The IT-ISAC is a non-profit corporation formed by IT companies as a specialized forum for managing risks to their corporations and the IT infrastructure.
Manassas, VA
Joined November 2010
- Tweets2.7K
- Following607
- Followers2.4K
- Likes904
Pinned Tweet
Cyber threats evolve, but the fundamentals still matter. 🛡️
Join IT-ISAC for an upcoming Cybersecurity Awareness Month webinar on Wednesday, October 21 at 3 PM ET -- Make It Harder: Turning Today’s Cyber Threats Into Action.
Drawing directly from our latest State of the Threat report, this session translates current threat data into actionable steps to make it harder to get in. We’ll cover real-world cybercriminal behavior, practical ways to lock down your credentials, and strategies to build lasting resilience.
Secure your spot:
🔗 hubs.ly/Q04z5SLB0
#CybersecurityAwarenessMonth #InformationSharing #ThreatIntelligence #Cybersecurity #Webinar
🎣 Phishing is no longer just a bad email -- it's a multi-channel trap.
Attackers are leveraging text messages, QR codes, phone calls, and malicious sites to trick users into handing over access. This week for #CybersecurityAwarenessMonth, our latest blog post breaks down how to Make It Harder to Fool You by spotting the lures and verifying before you trust.
We also go beyond the fundamentals to discuss more sophisticated techniques used by some attackers, how to detect them, and how to respond.
Read the full blog post to sharpen your defenses → hubs.ly/Q04BTMb30
#Phishing #SocialEngineering #Cybersecurity #InformationSharing #StaySafeOnline #Blog #IdentitySecurity
⏰ LAST CALL! Cyber threats aren't slowing down. Neither should your defenses.
Cyber threats evolve, but the fundamentals still matter. Don't miss the IT-ISAC’s Cybersecurity Awareness Month webinar: Make It Harder: Turning Today’s Cyber Threats Into Action.
📆 When: Tomorrow, Wednesday, October 21 at 3 PM ET
🎟️ Cost: FREE & Open to the Sector!
Drawing directly from our latest State of the Threat report, we’ll translate real-world threat data into actionable steps to lock down your credentials, defend against cybercriminals, and build resilience.
💡 Cybersecurity is a team effort. Tag a colleague, share the invite, and help more defenders get ahead of the threats.
🔗 Save your seat now: hubs.ly/Q04BvDLh0
#CybersecurityAwarenessMonth #InformationSharing #ThreatIntelligence #Cybersecurity #Webinar #CyberThreats #Ransomware
Phishing has left the inbox. Have your defenses kept up? Attackers use SMS, voice calls, QR codes, and malicious links to bypass your guardrails. 🎣
This #CybersecurityAwarenessMonth, Make It Harder to Fool You (and your organization!):
🛑 Slow down and inspect unexpected requests across email, text, phone calls, and QR codes
🛑 Verify senders through official channels before sharing credentials or clicking links
🛑 Report suspicious messages immediately to help defend your organization’s environment
Ready to go beyond the fundamentals? Attackers are raising the stakes with advanced social engineering techniques, including Adversary-in-the-Middle attacks, QR code scams (quishing), and ClickFix exploits.
Tactics are evolving and that means your defenses should too.
🔒 Check out our special Cybersecurity Awareness Month webpage for more: hubs.ly/Q04BvBdC0
#Cybersecurity #Phishing #SocialEngineering #StaySafeOnline #ISAC #ClickFix
💡 DID YOU KNOW?
According to research from @okta, multi-factor authentication adoption has reached up to 70% — yet nearly a third of users still lack MFA protection.
Leaving administrative and employee accounts guarded by passwords alone gives attackers an unguarded path into your perimeter. Enforcing MFA across every entry point and transitioning toward phishing-resistant identity controls is one of the most effective steps defenders can take to eliminate account takeover risks.
Make It Harder for Attackers to Take Over. Strengthen your access controls with our new MFA one-pager, or explore our full suite of resources on our #CybersecurityAwarenessMonth landing page:
🔗 hubs.ly/Q04BpNkR0
#StaySafeOnline #InformationSharing #MFA #Cybersecurity #IdentitySecurity #Phishing
It's time for a #CyberByte!
