Michael Goetzman

"CISA is aware of multiple cyber threat actors actively leveraging commercial spyware to target users of mobile messaging applications (apps). These cyber actors use sophisticated targeting and social engineering techniques to deliver spyware and gain unauthorized access to a victim’s messaging app, facilitating the deployment of additional malicious payloads that can further compromise the victim’s mobile device. These cyber actors use tactics such as: - Phishing and malicious device-linking QR codes to compromise victim accounts and link them to actor-controlled devices. - Zero-click exploits, which require no direct action from the device user. - Impersonation of messaging app platforms, such as Signal and WhatsApp. While current targeting remains opportunistic, evidence suggests these cyber actors focus on high-value individuals, such as current and former high-ranking government, military, and political officials,4 as well as civil society organizations (CSOs) and individuals across the United States,5 Middle East,6 and Europe. CISA strongly encourages messaging app users to review the updated Mobile Communications Best Practice Guidance and Mitigating Cyber Threats with Limited Resources: Guidance for Civil Society for steps to protect mobile communications and messaging apps, as well as mitigations against spyware." https://lnkd.in/gS8vEDhw

1

Dear Business and IT Audit Leaders, Before I assess any cloud environment, I ask 8 strategic questions. Why? Because cloud security isn’t just technical, it’s business-critical. #CloudSecurity #CyberAudit #ITAudit hashtag #AIaudit #RiskManagement #CloudSecurityRisk #CyVerge #CloudSecurityAudit #Cyberverge #Governance #CloudResilience #CloudGovernance

3

CMMC Compliance Deadline: Are You Ready for October 1st?   The DoD’s latest update to 48 CFR Part 204.75 makes it official: CMMC certification is mandatory for contractors starting October 1, 2025. If your organization handles Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), you must be certified to bid, renew, or extend DoD contracts. 🎯 Don’t risk disqualification. As a CMMC Registered Practitioner Organization (RPO), Concertium helps defense contractors like you: * Assess and close compliance gaps * Build cybersecurity policies and procedures * Train your team and prepare for certification ⏳ Time is running out. Let’s get you ready before Phase 1 begins. 📅 Book your free consultation today: concertium.com/cmmc-rpo

10

🚨 𝗩𝗥𝗖 𝗔𝗹𝗲𝗿𝘁: 𝗬𝗼𝘂𝗿 𝗶𝗣𝗵𝗼𝗻𝗲 𝗺𝗮𝘆 𝗯𝗲 𝘀𝗮𝘆𝗶𝗻𝗴 𝗺𝗼𝗿𝗲 𝘁𝗵𝗮𝗻 𝘆𝗼𝘂 𝘁𝗵𝗶𝗻𝗸. CISA’s latest guidance and ongoing research into tracking are a reminder that mobile risk isn’t just about malware—it's about how your people message, browse, and leak metadata in the background. For security and compliance leaders, this is a nudge to move from “everyone sets their own phone preferences” to standardized defaults for high-risk roles: approved apps for sensitive conversations, hardened privacy settings, and clear rules for what never belongs in SMS or basic chat. 💬 Want a quick sanity check on your mobile and browser privacy posture before the next headline hits? Let’s talk. It’s about t1me. #VRCAlert #Cybersecurity #MobileSecurity #PrivacyByDesign #VanReinCompliance #VRC1

1