@proficioinc

#Proficio is a World-Class #Cybersecurity Service Provider. We are changing the way organizations meet security & compliance requirements. #MDR

 Global
Proficio.com
Joined January 2012
  • Tweets11.7K
  • Following572
  • Followers1K
698Media
🚀 Introducing Nixus — Proficio's Agentic AI SOC Platform. The next evolution of ProSOC MDR is here, delivering Continuous Cyber Resilience through autonomous detection, investigation, validation, and response. 📄 Official Press Release: einnews.com/pr_news/93050642…… 🌐 Learn More: proficio.com/ #Proficio #Nixus #AgenticAI #CyberResilience #MDR #ManagedDetectionAndResponse #SOC #ThreatDetection #ActiveDefense #CyberSecurity #RBVM
1
2
121
Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation via @Unit42_Intel #Proficio #ThreatNews #Cybersecurity #MSSP #MDR unit42.paloaltonetworks.com/…

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

A cybercrime campaign combined a loader-as-a-service framework and DLL sideloading via a Go-compiled fake MpClient.dll, a novel evasion layer combination.

unit42.paloaltonetworks.com
112
The ‘Ghost’ in the Database: Recovering Active ADFS Signing Keys via Machine DPAPI via @GoogleCloud #Proficio #ThreatNews #Cybersecurity #MSSP #MDR cloud.google.com/blog/topics…

Recovering Active ADFS Signing Keys via Machine DPAPI | Google Cloud Blog

This post details how adversaries exploit this TTP to forge high-privilege SAML tokens and provide the blueprint to defend against it.

cloud.google.com
92
Adobe ColdFusion flaw CVE-2026-48282 is now being exploited in the wild via @DarkWebInformer #Proficio #ThreatNews #Cybersecurity #MSSP #MDR darkwebinformer.com/adobe-co…

Adobe ColdFusion flaw CVE-2026-48282 is now being Exploited in the Wild

Attackers are exploiting a maximum-severity ColdFusion path traversal vulnerability that can lead to remote code execution on unpatched servers.

darkwebinformer.com
139
Critical Gitea Docker Bug CVE-2026-20896 Under Active Exploitation Exposes Repositories and Secrets via @SecurityAffairs #Proficio #ThreatNews #Cybersecurity #MSSP #MDR securityaffairs.com/194902/h…

Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets

Attackers are exploiting a critical Gitea bug (CVE-2026-20896) that bypasses auth with a single HTTP header, exposing repos and sensitive data

securityaffairs.com
126
Tenda firmware contains hidden authentication backdoor CVE-2026-11405 across multiple versions via @SEI_CMU #Proficio #ThreatNews #Cybersecurity #MSSP #MDR kb.cert.org/vuls/id/213560

CERT/CC Vulnerability Note VU#213560

Tenda firmware (multiple versions) contains hidden authentication backdoor

kb.cert.org
95
The Gentlemen are knocking: custom backdoors and evolving tactics via @Securelist #Proficio #ThreatNews #Cybersecurity #MSSP #MDR securelist.com/the-gentlemen…

The Gentlemen RaaS: rapid growth and a new ransomware variant

Kaspersky researchers analyze incidents related to The Gentlemen RaaS group, disclose their tools and TTPs, and find a new ransomware variant.

securelist.com
88
Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique via @_CPResearch_ #Proficio #ThreatNews #Cybersecurity #MSSP #MDR research.checkpoint.com/2026…

Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique - Check Point...

Research by: Alexey Bukhteyev Key Takeaways Introduction Over the past several years, large language models have reshaped software development, and malware development has followed the same path....

research.checkpoint.com
79
DuneSlide: Two Critical RCE Vulnerabilities CVE-2026-50548 and CVE-2026-50549 via Zero-Click Prompt Injection in Cursor IDE via @CatoNetworks #Proficio #ThreatNews #Cybersecurity #MSSP #MDR catonetworks.com/blog/dunesl…

DuneSlide: Two Critical RCE vulnerabilities via Zero-Click Prompt Injection in Cursor IDE

