Catch IT

Catch-IT: Time to Update – Apple’s iOS, iPadOS, macOS, and Safari Under Attack with Zero-Day Flaw

Apple has released emergency security updates to address a new zero-day vulnerability used in attacks to hack iPhones, iPads, and Macs. The zero-day patched today is tracked as CVE-2023-23529 [1, 2] and is a WebKit confusion issue that could be exploited to trigger OS crashes and gain code execution on [...]

By |2023-02-14T13:04:37-05:00February 14th, 2023|Categories: Catch IT, News|Tags: , , , , , , |

Catch-IT: NJ Law Firms Be Alert of Latest Phishing Campaign

NJCCIC recently identified an aggressive phishing campaign targeting several New Jersey State agencies that regularly communicate with law firms. The phishing email’s subject line claims to reference various types of legal documents, such as settlements, reviews, or payment claims. The body contains an HTML link that appears to be [...]

By |2023-02-02T15:25:57-05:00February 2nd, 2023|Categories: Catch IT, News|Tags: , , , , , , |

Catch-IT: Russian-Backed Hackers Actively Targeting US Health Care Sector

The Department of Health and Human Services (HHS) warned on Monday that pro-Russian hacktivist group Killnet is actively targeting the U.S. healthcare industry with distributed denial of service (DDoS) attacks.  A pro-Russian hacktivist group active since at least January 2022, Killnet known for its DDoS campaigns against countries supporting Ukraine, [...]

By |2023-02-01T14:36:39-05:00February 1st, 2023|Categories: Catch IT, News|Tags: , , , , , , , |

Catch-IT: Microsoft’s First Patch Tuesday of 2023 Delivers 98 Fixes

Microsoft Kicks Off 2023 With 98 Fixes Microsoft released a whopping 98 security fixes for yesterday's Patch Tuesday, almost double the number it turned out leading into the holiday season.  Out of the 98, eleven were classified as "Critical", with one identified as being actively exploited. The actively exploited [...]

2023 IT Investments – Where to Prioritize?

Not surprisingly, cybersecurity tops the list as a priority for 2023.  According to Red Hat's 2023 Tech Outlook report, the need for cybersecurity investments was cited as a priority across a variety of technology categories including cloud infrastructure, big data and analytics, and automation.  Network security and cloud security were [...]

Your New Years Resolution – Develop a Company Incident Response Plan

This Pops Up On Your Computer Screen.  What Do You Do Next? As the world of cybersecurity continues to evolve, it is no longer an option to not have a plan in place to deal with a crisis situation.   For many companies, one isolated incident (similar to above) can [...]

Catch-IT: Two Vulnerabilities Identified in Microsoft Products

Critical Patches Recently Released for Microsoft Products Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, [...]

Catch-IT: Time to Update! Chrome Issues Urgent Zero-Day Fix

Chrome users urged to update as Google patches seventh zero-day exploit this year Late last week, Google rolled out emergency fixes to contain an actively exploited zero-day flaw in its Chrome web browser.  The vulnerability, tracked as CVE-2022-3723, has been described as a type confusion flaw in the V8 JavaScript engine. Successful [...]

Final Week of Cybersecurity Awareness Month!

It's the final countdown!!  As we head into Week 4 (10/24-10/28) we discuss the importance of applying software updates. Please review the videos and access our free resources to learn how to patch security vulnerabilities that cyber threat actors can exploit. Staying informed regarding publicly disclosed vulnerabilities and applying [...]

Cybersecurity Awareness Month – The Wild World of Phishing

Movin' on to Week 3 of National Cybersecurity Awareness Month!  This week (10/17-10/21) we dive into the world of phishing. Please review the videos and access our free resources to learn how to better detect and report phishing attempts! Protect yourself!! Week 3 Video - Detecting and Reporting Phishing [...]

Cybersecurity Awareness Month – Password or No Password?

We're kicking off Week 2 of National Cybersecurity Awareness Month! This week (10/10-10/14) we focus on using a Password Manager and the emergence of a new feature, going Passwordless. Please review the videos and access our free resources to better manage all your passwords! Week 2 Video - Easily [...]

Cybersecurity Awareness Month – Multi-Factor Authentication

Time to celebrate Week 1 of National Cybersecurity Awareness Month!  This week (10/3-10/7) we focus on the Set Up and Implementation of Multifactor Authentication (MFA/2FA). Please review the video and access our free resources to better protect online assets! Week 1 Video - Setting Up MFA/2FA MFA increases security [...]

Go to Top