Security Snapshot is now part of SurgeONE.ai Same experts, even more power.

Cyber Bites

Cybercriminals Manipulating Photos and Videos to Create Explicit Content

Cybercriminals Manipulating Photos and Videos to Create Explicit Content

The FBI is warning malicious actors are creating synthetic content, also known as deepfakes. They are doing this by utilizing images taken from websites and social media and processing them with AI tools to create
Read more...
ChatGPT! What was the question again?

ChatGPT! What was the question again?

Cybercriminals have poisoned Google search results with malicious webpages and sponsored ads pointing to fake browser extensions claiming instant, user-friendly ChatGPT access. The reality of the situation, the browser extension
Read more...
NYDFS at it again

NYDFS at it again

If you are submitting your policies and procedures to a regulatory body, double check your global search and replace for ABC Company in your canned policies is successful for all references. It's going to be tough
Read more...
April Patch Tuesday

April Patch Tuesday

Microsoft released patches Tuesday addressing 97 vulnerabilities, 7 critical and one being actively exploited. Adobe also released updates for both Acrobat and Reader today addressing 17 vulnerabilities.
Read more...
Apple Patch Re-do

Apple Patch Re-do

Apple is aware of an issue where recent Rapid Security Responses might prevent some websites from displaying properly. They have addressed the issue and there are new updates available. Be sure to apply these as soon as possible.
Read more...
FBI Cybercrime Data

FBI Cybercrime Data

Given the loss trends, it appears this may be working for them. Is helping clients with their Cybersecurity Planning, in addition to their Financial Planning, another way to help protect assets
Read more...
Microsoft Patch Tuesday

Microsoft Patch Tuesday

Microsoft released patches for Windows. This time around, they have updates for 38 vulnerabilities. Seven are rated as critical, two are publicly known, and one appears to be actively being exploited
Read more...
Yet another emergency Chrome update for a Zero-day exploit

Yet another emergency Chrome update for a Zero-day exploit

Google released Chrome version 112.0.5615.137/138 late Tuesday. This update addresses the flaw tracked as CVE-2023-2136.
Read more...
Not so Super Mario

Not so Super Mario

If you recently downloaded the video game Super Mario 3: Mario Forever for Windows, you might want to check to see if you got more than you bargained for. Attackers have bundled malware into a version being distributed via gaming forums
Read more...
Bad procedures/controls equal bad outcomes

Bad procedures/controls equal bad outcomes

What could possibly go wrong if you give the same individual authority to approve both new vendors and the payment of vendor invoices? Turns out it cost Amazon close to $10 Million to learn this is a bad idea.
Read more...
Not a Teams Player

Not a Teams Player

Security researchers at JUMPSEC Labs have uncovered a way to exploit the Microsoft Teams External Tenants feature. A bug in the latest version allows external sources to send files to an organization's employees even though the
Read more...
What's that Speaker doing? Sonos One wireless speaker pwned

What's that Speaker doing? Sonos One wireless speaker pwned

At the most recent Pwn2Own Toronto event, security researchers earned $105,000 for identifying multiple weaknesses in the Sonos One wireless speaker. These vulnerabilities could be potentially exploited to achieve information
Read more...
Need Help Now?