Chinese-made #IoT devices are turning up with hidden radios, undocumented modems, and opaque update channels—and organizations need faster ways to assess the risk. More on our blog: https://www.lmgsecurity.com/made-in-china-hacked-everywhere-what-organizations-need-to-know-now/#IoT #SupplyChainSecurity

A single “smart” device can quietly tunnel out of your network. Today on #CybersideChats: real-world scenarios where hidden radios, #cloud paths, and offshore update servers slipped in through routine #hardware purchases. Listen: www.chatcyberside.com/e/chinas-hid... Watch: youtu.be/WYq6YTqanA4

#MFA alone isn’t enough if attackers can exploit fatigue prompts or weak fallback options. In this 1-minute video, we break down the most common gaps. www.youtube.com/watch?v=x290... #Cybersecurity #MultifactorAuthentication #2FA #Authentication #AccessControl #Credentials #SecurityBestPractices

#Holiday season scams now hit businesses as hard as consumers. This checklist highlights practical steps #security teams can take now—from enforcing strong #MFA to tuning #botdetection rules & more: www.lmgsecurity.com/resources/ho... #Cybersecurity #FraudPrevention #DNSFiltering #BYOD #Phishing

Attackers are now using #maliciousAI to launch #holidayscams at scale. We just published a breakdown of this year’s AI-driven holiday #fraud surge—plus an actionable checklist: https://www.lmgsecurity.com/holiday-hackers-how-ai-is-supercharging-seasonal-fraud-and-what-your-organization-must-do-now/#maliciousAI

#AI driven #fraud is hitting holiday shoppers at machine speed. Today on #CybersideChats, Sherri & Matt discuss how #phishing kits, prebuilt configs, and bot-driven takeovers enable #CredentialAbuse. Podcast: www.chatcyberside.com/e/holiday-ha... Video: youtu.be/TpMD5v5JUNc #Cybersecurity

When #security assessments leak, the fallout can eclipse the incident. In our latest #CybersideChats on the #Louvre heist, we dig into how exposed #audit findings fueled scrutiny. Listen to hear how a seven-minute #robbery turned into a reputational firestorm: www.chatcyberside.com/e/louvre-hei...

Your #network may be locked down—but what about the circuitry inside your devices? Join us on November 19th for Cyberside Chats: Live! on how #hardware choices and opaque sourcing can introduce #risk + steps to spot red flags. https://www.lmgsecurity.com/event/cyberside-chats-live-november-2025/

Last week, LMG Security had the pleasure of speaking with the Las Vegas ISSA chapter! Matt Durrin led a thought-provoking session on “ #DeepFakes & AI: The New Frontier of #Cybercrime.” He explored how rapidly evolving #AI tools are transforming #SocialEngineering, fraud, and digital trust.

When the #Louvre was robbed, most people blamed the thieves. But leaked audit reports told a story of weak passwords, ignored warnings, & outdated systems. Hear more from Sherri & Matt on Cyberside Chats. Podcast: www.chatcyberside.com/e/louvre-hei... Video: youtu.be/3ErXdXv_bN8 #cybersecurity

The #CISA #AIS program delivered real-time, machine-readable threat intelligence across sectors. With participation disrupted, defense is at risk. In this video, we explain how AIS worked, why it mattered, and what your organization can do to stay protected post-AIS. www.youtube.com/watch?v=qFPC...

A great #PenetrationTest doesn’t just find vulnerabilities—it shows how attackers could exploit them and exposes the gaps behind technical issues. That’s why #PenetrationTesting is our Top #Cybersecurity Control of Q4: https://www.lmgsecurity.com/top-control-of-q4-2025-penetration-testing/#PenetrationTest

What can a jewel heist teach us about #cybersecurity? When Hank Green sat down with Sherri Davidoff to analyze the #Louvre theft, striking parallels between physical and digital breaches were revealed. youtu.be/NIGbQ9NHFEg?... #RiskManagement #IncidentResponse #InformationSecurity #DataProtection

Attackers are turning Google results into #malware delivery systems, using fake software installers and sponsored ads to plant backdoors inside organizations. Podcast: www.chatcyberside.com/e/search-res... Video: youtu.be/xKKA1ikoZ-4 #SEOpoisoning #Malvertising #Cybersecurity #Software #Phishing

What happens when you mix a high-stakes #cybersecurity #tabletopexercise with top-shelf whiskey? An unforgettable night. LMG Security & Constangy hosted an exclusive #AI Fraud Tabletop & Whiskey Tasting where guests tackled a live #IncidentResponse scenario. Thanks to everyone who joined us!

Hackers don’t need to email you anymore—they just need you to search. SEO poisoning & fake ads are spreading #malware and stealing credentials. Learn how to defend against the poisoned web: https://www.lmgsecurity.com/poisoned-search-how-hackers-turn-google-results-into-backdoors/#malware#Phishing #AI

We had a great time at #BSidesPDX connecting with the local security community! Matt Durrin took the stage to present “Hackers + #AI: Faster, Smarter, More Dangerous,” a demo showing how criminals are using tools like #WormGPT to uncover vulnerabilities, generate exploits, and weaponize zero-days.

