Regulatory changes, findings from the field, and the monthly cybersecurity briefing from Orion Secure.https://orion-secure.comen-ushttps://orion-secure.com/insights/this-month-in-cybersecurity-august-2026https://orion-secure.com/insights/this-month-in-cybersecurity-august-2026The August 2026 security and compliance briefing from Orion Secure: Ransomware Attackers Pose as Recovery Experts · OpenAI Pauses AI Training to Strengthen Safety · Hackers Use AI to Target Critical Infrastructure.Thu, 20 Aug 2026 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-july-2026https://orion-secure.com/insights/this-month-in-cybersecurity-july-2026The July 2026 security and compliance briefing from Orion Secure: Newly Patched SharePoint Flaw Already Under Active Attack · OpenAI AI Models Escape Test Environment in Unintended Cyber Incident · Oracle Releases July Security Update With 1,449 VulnThu, 23 Jul 2026 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-june-2026https://orion-secure.com/insights/this-month-in-cybersecurity-june-2026The June 2026 security and compliance briefing from Orion Secure: Cybercriminals Use Fake Online Popularity to Spread Crypto-Stealing Malware · INC Ransomware Grows by Perfecting Proven Attack Tactics · Microsoft Prepares Fix for RoguePlanet DefenderThu, 18 Jun 2026 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-may-2026https://orion-secure.com/insights/this-month-in-cybersecurity-may-2026The May 2026 security and compliance briefing from Orion Secure: Officials Warn of Growing Cybersecurity Risks and Reporting Gaps · GitHub Breach Highlights Growing Risks From Compromised Developer Tools · Microsoft Launches Open-Source Tools to ImprThu, 21 May 2026 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-april-2026https://orion-secure.com/insights/this-month-in-cybersecurity-april-2026The April 2026 security and compliance briefing from Orion Secure: WordPress Plugin Hack Spreads Hidden Malware to Thousands of Sites · CISA Flags Actively Exploited Microsoft Excel and SharePoint Vulnerabilities · Project Glasswing and Mythos AI: EaThu, 16 Apr 2026 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-march-2026https://orion-secure.com/insights/this-month-in-cybersecurity-march-2026The March 2026 security and compliance briefing from Orion Secure: Wave of Exploited Cisco Network Flaws Raises Alarm for Organizations · CISA Flags Actively Exploited SharePoint and Zimbra Flaws · Critical ScreenConnect Flaw Could Allow UnauthorizedThu, 19 Mar 2026 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-february-2026https://orion-secure.com/insights/this-month-in-cybersecurity-february-2026The February 2026 security and compliance briefing from Orion Secure: Microsoft 365 Copilot Bug Exposed Confidential Emails Despite Security Safeguards · Researchers Warn AI Assistants Could Be Misused as Hidden Hacking Channels · Hackers Exploited BThu, 19 Feb 2026 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/getting-the-most-out-of-your-knowbe4-subscriptionhttps://orion-secure.com/insights/getting-the-most-out-of-your-knowbe4-subscriptionWhen organizations invest in KnowBe4, they're often focused on phishing simulations and security awareness training. While those are foundational components, they represent…Mon, 16 Feb 2026 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-new-year-2026https://orion-secure.com/insights/this-month-in-cybersecurity-new-year-2026The January 2026 security and compliance briefing from Orion Secure: Critical FortiSIEM Flaw Exposes Systems to Remote Attacks · Predator Spyware Found to Be More Stealthy Than Expected · One-Click Attack Exposed Data Through Microsoft Copilot.Thu, 15 Jan 2026 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-december-2025https://orion-secure.com/insights/this-month-in-cybersecurity-december-2025The December 2025 security and compliance briefing from Orion Secure: SonicWall Urges Urgent Patching After Active Attacks on SMA1000 Appliances · Cisco Warns of Active Attacks Exploiting Critical Email Security Flaw · Microsoft Update Disrupts MessaThu, 18 Dec 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-november-2025https://orion-secure.com/insights/this-month-in-cybersecurity-november-2025The November 2025 security and compliance briefing from Orion Secure: CISA Warns of Active Attacks on Critical FortiWeb Security Flaws · RondoDox Botnet Exploits Critical XWiki Flaw · Hackers Revive Old "Finger" Command to Deliver Stealthy Windows AtThu, 20 Nov 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-october-2025https://orion-secure.com/insights/this-month-in-cybersecurity-october-2025The October 2025 security and compliance briefing from Orion Secure: Microsoft Ends Windows 10 Support with Final Patch Tuesday Fixing 172 Security Flaws · TP-Link Urges Immediate Updates to Fix Critical Omada Gateway Security Flaws · Iranian