NSI | Managed IT Services Temecula | Murrieta https://www.nsi-ca.com/ When your business success depends on IT Fri, 23 Oct 2026 17:40:44 +0000 en-US hourly 1 The Good, the Bad and the Ugly in Cybersecurity – Week 43 (2026) https://www.nsi-ca.com/network-security/the-good-the-bad-and-the-ugly-in-cybersecurity-week-43-2026/ Fri, 23 Oct 2026 17:40:44 +0000 https://www.nsi-ca.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-43-2026/ The Good | Courts Sentence Tax Fraudster, Interpol Disrupts African Cybercrime, and Ex-AI Engineer Faces Wiretapping Charges A U.S. district court has sentenced Nigerian national Chukwuemeka Victor Amachukwu to eight years in prison for conducting spearphishing attacks against tax preparation firms. Following his extradition, Amachukwu has pleaded guilty to computer intrusion and wire fraud charges. […]

The post The Good, the Bad and the Ugly in Cybersecurity – Week 43 (2026) appeared first on NSI | Managed IT Services Temecula | Murrieta.

]]> Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique https://www.nsi-ca.com/network-security/stopping-php2shell-how-sentinelone-protects-customers-from-this-attack-technique/ Wed, 21 Oct 2026 19:41:09 +0000 https://www.nsi-ca.com/blog/stopping-php2shell-how-sentinelone-protects-customers-from-this-attack-technique/ Executive Summary On October 21, 2026, the PHP project released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated CVSS v4.0 9.2. The two flaws are known together as PHP2Shell. They were disclosed by the security firms Calif and Wiz and by OpenAI, working with the PHP security […]

The post Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique appeared first on NSI | Managed IT Services Temecula | Murrieta.

]]> Bring Your Own Vulnerable Driver: What Detection Teams Should Actually Hunt https://www.nsi-ca.com/network-security/bring-your-own-vulnerable-driver-what-detection-teams-should-actually-hunt/ Mon, 19 Oct 2026 13:40:24 +0000 https://www.nsi-ca.com/blog/bring-your-own-vulnerable-driver-what-detection-teams-should-actually-hunt/ Bring your own vulnerable driver (BYOVD) is having a moment in endpoint security. Some of the buzz is earned. Some of it is overblown. This series unpacks both and shows the evidence for each. This piece turns the noise into specific behavior a detection team can hunt. “EDR killer,” a tool built to shut down […]

The post Bring Your Own Vulnerable Driver: What Detection Teams Should Actually Hunt appeared first on NSI | Managed IT Services Temecula | Murrieta.

]]> How SentinelOne Blocked APT29’s CaptiveCrunch Campaign https://www.nsi-ca.com/network-security/how-sentinelone-blocked-apt29s-captivecrunch-campaign/ Fri, 16 Oct 2026 19:43:11 +0000 https://www.nsi-ca.com/blog/how-sentinelone-blocked-apt29s-captivecrunch-campaign/ Once the corporate network stopped being defensible, the control had to move to the device, as SentinelOne® has long argued. That move carried one assumption with it. Wherever the laptop sits, name resolution tells it the truth and the agent can reach its own cloud. Almost nothing in the stack checks either half. In July […]

The post How SentinelOne Blocked APT29’s CaptiveCrunch Campaign appeared first on NSI | Managed IT Services Temecula | Murrieta.

]]> The Good, the Bad and the Ugly in Cybersecurity – Week 42 (2026) https://www.nsi-ca.com/network-security/the-good-the-bad-and-the-ugly-in-cybersecurity-week-42-2026/ Fri, 16 Oct 2026 17:40:39 +0000 https://www.nsi-ca.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-42-2026/ The Good | Authorities Arrest Cyber Exec for Extortion & Dismantle DPRK Laptop Farms The FBI arrested Edward Dubrovsky, a Canadian former cybersecurity executive at incident response and ransomware negotiation firm CYPFER, on charges of conspiracy and extortion. Various reports have linked the arrest to the FBI’s continued crackdown on the ShinyHunters extortion group and […]

The post The Good, the Bad and the Ugly in Cybersecurity – Week 42 (2026) appeared first on NSI | Managed IT Services Temecula | Murrieta.