When #AWS went offline, the outage exposed a global web of dependencies. Sherri & Matt explore what really happened, how fourth-party risks can undermine resilience, and practical steps to take on Cyberside Chats. Listen: www.chatcyberside.com/e/when-the-c... Watch: youtu.be/Djz-_VblMAw #cloud

When the #Cybersecurity Information Sharing Act lapsed, organizations lost a key federal threat feed. Watch this video to learn how to strengthen private intel networks, manage legal exposure, and integrate intel loss scenarios into your #IncidentResponse plans: www.youtube.com/watch?v=2JeB... #CISA

Diversity builds resilience — especially in the #cloud. Matt Durrin reminds us that spreading workloads across multiple clouds isn’t just a best practice, it’s a safeguard against systemic risk. More on our blog: www.lmgsecurity.com/beyond-aws-h... #AWS #DNS #CloudSecurity #FourthPartyRisk

The #AWS outage exposed a threat: #FourthPartyRisk. When your vendors’ vendors go down, so do you. Learn what the #outage revealed & how to strengthen your #cloud resilience before the next disruption: https://www.lmgsecurity.com/beyond-aws-how-hidden-fourth-party-risks-threaten-digital-resilience/

Attackers are exploiting search results and online ads to spread #malware through fake software installers—and it’s working. In our next Cyberside Chats: Live! on 10/29, we'll uncover the latest #SEOpoisoning & #malvertising techniques & how they evade defenses. www.lmgsecurity.com/event/cybers...

When #ransomware halted Jaguar Land Rover’s production, it disrupted entire supply chains. In our latest #CybersideChats, we discuss what made this attack so impactful and share insights on how to strengthen resilience. Podcast: www.chatcyberside.com/e/manufactur... Video: youtu.be/LTW59YBJe-Q

We had a great time at the @seckc.org meetup! Tom Pohl shared insights on Microsoft CA exploits, showing how small misconfigurations can lead to full domain admin takeover. Big thanks to SecKC for the welcome and for making cybersecurity even more fun with a Halloween twist. #Cybersecurity #SecKC

Why do some cybersecurity trainings work while others fall flat? The difference is engagement—it starts with the “why.” Read our blog for advice on how to make training resonate https://www.lmgsecurity.com/the-power-of-why-making-cybersecurity-training-stick/ #NCSAM #CybersecurityAwarenessMonth

#LawFirms face mounting #cyber risks — from phishing and ransomware to AI-driven social engineering. In the ALA's Legal Management Magazine, LMG’s Madison Iler explains why legal organizations are prime targets. Read the article: www.alanet.org/legal-manage... #cybersecurity #legalindustry

Why does the “why” matter in #cybersecurity? Matt Durrin & Todd Stewart discuss how understanding and communicating purpose, not just process, improves engagement, retention, & impact. #podcast: www.chatcyberside.com/e/lead-with-... Video: www.youtube.com/watch?v=xMKi... #CybersecurityTraining

Attackers are poisoning Google search results and ads to spread #malware disguised as trusted software. Join us for a live Cyberside Chats on October 29th for the latest SEO poisoning and #malvertising tactics and steps to keep your organization safe. Register: www.lmgsecurity.com/event/cybers...

When #threatintelligence stops flowing, everyone feels the impact—even those who never see it directly. The expiration of the CISA raises questions about how organizations can stay informed and protected. Full conversation here: www.chatcyberside.com/e/when-cisa-...

The expiration of the CISA cuts off a key channel of #threatintelligence just when we need it most. Read our blog for practical steps to strengthen your intel network & more. https://www.lmgsecurity.com/the-cybersecurity-information-sharing-act-has-lapsed-heres-how-to-adapt-stay-ahead-of-attackers/#threatintelligence

#AI tools are reshaping development—and #cybercrime. “Vibe coding” makes it easier for new developers to generate code, but attackers are using the same tools for “vibe hacking,” producing malware with minimal skill. AI can speed up attacks as quickly as it speeds up innovation. youtu.be/VpF2N-Lk2a4

With CISA expired, the future of public-private #cybersecurity threat sharing is uncertain & liability protections are gone. Today on Cyberside Chats, Sherri Davidoff & Matt Durrin explore how security leaders can adapt. Video: youtu.be/ZLSbBE4CgJ8 Podcast: www.chatcyberside.com/e/when-cisa-...

Scattered Spider isn’t using cutting-edge exploits. They’re calling the #helpdesk and tricking staff into resetting passwords or MFA. Full podcast: https://www.chatcyberside.com/e/inside-scattered-spider-how-teen-hackers-and-crypto-trails-brought-down-a-global-ransom-network/#helpdesk#socialengineering

Telegram isn’t just chat—it’s emerging as a new iteration of the #darkweb. Encrypted channels are now hubs where cybercriminals share tools, sell products, and even run services like #WormGPT. Full podcast: www.chatcyberside.com/e/inside-sca... Video: www.youtube.com/watch?v=Dxd9...

