SuperCybex Solutions LLC

04/09/2024

Preventing cyber attacks is key! Invest in protection, not bitcoin. Cyber insurance isn't the answer and sending bitcoin to ransomware terrorists won't help your business. Preventing the attack is the ONLY worthwhile investment you can make. SuperCybex can help. #

Theories abound over who's truly responsible

03/18/2024

It is imperative to examine the top cyberthreats faced by enterprises today and consider what preventive measures can be taken to safeguard digital assets and privacy.

09/12/2023

Notepad++ version 8.5.7 has been released with fixes for multiple buffer overflow zero-days, with one marked as potentially leading to code ex*****on by tricking users into opening specially crafted files. Update immediately

Notepad++ version 8.5.7 has been released with fixes for multiple buffer overflow zero-days, with one marked as potentially leading to code ex*****on by tricking users into opening specially crafted files.

09/12/2023

We are actively responding to 0day vulnerability (CVE-2023-20269) in Cisco devices. This threat is not just limited to ASA and FTD. Attackers are able to brute force and get VPN access. If you have Cisco firewalls, get an immediate audit completed today. Email [email protected] to request help.

08/30/2023

The Reality of Cyberinsurance in 2023

If an organization decides to include cyberinsurance within its total cyber risk management posture, that cyberinsurance must be fully integrated with the organization’s cybersecurity posture.

08/03/2023

SuperCybex is the only security-focused MVNO offering mobile phone service with cyber defense and security features tailored to protecting children.

07/20/2023

Most versions of Citrix Netscaler ADC Gateway 12.1.xx and 13.###x have been full of bugs since forever. Waiting to get notified about vunerabilities is a recipe for disaster. SuperCybex can help identify and mitigate these unknown threats before they are disclosed.

07/03/2023

Evotec cyber attack indicates more could have been done, prevention is a pound of cure. Two months after the attack, Evotec is still in recovery. Allegedly, the IT shut down servers to protect data due to inadequate backups and DR planning.

Evotec’s Werner Lanthaler knew ransomware could easily spread, encrypting or exposing business partners’ data.

06/24/2023

Exploit released for Cisco AnyConnect bug giving SYSTEM privileges

Proof-of-concept exploit code is now available for a high-severity flaw in Cisco Secure Client Software for Windows (formerly AnyConnect Secure Mobility Client) that can let attackers elevate privileges to SYSTEM.

06/21/2023

Supercybex is ready to help if you need to fix this issue in your azure cloud instance.

Critical 'nOAuth' Flaw in Microsoft Azure AD Enabled Complete Account Takeover

A serious flaw in Microsoft Azure AD's OAuth process has been uncovered, enabling complete account takeover!

06/21/2023

Experts Uncover Year-Long Cyber Attack on IT Firm Utilizing Custom Malware RDStealer

Experts expose a year-long cyber operation targeting an East Asian IT firm, deploying custom malware called RDStealer to compromise data.

06/06/2023

A vulnerability has been discovered in Google Chrome, which could allow for arbitrary code ex*****on. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code ex*****on in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
Google is aware that an exploit for CVE-2023-3079 exists in the wild.
Systems Affected
Google Chrome versions prior to 114.0.5735.110 for Windows.
Google Chrome versions prior to 114.0.5735.106 for Mac and Linux.