Matt Hoadley, CISSP

Cybercriminals often bypass technical defenses by targeting employees through sophisticated social engineering attacks and phishing scams. A robust security strategy must include ongoing employee training and attack simulations to build a human firewall.

1

#OSINT isn’t just for experts anymore. Horizon Identity empowers any team to uncover patterns, links, and real-world identity details - without needing OSINT skills or special training. One search bar for access to more than 550 publicly available data sources and more than 1,500 endpoints to make your investigation easy. Learn more here: https://hubs.la/Q03rsWqm0 #cai #investigations #shadowdragon #horizonidentity #pai #osintforgood #realtimeintel

23

Los Alamos National Laboratory (LANL) — where the Manhattan Project took place — is bringing CyberFire to UTD in April. CyberFire is a guided digital forensics CTF that simulates a national security incident response investigation. You’ll work through: - Network traffic analysis - Malware reverse engineering - Host-based forensics Everyone is welcome. Challenges will range from beginner-friendly to advanced. Interest form is live — spots may be limited. https://lnkd.in/gDzbnuch #CyberFire #LANL #Cybersecurity #UTD #IncidentResponse #Training #CTF #Competition #DigitalForensics

16

1 Comment

After CISA flagged CVE-2025-6813 as actively exploited, agencies and organizations are racing to update systems and audit stored credentials. #clearancejobs #nationalsecurity

2

🚨 Lockheed Martin is now requiring CMMC compliance from all suppliers. This move signals a clear shift: Thousands of defense contractors must now meet cybersecurity standards, or risk being disqualified. At SMPL-C, we help you accelerate compliance with an AI-powered platform designed specifically for CMMC experts. ✅ Automates documentation ✅ Reduces manual effort by 200+ hours ✅ Built for consultants, MSPs, and defense contractors Ready to prepare? 👉 Register for our Free 2-week CMMC Workshop: https://lnkd.in/e9xqDGdQ Learn more about the Lockheed Martin update: https://lnkd.in/eShTJ_sa #CMMC #CybersecurityCompliance #LockheedMartin #DefenseContractors #ComplianceAlert #MSP #RPO #SMPLC

34

2 Comments

When you combine Army Special Forces, Red Teaming, and the guts to clone a badge from a few feet away—what do you get? 👉 White Knight Labs: ✅ Network Pen Testing ✅ Web App Pen Testing ✅ Mobile App Pen Testing ✅ Social Engineering attack simulation …and more. We don’t just test your defenses—we outsmart them. 🔊 Check out our latest podcast to see how we push boundaries in cybersecurity: 🎙️ Listen here. https://lnkd.in/gTqNGJnz Let’s chat about your security posture and how to sharpen it. 🔗 https://lnkd.in/g9rshs4Z #CyberSecurity #PenTesting #RedTeam #SocialEngineering #NetworkSecurity #WebAppSecurity #MobileAppSecurity #CyberPodcast #WhiteKnightLabs #HackerValley

10

Edit: Panther traced this to a Root-Me CTF that spilled into the public registry. Intent was educational, but the packages do exfiltrate env variables - treat any exposure as real. ---------------------------------------------------------- 🎄🚨 We’re tracking what looks like a Christmas-inspired malware campaign on npm.  300+ malicious npm packages flooded the registry in the last 24 hours, all following the pattern: elf-stats-<𝘤𝘩𝘳𝘪𝘴𝘵𝘮𝘢𝘴_𝘸𝘰𝘳𝘥>-<𝘤𝘩𝘳𝘪𝘴𝘵𝘮𝘢𝘴_𝘸𝘰𝘳𝘥>-<𝘯𝘶𝘮𝘣𝘦𝘳> These naughty packages abuse post/pre-install hooks to run arbitrary scripts on victim machines - each one built to steal data. The exfiltrated data is then sent to a webhook and a Discord channel. If your dev environment has been installing gifts from npm lately, we'd advise taking a closer look 🎁 👀

51

8 Comments

Controlled Unclassified Information (CUI) is the path of least resistance for adversaries because there are fewer controls over CUI as compared to classified information. Loss of aggregated CUI is one of the most significant risks to national security, directly affecting lethality of our warfighters. Learn more:  https://lnkd.in/eSq8xrpX  #DCSA

66

1 Comment

🔍 Supercharge your investigations with OSINT + i2 Analyst’s Notebook. With i2 Group’s powerful solution, analysts can seamlessly integrate open-source intelligence (OSINT) and other data streams into one secure platform, revealing hidden patterns, tracking connections, and accelerating case resolution. From criminal networks to financial fraud, i2 Analyst’s Notebook brings clarity to complexity. 👉 Learn more and explore the solution: https://lnkd.in/eR8AdVsA

13

Defense contractors aren't the only ones who need to implement NIST cybersecurity requirements for CUI. The big question has always been whether other agencies would require proof of implementation via the CMMC program. The GSA just revised their process for assessing nonfederal systems handling controlled unclassified information and it's way closer to NIST's Risk Management Framework than CMMC. Get the full scope in this week's episode ⬇️

34

6 Comments