#ScatteredSpider isn’t going away — but the indictments offer valuable lessons for security leaders. Our latest blog breaks down what the court documents reveal and what defenders can do now. Read the full analysis: www.lmgsecurity.com/inside-scatt... #Cybersecurity #Ransomware #MFA

Printers are often the first foothold for attackers. In this quick video, Sherri Davidoff & Matt Durrin explore why printers are such an attractive target & what policies and protections your business should put in place: www.youtube.com/watch?v=a2R0... #PrinterSecurity #Cybersecurity #PenTesting

#ScatteredSpider is back in the spotlight — but indictments tell the bigger story. Today on Cyberside Chats, Sherri & Matt break down the lessons, from tightening help desk verification to #socialengineering training. Listen: www.chatcyberside.com/e/inside-sca... Watch: youtu.be/Dxd9UR3nKXU

The Secret Service recently uncovered a network of over 300 servers and 100,000 SIM cards capable of crippling New York City’s cell service in minutes. This discovery underscores how easily #telecom systems can be manipulated at scale: www.cnn.com/2025/09/23/u... #infosec #CriticalInfrastructure

AI has changed the game for hackers. From coding malware to running full extortion campaigns, criminals are already using #AI to scale their attacks. Our latest blog breaks down #VibeHacking and offers concrete steps to strengthen your defenses: www.lmgsecurity.com/vibe-hacking... #Cybersecurity

Vibe hacking isn’t just about writing malicious code with #AI — it’s also about what happens after your data is stolen. Listen to the podcast to hear Sherri Davidoff & Matt Durrin explain how #vibehacking works and how attackers are using tools like #WormGPT: www.chatcyberside.com/e/vibe-hacki...

AI coding tools are reshaping development & giving rise to #VibeHacking. In today’s episode of Cyberside Chats, Sherri Davidoff and Matt Durrin explore what this means for security, supply chain, & IR planning. Video: www.youtube.com/watch?v=fTOJ... Podcast: www.chatcyberside.com/e/vibe-hacki...

Wiper #malware can erase entire networks in minutes—and unlike #ransomware, there’s no recovery key. In this video, we break down why wipers are so destructive, how they’ve been weaponized in global conflicts, & what every business should know to defend against them. www.youtube.com/watch?v=qfUH...

The Salesforce–Drift breach just got bigger. Hundreds of organizations are now disclosing impacts, and the root cause is finally clear: a compromised GitHub account. Read our latest blog to see what’s new and what #CISOs can do now to prepare: www.lmgsecurity.com/the-saga-con... #supplychainsecurity

A single weak link in your SaaS ecosystem can cascade into a major breach. Don’t wait for vendor alerts—your organization needs a plan to respond immediately. This checklist walks you through critical first steps: www.lmgsecurity.com/resources/ch... #Cybersecurity #IncidentResponse #SaaS

The Salesforce–Drift breach was too big for just one episode. On today’s episode of #CybersideChats, Sherri Davidoff and Matt Durrin unpack the latest disclosures and share steps to prepare for the next #SaaS compromise. Podcast: www.chatcyberside.com/e/massive-dr... Video: youtu.be/tl4qK4CaeVw

How will AI change the threat landscape for #LawFirms? In his article for the Association of Legal Administrators’ Legal Management magazine, LMG’s Director of Training and Research, Matt Durrin, breaks down how evil #AI tools are supercharging cyberattacks. www.alanet.org/legal-manage... #infosec

#AI is transforming #SoftwareDevelopment — and cybercrime. In this month’s Cyberside Chats: Live! on September 17th, Sherri Davidoff and Matt Durrin break down “vibe coding” and its darker twin, “vibe hacking.” Register to join us live: www.lmgsecurity.com/event/cybers... #Cybersecurity

One weak app integration exposed some of the world’s largest companies. Our blog breaks down the Salesforce–Drift breach: how attackers turned insecure OAuth tokens into skeleton keys, misleading headlines, & how to defend against #SaaS #supplychain attacks. www.lmgsecurity.com/connected-ap...

Attackers didn’t break into #Salesforce — they walked in through a trusted app. The Salesforce–Drift #breach shows how OAuth tokens can become skeleton keys when app permissions aren’t tightly controlled. Cyberside Chats Podcast: www.chatcyberside.com/e/how-a-stol... Video: youtu.be/riEcUehZCd4

Even hackers stumble. Leaks from groups like Conti, LockBit, and espionage teams have revealed reused credentials, unpatched systems, and insider betrayals. These exposures aren’t just drama—they’re intelligence. Learn how to turn #hacker missteps into strength: www.lmgsecurity.com/when-hackers...