Cyber Threat Advisory

Cyber Threat Updates

• Google’s August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild
  Google has released security updates to address multiple security flaws in Android, including fixes for two Qualcomm bugs that were flagged as actively exploited in the wild. The vulnerabilities inclu …

• Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval
  Cybersecurity researchers have disclosed a high-severity security flaw in the artificial intelligence (AI)-powered code editor Cursor that could result in remote code execution. The vulnerability, tra …

• Misconfigurations Are Not Vulnerabilities: The Costly Confusion Behind Security Risks
  In SaaS security conversations, “misconfiguration” and “vulnerability” are often used interchangeably. But they’re not the same thing. And misunderstanding that distinction can quietly create real exp …

• How Top CISOs Save Their SOCs from Alert Chaos to Never Miss Real Incidents
  Why do SOC teams still drown in alerts even after spending big on security tools? False positives pile up, stealthy threats slip through, and critical incidents get buried in the noise. Top CISOs have …

• 15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign
  Cybersecurity researchers have lifted the veil on a widespread malicious campaign that's targeting TikTok Shop users globally with an aim to steal credentials and distribute trojanized apps. …

MS-ISAC Updates

• Automating the CIS Controls with OSCAL
  Automation for Controls: Meet OSCAL, the Open Security Controls Assessment Language OSCAL, also known as the Open Security Controls Assessment.

• Top 10 Malware Q2 2025
  Total malware notifications from MS-ISAC monitoring services decreased 18% from Q1 2025 to Q2 2025. Read our Top 10 Malware Q2 2025 for more.

• CIS Benchmarks July 2025 Update
  Here is an overview of the CIS Benchmarks that the Center for Internet Security (CIS) updated or released for July 2025.

• What Makes CIS Hardened Images Secure Enough for the U.S. IC
  How do U.S. IC organizations strengthen their cloud security in a way that meets their needs? See how the CIS Hardened Images® can help.

• Lay a Cybersecurity Foundation and Master CIS Controls IG1
  Today’s digital threats don’t discriminate by size or sector. Building a solid cybersecurity foundation is no longer optional—it’s essential.

Subscribe to receive our monthly “Be Cyber Aware” report focused on regional cyber topics related to the Coastal Cyber District which includes Bryan, Bulloch, Camden, Chatham, Effingham, Glynn, Jenkins, Liberty, Long, McIntosh and Screven counties:

Last updated: 1/21/2023