Our Take
Strength In Numbers
We're fresh off of two of our biggest conferences of the year for municipal government, TAGITM and GMIS GIANTS. The unique thing about municipal IT leaders, they look out for each other. They're willing to share information and it makes everybody's network security stronger. We also heard a lot of complaints about brute force attempts on VPNs, even brute force attempts on publicly accessible RDP. Yes, that's still a thing. Let's dive in.
Featured Article
Feel the Love 🫶 Our Takeaways from the TAGITM and GIANTS Conferences
There was buzz aplenty at our two favorite conferences last month. With firewall exploits are all the rage these days, we fielded a lot of questions about brute forcing VPN connections and municipalities having to deal with the sheer volume of attempts. Also, uncertainty at the federal level, coupled with stagnant or falling property values, has put a damper on many muni budgets. Read on for more.
The Buzz Around TAGITM and GMIS GIANTS
In the News
The Edge is Having a Moment
We've been in the network edge protection business for a long time now. Trends come and go, and everyone thought The Edge would disappear, but it's definitely still a thing, and bad actors are taking advantage of its weaknesses: Perimeter exploits of major firewall vendors, brute forcing VPNs and other business-critical inbound connections ... Edge security is having a bit of a moment here. More from us later on this one, but in the meantime, here are a few related news notes.
- The state of intrusions: Stolen credentials and perimeter exploits on the rise, as phishing wanes (CSO Online)
- CISA reveals new malware variant used on compromised Ivanti Connect Secure devices (HelpNet Security)
- CrushFTP Blames Security Firms for Fast Exploitation of Vulnerability (SecurityWeek)
- How CISOs can balance business continuity with other responsibilities (CSO Online)
- Malicious actors increasingly put privileged identity access to work across attack chains (CSO Online)
- What’s worth automating in cyber hygiene, and what’s not (HelpNet Security)
Nomic News
Threat actors are increasing in sophistication and aren’t making exceptions for the small or underprepared. The same threats that target Fortune 500s also come after SMBs and organizations just growing into their digital maturity. Smaller organizations now need to be protected more than ever, but where to start? In recent years, managed services have stepped in to solve this paradox in various novel ways.
Learn How Managed NDR Protects SMBs
Why is it called the "CINS Brief" Newsletter?
"CINS" is a reference to the CINS Army. As one of the first widely distributed threat intelligence feeds, CINS Army filters out most of the noise caused by malicious scanners, allowing analysts to focus on more important threats. Its strength comes from the source of its data: A diverse Nomic customer base made up of real networks, with real people behind them.