Two critical RCE vulnerabilities in Cursor IDE, the AI-powered development environment Cursor says is used by over half the Fortune 500.

catonetworks.com
1
112
Progress Kemp LoadMaster Pre-Auth RCE Flaw CVE-2026-8037 Faces Active Exploitation Attempts via @TheHackersNews #Proficio #ThreatNews #Cybersecurity #MSSP #MDR thehackernews.com/2026/07/la…

Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

eSentire says attacks began June 29 against a CVSS 9.6 OS command injection flaw that enables unauthenticated code execution.

thehackernews.com
129
CISA confirms BlueHammer CVE-2026-33825 is now used in ransomware attacks to gain SYSTEM privileges through Microsoft Defender via @SecurityAffairs #Proficio #ThreatNews #Cybersecurity #MSSP #MDR securityaffairs.com/194577/s…

CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks - Security Affairs

CISA confirms BlueHammer (CVE-2026-33825) is now used in ransomware attacks to gain SYSTEM privileges through Microsoft Defender.

securityaffairs.com
151
STOCKSTAY Another Day: The Latest Addition to Turla’s Intelligence Gathering Apparatus via @GoogleCloud #Proficio #ThreatNews #Cybersecurity #MSSP #MDR cloud.google.com/blog/topics…

The Latest Addition to Turla’s Intelligence Gathering Apparatus | Google Cloud Blog

Analysis of a backdoor, STOCKSTAY, that has been continually developed and deployed by the Russia-linked threat actor Turla.

cloud.google.com
49
Clone This Repo and I Own Your Machine via @0dinai #Proficio #ThreatNews #Cybersecurity #MSSP #MDR 0din.ai/blog/clone-this-repo…

Clone This Repo and I Own Your Machine

Indirect prompt injection in agentic coding tools can lead to full system compromise because authorized tools allow LLMs to run shell commands, access files, and make network calls without clear user...

0din.ai
33
Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data via @TheHackersNews #Proficio #ThreatNews #Cybersecurity #MSSP #MDR thehackernews.com/2026/06/mi…

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

Poisoned MCP tool descriptions can make agents collect invoices and leak company data through routine approved tool calls.

thehackernews.com
44
Chromium extension uses AI-related branding to redirect browser search via @msftsecurity #Proficio #ThreatNews #Cybersecurity #MSSP #MDR microsoft.com/en-us/security…

Chromium extension uses AI‑related branding to redirect browser search | Microsoft Security Blog

A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using MV3 APIs and intermediary infrastructure.

microsoft.com
48
Attackers actively exploit Oracle E-Business Suite flaw CVE-2026-46817 to take over Oracle Payments via @SecurityAffairs #Proficio #ThreatNews #Cybersecurity #MSSP #MDR securityaffairs.com/194463/s…

Attackers actively exploit the Oracle E-Business Suite flaw CVE-2026-46817

Attackers are exploiting a critical Oracle E-Business Suite flaw that lets remote, unauthenticated attackers take over Oracle Payments.

securityaffairs.com
107
StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them via @msftsecurity #Proficio #ThreatNews #Cybersecurity #MSSP #MDR microsoft.com/en-us/security…

StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them |...

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that formed the backbone of the StealC and Amadey infrastructure. This blog is a...

microsoft.com
70
Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild via @SecurityAffairs #Proficio #ThreatNews #Cybersecurity #MSSP #MDR securityaffairs.com/194153/u…

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild

Attackers exploit Cisco Unified CM flaw (CVE-2026-20230) allowing unauth HTTP requests to trigger SSRF, write files, and gain root access

securityaffairs.com
135
Squidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid CVE-2026-47729 via @DarkWebInformer #Proficio #ThreatNews #Cybersecurity #MSSP #MDR darkwebinformer.com/squidble…

Squidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)

CVE-2026-47729, nicknamed Squidbleed, is a heap buffer over-read in the FTP gateway of the Squid web proxy.

darkwebinformer.com
264
StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader via @Securelist #Proficio #ThreatNews #Cybersecurity #MSSP #MDR securelist.com/strikeshark-c…
78
Load more