Michael Sigmundt

The ISC2 Montreal Chapter is pleased to invite you to a talk on cloud network security zoning and show how zoning has evolved to being very dynamic. Presented by Norman Kamau, Sr. IT Security consultant will provide zoning details including application security such as cloud connectivity patterns and microservices architecture. In addition, he will cover the business case for zoning and common terminology for zoning and cloud. Norman is a Senior IT Security consultant with over twenty years of experience working with both public and private sector clients. He has provided consulting services for a wide range of consulting firms and government departments including IBM Canada, CGI, Department of National Defence (DND), Shared Service Canada (SSC), Canadian Centre for Cyber Security (CCCS / the Cyber Centre) and Natural Resources Canada (NRCan), among others. He is proficient in security architecture, Security Assessment and Authorization (SA&A), and security operations centre (SOC), among others. For Reservation: https://lnkd.in/epmBveYq #cloudsecurity #cybersecurity #ISC2 #ISC2MTL

29

1 Comment

Forescout Technologies Inc., announced an integration providing zero trust security for every device, managed and unmanaged IT, OT, IoT and IoMT devices. #Forescout #Netskope #News #partnership #Security

1

Security Alert: Cisco Zero-Day Vulnerabilities Under Active Exploitation This post is a follow-up reminder for COI members and Alberta cybersecurity professionals to take action. On September 25, Cisco released security advisories disclosing three zero-day vulnerabilities affecting ASA, FTD, IOS, IOS XE, and IOS XR products.  Two of these vulnerabilities — CVE-2025-20333 and CVE-2025-20362 — are under active exploitation by an advanced threat actor. The CCCS, UK NCSC, and US CISA have confirmed successful compromises of Cisco ASA devices, with CCCS noting the deployment of highly sophisticated malware.  Alberta cybersecurity professionals and IT teams: please review the advisories and assess your exposure. Timely action is critical.  Vulnerability details:  CVE-2025-20333 (Critical 9.9): Remote code execution (RCE) with root privileges via crafted HTTP requests and valid VPN credentials.  CVE-2025-20362 (Medium 6.5): Authentication bypass allowing access to restricted URLs.  CVE-2025-20363 (Critical 9.0): RCE with low privileges across ASA, FTD, IOS, IOS XE, and IOS XR.  No publicly available proof-of-concept exploit code has been observed at the time of publication.  Read the full advisory and mitigation guidance on our website: https://lnkd.in/giaPsuT2   #CyberSecurity #Cisco #ZeroDay #ThreatIntel #CyberAlberta #SecurityAdvisory #CCCS #CISA #NCSC #Infosec #AlbertaTech #CyberResilience 

26

Like all organizations, BCIT faces constant cybersecurity threats. We’ve announced a new audit that will determine if BCIT established a comprehensive governance framework for managing risks to its networks, data, and digital devices. There’s more at https://lnkd.in/gz3c6WBH

7

New data shows that 85% of Canadian SMBs have experienced a cyberattack in the past five years — yet too few have dedicated protection in place. A few simple steps can make all the difference: multi-factor authentication, reliable backups, and staff awareness training. Let AYS Technologies help you close the gap. Learn more: https://ayscanada.com #CyberSecurity #CanadaSMBs #ProtectYourBusiness

2

The Canadian Centre for Cyber Security’s 2025-2026 National Cyber Threat Assessment report warns that cybercrime continues to be a “persistent, widespread and disruptive threat.”   Key takeaway: “Ransomware is the top cybercrime threat facing Canada’s critical infrastructure.”   The report also notes that Cybercrime-as-a-Service is fueling resilience in criminal operations, making threats harder to eliminate.   If your business is running leaner over the summer, it’s more vulnerable to the types of threats outlined in this warning from the government of Canada. Talk with our team about how to stay protected while your staff is on vacation.

3

Some think that once they hire an MSP, they can completely step back from IT management. While MSPs handle many tasks, your input is crucial for aligning technology with business goals. Collaboration ensures that the IT strategy supports your unique objectives and vision. https://abmis.ca

4

Most breaches come from missed basics—not “advanced” hacks. This expanded guide shows the five controls Canadian SMBs should master first: ✅ MFA across identities & remote access ✅ Patch cadence + asset visibility ✅ Backups you can actually restore (and verify) ✅ Phishing awareness with measurable results ✅ Least privilege + EDR/XDR on endpoints Make these routine, document them, and your risk drops—measurably. 👉 Start here: https://lnkd.in/eDZ_JGVE 🔗 Read the full article : https://lnkd.in/egbSpCzx #CyberSecurity #InformationSecurity #Canada #SMB #RiskManagement #MFA #EDR #Backups #SecurityAwareness #DataProtection #CyberResilience

2

In this episode, Diego Ramirez P., Senior Manager of the Cyber Intelligence Centre (CIC) at Bell Cyber, sits down with Duncan Kennedy, Director of Sales – Ontario & West Enterprise, to discuss today’s cybersecurity challenges. Duncan shares insights on SOC modernization, Autonomous SOC, cybersecurity mesh architecture, and how Bell Cyber helps organizations reduce complexity and strengthen their security operations. Watch the full episode on YouTube: https://lnkd.in/ea4hbgag #BellCyber #CyberSecurity #SOC #MSSP #SOCModernization

