Chris Johnson

CMMC consultant: "Here's your documentation. Good luck maintaining it." Then reality hits: Daily IT operations don't match documented processes Security tools generate alerts nobody investigates Configuration changes break compliance baselines Evidence collection falls to whoever has time VSO manages your IT operations AND your compliance posture. Because they're the same thing. #ManagedServices #CMMC #DefenseContractors

3

A foreign threat actor breached the Kansas City National Security Campus, by exploiting recently disclosed Microsoft SharePoint vulnerabilities, according to a CSO news analysis. Find out how attackers Infiltrated KCNSC- https://lnkd.in/gcDdx9Jx _______ #Hacking #KCNSC

1

“Just This Once” Is Not a Policy Temporary access that never expires becomes permanent risk. Fix the pattern: • Use time-bound exceptions (start/end date, owner, reason) • Auto-expire temp access with alerts • Review exceptions quarterly #MilwaukeeIT #Cybersecurity #Governance #StammTech

3

CISA is waving a big red flag for VMware ESXi admins: CVE-2025-22225 is being actively exploited in ransomware campaigns—and it’s the kind of “oops” that can turn one compromised VM into a hypervisor-wide bad day. What to be concerned about: - **VM escape is the headline risk**: breaking isolation means attackers can pivot from a single guest to the host and beyond. - **Chaining is the playbook**: CVE-2025-22225 is being discussed alongside **CVE-2025-22224** and **CVE-2025-22226**—because attackers love combo meals. - **Exposure is still high**: thousands of ESXi instances reportedly remain unpatched/exposed, which is ransomware bait. - **Stealthy persistence**: watch for VMX/process anomalies, unsigned drivers, and odd **VSOCK** activity (the “invisible hallway” many teams don’t monitor). If you run ESXi 7/8, this is a “patch now, investigate always” moment. Article: https://lnkd.in/gi3KTAuD #CISA #VMware #ESXi #Ransomware #VulnerabilityManagement #PatchManagement #KEV #IncidentResponse #ThreatIntelligence #CyberSecurity Security is a streak you can’t afford to break.

1

1 Comment

📢 New Feature Release | Automated Endpoint Compliance It’s not just a launch. It’s a leap forward! Scalefusion Veltar introduces Automated Endpoint Compliance—because chasing down misconfigurations and non compliance is so last year. ✔️Enforce CIS benchmarks with precision ✔️Auto-remediate policy violations ✔️Gain real-time compliance visibility ✔️Leverage Apple-specific compliance controls Explore the feature: https://hubs.la/Q03kst3p0 #Veltar #ComplianceAutomation #EndpointSecurity #UEM #CISBenchmarks #macOSManagement #EnterpriseIT #Scalefusion

24

1 Comment