]]> When Environment Variables Met Steganography: Inside a Reusable DCRat Delivery Chain https://www.nsi-ca.com/network-security/when-environment-variables-met-steganography-inside-a-reusable-dcrat-delivery-chain/ Wed, 14 Oct 2026 18:42:11 +0000 https://www.nsi-ca.com/blog/when-environment-variables-met-steganography-inside-a-reusable-dcrat-delivery-chain/ During the analysis of a recent malware sample, SentinelOne identified an anomalous execution chain, characterized by the combination of environment variable staging and steganographic payload delivery, culminating in the execution of a credential-stealing payload. Introduction Sometimes the most suspicious files are the ones that look the least suspicious. This attack chain begins with what appears […]

The post When Environment Variables Met Steganography: Inside a Reusable DCRat Delivery Chain appeared first on NSI | Managed IT Services Temecula | Murrieta.

]]> The Good, the Bad and the Ugly in Cybersecurity – Week 40 (2026) https://www.nsi-ca.com/network-security/the-good-the-bad-and-the-ugly-in-cybersecurity-week-40-2026/ Wed, 14 Oct 2026 18:42:11 +0000 https://www.nsi-ca.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-40-2026/ The Good | Authorities Sentence Ex-Military Cybercriminals & Dismantle KillSec Gang A federal court has sentenced former U.S. Army soldier Cameron John Wagenius to 70 months in prison and ordered him to pay $294,978 in restitution for launching cyberattacks on technology and telecommunications firms. While on active duty, Wagenius helped develop the SSH Brute hacking […]

The post The Good, the Bad and the Ugly in Cybersecurity – Week 40 (2026) appeared first on NSI | Managed IT Services Temecula | Murrieta.

]]> The Good, the Bad and the Ugly in Cybersecurity – Week 41 (2026) https://www.nsi-ca.com/network-security/the-good-the-bad-and-the-ugly-in-cybersecurity-week-41-2026/ Wed, 14 Oct 2026 18:42:10 +0000 https://www.nsi-ca.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-41-2026/ The Good | Federal Authorities Disrupt Cybercrime Syndicates & Courts Sentence Dark Web Co-Founder Jordanian authorities detained Saif al-Din Khader, a suspected member of the ShinyHunters extortion group. Following his arrest, sources report that Khader (aka Rey) has been cooperating with the FBI and international agencies to identify and locate the remaining co-conspirators, leveraging his […]

The post The Good, the Bad and the Ugly in Cybersecurity – Week 41 (2026) appeared first on NSI | Managed IT Services Temecula | Murrieta.

]]> 5 Years of SentinelOne ThreatOps: Defense from the Ground Up to Global Threat Championships https://www.nsi-ca.com/network-security/5-years-of-sentinelone-threatops-defense-from-the-ground-up-to-global-threat-championships/ Wed, 14 Oct 2026 18:42:10 +0000 https://www.nsi-ca.com/blog/5-years-of-sentinelone-threatops-defense-from-the-ground-up-to-global-threat-championships/ For five years, SentinelOne™’s ThreatOps has inspired a global defender movement. What began in 2020 as a threat hunting webinar has grown into an industrial-scale gamified platform that has trained over 19,000 blue teamers, influenced over $661 million in closed-won revenue (September 2023–September 2026), and spawned the Sentinels League Threat Hunting World Championship. As we […]

The post 5 Years of SentinelOne ThreatOps: Defense from the Ground Up to Global Threat Championships appeared first on NSI | Managed IT Services Temecula | Murrieta.

]]> Bring Your Own Vulnerable Driver: How EDR Killing Became an Industry https://www.nsi-ca.com/network-security/bring-your-own-vulnerable-driver-how-edr-killing-became-an-industry/ Wed, 14 Oct 2026 18:42:10 +0000 https://www.nsi-ca.com/blog/bring-your-own-vulnerable-driver-how-edr-killing-became-an-industry/ Bring your own vulnerable driver (BYOVD) is having a moment in endpoint security. Some of the buzz is earned. Some of it is overblown. This series unpacks both and shows the evidence for each. This piece traces how the technique scaled into an industry. Ransomware actors successfully disabled security tools in about 48% of intrusions […]

The post Bring Your Own Vulnerable Driver: How EDR Killing Became an Industry appeared first on NSI | Managed IT Services Temecula | Murrieta.

]]>