The @FBI and @CrowdStrike disrupted several U.S.-based "laptop farms" operated by FAMOUS CHOLLIMA, a North Korean threat group that uses stolen identities to secure remote IT jobs at American companies. The scheme allowed illicit remote workers to funnel corporate earnings back to the North Korean regime while maintaining unauthorized insider access to critical industry networks.
Read More: hubs.ly/Q04BjVwk0
#cybersecurity #informationsharing #threatintelligence #cyberattack
🔐 MFA stops attackers in their tracks, even when credentials leak.
Compromised passwords are bad, but allowing an attacker to turn those credentials into full account access is worse. This week for #CybersecurityAwarenessMonth, our latest blog post focuses on how to Make It Harder to Take Over by putting multi-factor authentication (MFA) to work.
Going beyond the basics, we dive into phishing-resistant MFA, stronger authentication methods, and robust identity controls designed to shut down account takeovers before they start.
Read the full post to level up your defenses here → hubs.ly/Q04B7KHn0
#MFA #IdentitySecurity #Cybersecurity #InformationSharing #StaySafeOnline #Phishing #Blog
Even if an attacker gets your password, they shouldn't get your account or your data. 🛡️
This #CybersecurityAwarenessMonth, Make It Harder to Take Over:
⚡ Enable Multi-Factor Authentication (MFA) to add a crucial second layer of defense
⚡ Upgrade to phishing-resistant MFA to block account takeovers through social engineering tactics
⚡ Implement identity controls that make stolen credentials useless to attackers
This week, we're breaking down the fundamentals of MFA—and what it takes to go beyond the basics to better protect accounts, identities, and the information they access.
🔒 Check out our Cybersecurity Awareness Month specific webpage for more: hubs.ly/Q04B0Qd50
#StaySafeOnline #IdentitySecurity #MFA #Cybersecurity
IT-ISAC retweeted
The recent cyberattack affecting refrigeration systems at supermarkets across France serves as an important reminder that cybersecurity and operational resilience go hand in hand.
For the food and agriculture sector, connected systems support everything from refrigeration and temperature monitoring to food processing, storage, and distribution. Protecting these systems is essential to maintaining safe, reliable operations.
A few important resilience considerations for organizations:
✔️ Know which operational systems are connected to the internet and who can access them.
✔️ Review remote access, including connections maintained by equipment vendors and service providers.
✔️ Keep equipment firmware updated and address known vulnerabilities.
✔️ Ensure monitoring, response, and recovery procedures account for disruptions to critical equipment.
Cybersecurity isn't just about protecting data. It's about protecting the operations that keep our food supply chain moving.
#Cybersecurity #FoodandAgriculture #OperationalTechnology #CyberResilience
Hackers forced the temperature of fridges and freezers in many French supermarkets up to 122 degrees Fahrenheit, causing fires and spoiling food at several hundred stores in a major cyber attack reut.rs/4jk2etA
💡 DID YOU KNOW?
According to data from the National Cybersecurity Alliance (@StaySafeOnline), only 62% of people regularly create unique passwords for their accounts. 41% never use a password manager.
That lack of basic password hygiene is a huge vulnerability — handing attackers a master key to test across multiple accounts.
This Cybersecurity Awareness Month, IT-ISAC is encouraging organizations to Make It Harder to get In. Pairing long, unique passwords with password managers and passkeys shuts down easy access points.
Go beyond the fundamentals with our one-pager highlighting the importance of password managers, or visit our #CybersecurityAwarenessMonth landing page for more details:
🔗 hubs.ly/Q04zLbR90
#CybersecurityAwarenessMonth #InformationSharing #Passkeys #Cybersecurity #PasswordManager
It's time for a #CyberByte!
Researchers have uncovered "PoeLLM," a dynamic malware campaign actively targeting enterprise AI infrastructure like LiteLLM and Ollama to mine cryptocurrency and scan for vulnerabilities. The malware relies on a novel command-and-control mechanism that decodes IP addresses using changing words from a public GitHub poem to stay hidden.
To protect your environment, audit external open-source deployments and restrict unnecessary public access to service ports.