102

1 Comment

Cyber threats continue to rise for Canadian SMBs. To help businesses stay protected, our team at Omega Network Solutions has created a practical Year-End Cybersecurity Checklist—a quick, essential review of systems, access, backups, and employee readiness. A few proactive steps today can make all the difference. Read the guide: https://lnkd.in/gAjMtjuD #CyberSecurity #CanadianSMB #SmallBusiness #DataProtection #YearEndReview #OmegaNetworkSolutions

1

🔐 Securing Active Directory doesn’t have to be complex. Join #vExpert Patrick Coble at VMUG Connect Toronto for a focused primer on the essential steps to stop or slow attackers in your AD environment. This condensed session delivers practical guidance, key security fundamentals, and actionable techniques you can apply immediately. 🗓 Wednesday, May 13. Walk away with real-world steps to strengthen your defenses—fast. https://bit.ly/3PjcQvP #ActiveDirectorySecurity #CyberSecurity #VMUG #IdentitySecurity VMware User Group (VMUG)

17

2 Comments

🔐 SECURITY INTELLIGENCE UPDATE CRA SMS phishing wave hits Canadians — 716M SMS messages sent, $38K stolen from victims Key actions for security leaders: • Review your threat posture immediately • Ensure endpoint protection is current • Brief your security team on this threat • Check vendor advisories for patches #Phishing #SMSScam #ScamAlert #DefenceNet #CyberSecurity #InfoSec #SecurityLeader

3

Ransomware attack disrupted IT systems at Leduc County, Canada. Authorities confirmed minimal data impact and an ongoing investigation. A reminder that public sector infrastructure remains a high-value cyber target. Read more: blog.cybernexora.com #CyberSecurity #Ransomware #DataSecurity #GovernmentIT #CyberNexora #CyberNexoraNews

1

🚨 CRITICAL SharePoint Zero-Day Alert: CVE-2025-53770 Under Active Exploitation in Canada The Canadian Cyber Centre just issued an urgent update on a critical SharePoint Server vulnerability that's being actively exploited. This affects ALL on-premises SharePoint versions - and there's no patch yet. 🔍 What Makes This Dangerous CVE-2025-53770 exploits untrusted data deserialization, allowing attackers to execute remote code on unpatched SharePoint servers. The vulnerability only impacts on-premises installations - SharePoint Online users are safe. Key exploitation indicators to hunt for immediately: 🎯 Malicious file: spinstall0.aspx in C:\PROGRA\~1\COMMON\~1\MICROS\~1\WEBSER\~1\16\TEMPLATE\LAYOUTS\ 🎯 Suspicious POST requests to /\_layouts/15/ToolPane.aspx with SignOut.aspx referer 🎯 Network activity from IPs: 107.191.58\[.\]76, 104.238.159\[.\]149, 96.9.125\[.\]147 🛠️ Immediate Defense Actions Without a patch available, focus on these Microsoft-recommended mitigations: Enable AMSI integration on all SharePoint servers Deploy Microsoft Defender Antivirus across your SharePoint infrastructure If AMSI can't be enabled, disconnect servers from internet access Implement Defender for Endpoint for post-exploit detection Monitor continuously for the three compromise file hashes listed in the advisory ⚡ The threat actors have been active since July 17th. If you find ANY indicators, take affected servers offline immediately and hunt for lateral movement. 📢 How are your teams responding to this zero-day? What additional detection measures are you implementing while waiting for the patch? https://lnkd.in/dyXdipnn #ThreatIntelligence #SharePoint #ZeroDay #CyberThreat #InfoSec #IncidentResponse #SecurityOperations #Microsoft #RCE #CriticalVulnerability

1

Canadian SMBs: MFA alone isn’t stopping account takeovers anymore. Learn the Microsoft 365 lockdown that blocks token theft + risky logins. Full article link is in the comments. 🇨🇦 #CyberSecurity #CloudSecurity #Microsoft365 #IdentitySecurity #ZeroTrust #MFA #Phishing #Ransomware #CyberRisk #InfoSec

1

1 Comment

🚨 STORM WARNING: MTX Cyber Storm Center Threat Level 4 Critical threats demanding immediate attention for Ontario SMBs: 📌 Microsoft SharePoint CVE-2026-20963 is being actively exploited with CISA mandating federal patches by March 21. If you run SharePoint, this is your weekend priority. 📌 SolarWinds Web Help Desk vulnerability (CVSS 9.8) is now weaponized by Warlock ransomware operators—creating a direct path from software flaw to encrypted systems. 📌 Last week saw 177 ransomware attacks with professional services firms—legal practices, architects, and accountants—emerging as primary targets. Why? High-value data with typically modest cybersecurity budgets. The threat landscape isn't theoretical anymore. Qilin ransomware posted 30 new victims. VMware, Ivanti, and Cisco SD-WAN all have critical exploited vulnerabilities in the wild. For Kitchener-Waterloo and Canadian businesses: Patch immediately. Verify your backups work. Test your incident response plan. The attackers aren't slowing down. Need help assessing your exposure? MTX Technologies is here. sales@mtxtech.ca #CyberStormCenter #CyberSecurity #RansomwareAlert #InfoSec #SMBSecurity #KitchenerWaterloo #CyberThreats #PatchNow

3