Jordan Koppelman

🚨 Phishing Alert in K-12: NJDOE Impersonation Campaign 🚨 The NJCCIC recently flagged a phishing attack targeting school districts by impersonating the NJ Department of Education. At first glance, the email looks official: ✔️ Subject: NJDOESECURE: Charitable Grant Details Report ✔️ NJDOE logos and formatting ✔️ A button to View Grant Details Report Here’s the catch: ⚠️ Users are led to a fake login page ⚠️ Attackers steal credentials and MFA codes ⚠️ The “secure document” never appears Why it matters? K-12 districts are prime targets because attackers know: 🔴 Educators juggle too many priorities 🔴 IT teams are often understaffed and underfunded 🔴 Grants and funding emails are perfect social-engineering lures 📊 The FBI IC3 Report shows nearly 1 in 3 ransomware attacks last year hit education, with phishing as the leading entry point. 💡 3 key takeaways for K-12 security teams: 1️⃣ Don’t trust, verify unexpected requests 2️⃣ Harden email defenses beyond legacy tools 3️⃣ Act fast: reset credentials, revoke tokens, and check inbox rules 👉 The bigger picture: Email is still the #1 attack vector in education. Teachers shouldn’t have to spot every fake. At Abnormal AI, we help school districts stop these attacks by blocking advanced phishing, account takeovers, and social engineering that slip past traditional defenses. 💬 If you’re seeing the same threats in your school system and want to stop them, let’s connect. Reach out to schedule time to learn how Abnormal can help. 🔗 Full Article: https://lnkd.in/eaJFBWtH #Cybersecurity #K12Education #EmailSecurity #PublicSector #Phishing #AbnormalSecurity #AbnormalAI New Jersey Association of School Technology Officials (NJASTO)

19

RegScale is excited to join the ISC2 New York City & Long Island Chapter September meeting tonight to connect with local cybersecurity leaders and practitioners.  James Sumka will be presenting, "From Burden to Breakthrough: Transforming GRC with CCM"; exploring how Continuous Controls Monitoring (CCM) is reshaping governance, risk, and compliance. He'll dive into real-world examples of how AI and automation are helping organizations cut manual effort, improve accuracy, and build always audit-ready systems. 📅 See you there — we’re looking forward to an engaging discussion with the New York/Long Island cyber community.    #NYC #ISC2 #CCM #GRC #GRCAutomation #AI

21

1 Comment

The state of Rhode Island publicly released the results of a third-party analysis of the 2024 RIBridges cyberattack and data breach at a press conference with Rhode Island Governor Dan McKee and Chief Digital Officer Brian Tardiff. Cybersecurity company CrowdStrike conducted the analysis, which revealed the five-month timeline of the breach and a more accurate number of impacted individuals -- approximately 644,401 people. RIBridges is a system run by Deloitte that the state of Rhode Island uses to administer important social services benefits like health insurance, food stamps and the Child Care Assistance Program. As previously reported, Deloitte informed the state of a potential security threat to RIBridges on Dec. 5, 2024, stating that there was a high probability that a cyberthreat actor had obtained files containing sensitive information. The Brain Cipher cyberthreat group later took responsibility for the hack. The state took RIBridges temporarily offline and later sent notification letters to nearly 650,000 individuals. The newly released third-party analysis provided clarity on how the cyberthreat actor gained access to the RIBridges environment and how it performed data access, staging and exfiltration activities on 28 RIBridges systems. Reviewing post-incident analyses of healthcare data breaches can help defenders bolster security efforts. https://lnkd.in/gBJR5kBh

7

DSPM only matters if it drives action. Here’s a practical checklist for evaluating discovery, classification, risk scoring and remediation in one platform. https://lnkd.in/d7BbWP6M

8

🎙️ In the Claroty Nexus Podcast, Bob Maley, former Commonwealth of Pennsylvania CISO and now Black Kite CSO, talks about the resource challenges confronting critical infrastructure asset owners and operators. He also covers how these challenges are affecting #RiskManagement in essential industries. 🎧 Check out the complete episode here: https://gag.gl/QHiOYD

8

1 Comment

U.S. SLTT organizations are working hard to strengthen their cybersecurity posture, even with limited resources. The MS-ISAC plays a critical role by giving under‑resourced communities access to threat intelligence, 24x7x365 U.S.-based SOC monitoring, and affordable tools that support operational resilience. Read more about how these services help close resilience gaps across the country. #MSISAC #SLTTCyber #CyberDefense

6

🚨 Vulnerabilities don’t take holiday breaks, nor does Axonius. MongoBleed (CVE-2025-14847) is a harsh reminder: the real risk isn’t the CVE, it’s not knowing where you’re exposed. This flaw lets unauthenticated attackers leak sensitive data straight from MongoDB memory. That’s exactly where Axonius comes in 💪🏻 🔍 Find every MongoDB instance across cloud, on-prem, and shadow environments 🚦 See which ones are vulnerable and exposed 📊 Prioritize and track remediation with real context CVEs come and go. Unknown assets are forever. Read the full breakdown + how Axonius helps 👇(link in comments)

1

1 Comment