HackersThu, 23 Oct 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-september-2025https://orion-secure.com/insights/this-month-in-cybersecurity-september-2025The September 2025 security and compliance briefing from Orion Secure: SonicWall Breach Exposes Firewall Configurations in Targeted Cyberattack · Hackers Claim Massive Salesforce Data Breach Affecting 760 Companies · Microsoft Shuts Down Global PhishThu, 18 Sep 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-august-2025https://orion-secure.com/insights/this-month-in-cybersecurity-august-2025The August 2025 security and compliance briefing from Orion Secure: Hackers Exploiting 7 Year Old Vulnerability, Warns FBI · Apple Releases Update to Address Zero-Day Flaw · Researchers Discover New Ransomware Strain, Charon.Thu, 21 Aug 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-july-2025https://orion-secure.com/insights/this-month-in-cybersecurity-july-2025The July 2025 security and compliance briefing from Orion Secure: New Malware Creates Stealthy Attacks and Data Theft on Outdate SonicWall Devices · AI Adoption in Cybersecurity Drives Efficiency and New Role Opportunities · Co-op Cyberattack ExposesThu, 17 Jul 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-june-2025https://orion-secure.com/insights/this-month-in-cybersecurity-june-2025The June 2025 security and compliance briefing from Orion Secure: Microsoft 365 to Boost Security by Blocking Legacy Access · Russian Hackers Bypass Gmail Security Using New Phishing Tactic · Veeam Patches Critical Backup Software Flaws Allowing RemoThu, 19 Jun 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-may-2025https://orion-secure.com/insights/this-month-in-cybersecurity-may-2025The May 2025 security and compliance briefing from Orion Secure: LummaC2's Initial Impact Determined at 10 Million Devices · Wireless Provider Experiences Week-Long Disruption · Sophos Client Target of Email Bombing Campaign with Follow-up Tactics.Thu, 22 May 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-april-2025https://orion-secure.com/insights/this-month-in-cybersecurity-april-2025The April 2025 security and compliance briefing from Orion Secure: Apple Patches Multiple Zero Day Exploits · Security Flaws Found in Windows Application · NVIDIA Toolkit Contains Vulnerabilities for AI Users.Thu, 17 Apr 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-march-2025https://orion-secure.com/insights/this-month-in-cybersecurity-march-2025The March 2025 security and compliance briefing from Orion Secure: CISA Adds Fortinet Vulnerabilities to KEV · Existing Malware Operation Has Compromised over 20,000 Wordpress Sites · Former Microsoft Phishing Attack Targeting macOS.Thu, 20 Mar 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-february-2025https://orion-secure.com/insights/this-month-in-cybersecurity-february-2025The February 2025 security and compliance briefing from Orion Secure: SonicWall and Palo Alto Respective OS Added to KEV · Palo Alto Expands Upon Vulnerabilities Used in Active Exploits · Chrome and Firefox Announce Fresh Security Fixes.Thu, 20 Feb 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-january-2025https://orion-secure.com/insights/this-month-in-cybersecurity-january-2025The January 2025 security and compliance briefing from Orion Secure: Zero-Day Exploit to Hijack Firewalls Warned of by Fortinet · Microsoft to Litigate Cybercriminals Using AI · Additional BeyondTrust Exploit Added to CISA's KEV List.Thu, 16 Jan 2025 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/cyber-defense-institute-is-now-orion-securehttps://orion-secure.com/insights/cyber-defense-institute-is-now-orion-secureWe are very excited to share some exciting news we've been working on for a while: as of December 30, Cyber Defense Institute will officially transition to a new name, Orion…Mon, 30 Dec 2024 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/this-month-in-cybersecurity-december-2024https://orion-secure.com/insights/this-month-in-cybersecurity-december-2024The December 2024 security and compliance briefing from Orion Secure: SonicWall VPN Firewall VPNS Exposed to Critical Flaws · CISA Updates KEV with Microsoft and Adobe Flaws · Okta Support Warns of Increased Phishing Attacks.Thu, 19 Dec 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-november-2024https://orion-secure.com/insights/this-month-in-cybersecurity-november-2024The November 2024 security and compliance briefing from Orion Secure: Progress Kemp Loadmaster and VMWare Under Exploitation · Updates to Security Coming to Microsoft in 2025 · Malicious QR Codes Delivered by Mail.Thu, 21 Nov 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-october-2024https://orion-secure.com/insights/this-month-in-cybersecurity-october-2024The October 2024 security and compliance briefing from Orion Secure: JetPack Plugin Patches After Affecting 27 