Read More: hubs.ly/Q04zFqDk0
#cybersecurity #informationsharing #threatintelligence #malware
Attackers don’t always break in. Sometimes they simply log in.
Stolen, reused, or exposed credentials remain one of the easiest access points into your company's data. This week's blog for #CybersecurityAwarenessMonth breaks down how to make it harder for attackers to get in by moving beyond password basics to passkeys, service account hygiene, and proactive credential monitoring.
Check out the full post to explore key questions every defender should be asking:
🔗 hubs.ly/Q04zsXPf0
#StaySafeOnline #InformationSharing #Blog #Passkeys #IdentitySecurity #Cybersecurity
Protecting your organization starts at the front door. 🚪
This #CybersecurityAwarenessMonth, Make it Harder to Get In:
🔑 Use long, unique passwords with a reliable password manager
🔑 Transition to passkeys for phishing-resistant security
🔑 Strengthen identity controls to stop compromised credentials in their tracks
This week, we'll be breaking down how to protect your organization through stronger passwords and passkeys -- from quick, simple wins to advanced security strategies.
🔒Check out our special Cybersecurity Awareness Month webpage for more: hubs.ly/Q04z5Sn40
#StaySafeOnline #IdentitySecurity #Passwords #Cybersecurity
Join the IT-ISAC for an upcoming webinar: "Make It Harder: Turning Today’s Cyber Threats Into Action" 🛡️
During this session, we’ll draw from our latest State of the Threat report to deliver practical strategies that reduce risk and keep threat actors out.
🗓️ Wednesday, October 21 at 3 PM ET
🔗 Register now: hubs.ly/Q04y-C4M0
Cyber threats are evolving, but knowing the fundamentals is what stops attackers in their tracks.
#CybersecurityAwarenessMonth #ThreatIntelligence #InfoSec #Cybersecurity #ITSecurity #InfoSharing #CyberDefense #StaySafeOnline
IT-ISAC retweeted
Happy #CybersecurityAwarenessMonth 2026! As we celebrate America’s 250th anniversary, let’s secure the next 250 by strengthening digital defenses and prioritizing resilience. Get started: cisa.gov/cybersecurity-aware… #SecuringTheNext250
IT-ISAC retweeted
October is Cybersecurity Awareness Month! Throughout the month, we'll be sharing guidance to help you stay ahead of digital threats and keep your data safe. Visit our site for guidance and more: nsa.gov/cybersecurity-awaren…
IT-ISAC retweeted
#CybersecurityAwarenessMonth has arrived — and so have a few scammy characters! We'll introduce you to them and teach you how to make their lives harder by avoiding their tricks. Stay tuned and learn more here: hubs.la/Q04yD4zt0
#CybersecurityAwarenessMonth kicks off tomorrow, and the IT-ISAC is proud to be a National Cybersecurity Alliance (@StaySafeOnline) Champion alongside other organizations nationwide. We'll be here all month with blogs, tips, webinars, and actionable resources to help you #StaySafeOnline.
Equipping your organization with resources and knowledge helps us all build a united front against evolving cyber threats. Join us this October as we share information and stand together to Make It Harder for attackers to get a foothold.
#cybersecurity #informationsharing #infosec
Your security is only as strong as your most vulnerable vendor! Cyber criminals frequently target upstream partners to gain back-door access to multiple customer networks at once.
Maintain clear vendor agreements, demand timely incident reporting, and never blindly trust third-party network traffic.
Download our free SMB Cybersecurity Playbook to get practical technical steps for this and nine other high-impact strategies: hubs.ly/Q04ymcVV0
#thirdpartyvendor #smallbusiness #cybersecurity #informationsharing #SMBs
In today’s cyber landscape, it pays to be connected. Information sharing is vital to stopping threats before they strike your network.
Information Sharing and Analysis Centers (ISACs) serve as a crucial shield, transforming organizations' individual experiences into a network of actionable, threat intelligence for entire industries.
Threats don't stand alone, and neither should you. By joining the IT-ISAC, your IT organization gains a trusted community and the collective intelligence needed to stay ahead of evolving cyber risks.
hubs.ly/Q04yqd980
#informationsharing #isac #cybersecurity #infosec #threatintel
