabilities in Microsoft and Fortinet Products

04.13.23

Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution

03.14.23

RedLine Stealer Malware Analysis

03.10.23

Malware with Sandbox Evasion Techniques Observed Stealing Browser Cached Credentials

11.30.22

Colorado State Website Attacked by Russian Hacktivists

10.19.22

Student Loan Breach Discloses 2.5 Million Records

09.02.22

Phishers Spoof 2FA in Coinbase Accounts Stealing

08.16.22

Phishing Attacks Increase as Facebook and Microsoft are Most Abused

08.01.22

Google Patches Exploited Chrome Bug

07.14.22

Microsoft Releases Workaround for Zero-Day Flaw

06.16.22

Microsoft Releases Workaround for Zero-Day Flaw

06.07.22

REvil is Back and Executes DDoS Attacks

06.06.22

Trojan Attacks Google Play Store Again

05.17.22

Trojan Attacks Google Play Store Again

03.09.22

Cyberattackers Exploit DocuSign to Steal Microsoft Outlook Logins

03.03.22

Ransomware Group Releases NFL Team’s Files

02.24.22

Attackers Target Tax-Filing Service Users

02.15.22

Amazon, Azure, Clouds Host RAT-ty Trio in Info-stealing Campaign

01.25.22

Cybercriminal Group Exploits Microsoft’s E-Signature Verification

01.10.22

200 Million User Records Exposed in Stripchat Breach

12.01.21

SquirrelWaffle Loader

10.29.21

FreakOut Botnet

10.22.21

Weaponized Telegram Bots

10.01.21

FamousSparrow APT: SparrowDoor Backdoor

09.24.21

FIN7 Windows 11 Alpha Campaign

09.10.21

Ransomware Group Publishes Airline Customer Data

09.03.21

Windows 10 Admin Rights Impacted by Razer Devices

08.27.21

GUIDES

Readiness + Resilience: Cyber Florida’s CMMC Level 1 Guide

11.19.25

A breakdown of CMMC Level 1 for small businesses

McCrary Institute: Code Red

10.29.25

The coordinated “typhoon” campaigns, led by actors like Volt Typhoon, reflect a new phase of state-sponsored cyber warfare that demands a comprehensive U.S. and allied response integrating cybersecurity, intelligence, diplomacy, and legal reform.

Protecting Against Elder Fraud and Scams – Portuguese

09.12.25

Um guia para proteger pessoas 60+ e aqueles que lhes oferecem apoio contra golpes e ameaças cibernéticas

Protecting Against Elder Fraud and Scams – Arabic

09.12.25

دليل لحماية كبار السن ومقدّمي الرعاية من الاحتيال والتهديدات عبر الإنترنت.

Protecting Against Elder Fraud and Scams – Spanish

09.12.25

Un guía para proteger a las personas mayores de 60 años y a quienes les ofrecen apoyo contra estafas y amenazas cibernéticas

Protecting Against Elder Fraud and Scams: A Cybersecurity Guide

09.12.25

A guide for protecting older adults and those who support them from cyber scams and threats.

Cell Phone Privacy and Unwanted Access Informational Guide

07.25.25

A guide for protecting older adults and those who support them from cyber scams and threats.

Protecting Against Elder Fraud and Scams: A Cybersecurity Guide

06.26.25

A guide for protecting older adults and those who support them from cyber scams and threats.

NSA Cybersecurity Services for DoD Contractors

07.15.24

A guide for small businesses to help maintain a secure network when transitioning to a remote work environment.

Sharing Cyber Event Information: Observe, Act, Report

04.20.22

Sharing Cyber Event Information: Observe, Act, Report.

Working from Home Cybersecurity Checklist

10.12.21

A guide for small businesses to help maintain a secure network when transitioning to a remote work environment.

Cybersecurity for Local Government

10.22.19

A guide to help local government managers implement cybersecurity best practices within their departments.

Guide to Ransomware Prevention

08.02.19

A quick guide to help managers understand and some key steps to take to significantly reduce the ransomware threat.

Cyber Defense for Small Businesses

01.29.19

A guide to help small business leaders understand cybersecurity fundamentals for their business through real-world examples.

Security Threats and Scam Alerts

Critical Update: Resolving the Microsoft Windows and CrowdStrike Outage

07.19.24

False Promises, Real Losses: Navigating the Dangers of Romance Scams

07.18.24

Cyber Safety Tips for Travel

06.21.23

Phishing Attacks – Helpful Ways to Identify and Avoid Them

01.09.23

The Top Red Flags of a Veterans Day Scam

11.09.22

Student Loan Forgiveness Scams Are On The Rise

08.11.22

Password Tips to Help Keep Your Information Secure

05.04.22

FBI Warning – Cyber Actors Target U.S. Election Officials with Invoice-Themed Phishing Campaign

03.31.22

CISA Call with Critical Infrastructure Partners on Potential Russian Cyberattacks Against the U.S.

03.28.22

Top 5 Tax Scams Targeted to Taxpayers

02.28.22

5 Cybersecurity Resolutions To Make in 2022

01.13.22

Staying Secure on Mobile Devices

09.13.21

Preparing for a Ransomware Attack – 10 Tips

09.13.21