Million Sites · CISA Adds New Vulnerabilities to the KEV Catalog · The Internet Archive Experiences DDoS Attack.Thu, 17 Oct 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-september-2024https://orion-secure.com/insights/this-month-in-cybersecurity-september-2024The September 2024 security and compliance briefing from Orion Secure: Windows Vulnerability Exploited as Zero-Day · WhatsApp View Once Fix Fails in One Week · Spyware Case Dropped Against NSO by Apple.Thu, 19 Sep 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-august-2024https://orion-secure.com/insights/this-month-in-cybersecurity-august-2024The August 2024 security and compliance briefing from Orion Secure: Bugs Found in OpenVPN by Microsoft · Senators Introduce Bill to Tighten Vulnerability Disclosure · Phishing Evolves in the Age of AI.Thu, 15 Aug 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-july-2024https://orion-secure.com/insights/this-month-in-cybersecurity-july-2024The July 2024 security and compliance briefing from Orion Secure: Microsoft Connects Scattered Spider to Qilin Ransomware · UK Regulators Receives Complaint About Meta's AI Data Policies · SquareSpace Migrations Become Target for Exploitation.Thu, 18 Jul 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-june-2024https://orion-secure.com/insights/this-month-in-cybersecurity-june-2024The June 2024 security and compliance briefing from Orion Secure.Thu, 20 Jun 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-may-2024https://orion-secure.com/insights/this-month-in-cybersecurity-may-2024The May 2024 security and compliance briefing from Orion Secure.Thu, 16 May 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-april-2024https://orion-secure.com/insights/this-month-in-cybersecurity-april-2024The April 2024 security and compliance briefing from Orion Secure.Thu, 18 Apr 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-march-2024https://orion-secure.com/insights/this-month-in-cybersecurity-march-2024The March 2024 security and compliance briefing from Orion Secure.Thu, 21 Mar 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-february-2024https://orion-secure.com/insights/this-month-in-cybersecurity-february-2024The February 2024 security and compliance briefing from Orion Secure.Thu, 15 Feb 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-january-2024https://orion-secure.com/insights/this-month-in-cybersecurity-january-2024The January 2024 security and compliance briefing from Orion Secure.Thu, 18 Jan 2024 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/navigating-the-challenges-of-ssprhttps://orion-secure.com/insights/navigating-the-challenges-of-ssprThe realm of information security is complex, especially for small businesses operating with limited resources. The New York State Department of Financial Services (DFS)'s…Tue, 16 Jan 2024 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/dont-get-breached-dfs-part-500-amendmenthttps://orion-secure.com/insights/dont-get-breached-dfs-part-500-amendmentRemember the chaos of 2020 when COVID-19 swept across the globe? For many insurance and finance companies, it wasn't just a health crisis; it was a painful reminder that even…Fri, 22 Dec 2023 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/this-month-in-cybersecurity-december-2023https://orion-secure.com/insights/this-month-in-cybersecurity-december-2023The December 2023 security and compliance briefing from Orion Secure.Thu, 21 Dec 2023 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/cybersecurity-for-small-businesseshttps://orion-secure.com/insights/cybersecurity-for-small-businessesI was asked to speak at the 2023 Rochester Security Summit on the topic of "Cybersecurity for Small Businesses". Below is the YouTube recording of that presentation. I hope…Thu, 07 Dec 2023 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/this-month-in-cybersecurity-november-2023https://orion-secure.com/insights/this-month-in-cybersecurity-november-2023The November 2023 security and compliance briefing from Orion Secure.Thu, 16 Nov 2023 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/dfs-500-second-amendment-implementation-dateshttps://orion-secure.com/insights/dfs-500-second-amendment-implementation-datesToday I attended a presentation by the superintendant and deputy superintendent of New York State Department of Financial Services. A lot of infomration was provided and we…Wed, 15 Nov 2023 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/navigating-latest-updates-nys-dfs-cybersecurity-regulationshttps://orion-secure.com/insights/navigating-latest-updates-nys-dfs-cybersecurity-regulationsIn the ever-evolving landscape of cybersecurity, regulatory bodies continually refine and enhance standards to address emerging threats. The New York State Department of…Sat, 11 Nov 2023 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/this-month-in-cybersecurity-october-2023https://orion-secure.com/insights/this-month-in-cybersecurity-october-2023The October 2023 security and compliance briefing from Orion Secure.Thu, 19 Oct 2023 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-september-2023https://orion-secure.com/insights/this-month-in-cybersecurity-september-2023The September 2023 security and compliance briefing from Orion Secure: Apple and Others Push Patch for New Vulnerabilities · Fortinet Patches High-Severity Vulnerability · Microsoft Leaks Large Amounts of Private Data.Thu, 21 Sep 2023 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-august-2023https://orion-secure.com/insights/this-month-in-cybersecurity-august-2023The August 2023 security and compliance briefing from Orion Secure: Microsoft's Patched Vulnerability Added to Active Exploitation List by CISA · US Looking Into Microsoft Exchange Hack · Flaw in Power Management Software Puts Data Centers at Risk.Thu, 17 Aug 2023 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-july-2023https://orion-secure.com/insights/this-month-in-cybersecurity-july-2023The July 2023 security and compliance briefing from Orion Secure: Microsoft and Apple Squash Some Security Bugs · WordPress Targeted Through External Plugin · Adobe Dealing With Another Critical Flaw, this time for ColdFusion.Thu, 20 Jul 2023 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-june-2023https://orion-secure.com/insights/this-month-in-cybersecurity-june-2023The June 2023 security and compliance briefing from Orion Secure: Email Authorization Changed By Google · Fortinet Patches VPN Vulnerability Found in FortiGate · Azure Down, As Claims of DDoS Attacks Enrapture Microsoft Services.Thu, 15 Jun 2023 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/this-month-in-cybersecurity-may-2023https://orion-secure.com/insights/this-month-in-cybersecurity-may-2023The May 2023 security and compliance briefing from Orion Secure: Patching a Patch, Microsoft Rolls Out Fix · Apple Rolls Out New Style Update to Error · WordPress being Targeted by Threat Agents.Thu, 18 May 2023 00:00:00 GMTAnthony Manninohttps://orion-secure.com/insights/common-pen-test-findings-that-are-easy-to-fixhttps://orion-secure.com/insights/common-pen-test-findings-that-are-easy-to-fixWe do a lot of penetration tests for a wide range of clients; whether they be healthcare, retail, nonprofit, insurance, banks, industrial or anything in between. Even though…Thu, 19 Sep 2019 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/how-to-better-protect-emailhttps://orion-secure.com/insights/how-to-better-protect-emailLast week we alerted our insurance colleagues to multiple instances of spear-phishing as they relate to a new trend toward using OneDrive as a means of spreading phishing…Tue, 30 Apr 2019 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/onedrive-phishing-scam-detailshttps://orion-secure.com/insights/onedrive-phishing-scam-detailsWe recently alerted our insurance industry colleagues of an active phishing campaign that had compromised multiple accounts at multiple insurance industry companies in the…Mon, 29 Apr 2019 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/onedrive-insurance-phishing-scamhttps://orion-secure.com/insights/onedrive-insurance-phishing-scamThis Friday (4/26/19) we investigated a phishing campaign for one of our insurance clients and we learned quickly that it spanned at least two other CNY area insurance…Fri, 26 Apr 2019 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/check-your-antivirushttps://orion-secure.com/insights/check-your-antivirusWe've been involved with multiple organizations in the past three weeks that have responded to a serious security incident that was exacerbated by a lack of up to date anti…Mon, 01 Oct 2018 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/hurricane-florence-and-disaster-recovery-planninghttps://orion-secure.com/insights/hurricane-florence-and-disaster-recovery-planningAs Hurricane Florence is set to smash into the Carolinas today, it may have you thinking about how your business might fare an unexpected disaster. Even if it didn't, it sure…Wed, 12 Sep 2018 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/pci-dss-321-is-herehttps://orion-secure.com/insights/pci-dss-321-is-hereRecently, the Payment Card Industry (PCI) released an update to their Data Security Standard (DSS) that is used by anyone that accepts credit cards within their organization.…Wed, 20 Jun 2018 00:00:00 GMTBrandon Fintonhttps://orion-secure.com/insights/policies-and-your-information-security-programhttps://orion-secure.com/insights/policies-and-your-information-security-programRegulations and standards almost universally require an "information security policy," which would make us believe they must be rather important. For example, New York's…Tue, 05 Jun 2018 00:00:00 GMTOrion Secure