WorldsCyberSec

Home / Advisories & updates

Advisories and updates

Threat advisories we sent to clients, and changes to plans, prices and the portal, most recent first. Clients get advisories by email the day they go out, with the specific guidance for their environment.

Continuous cloud posture monitoring added to Professional

Google Workspace monitoring now included alongside Microsoft 365 on every plan

Red team exercises added with physical intrusion as an option

Mobile application penetration testing added to the price list

Network sensors now support up to five sites on Enterprise

Client portal: live alert queue and case timelines replace the weekly PDF

Managed vulnerability remediation add-on for Windows and macOS

· Advisory

Advisory: file-transfer appliance zero-day; emergency scans completed for all clients

· Advisory

Advisory: fake browser-update malware delivered through compromised websites

Incident response hotline moves to a dedicated 24×7 responder rotation

· Advisory

Advisory: actively exploited VPN appliance flaw; patch guidance sent to all clients

Linux server coverage added to Essential at no change in price

24-month log retention add-on available on Professional and Enterprise

Phishing simulation templates refreshed for tax season

CMMC Level 2 readiness package published with fixed pricing

Compliance evidence export for SOC 2, HIPAA and PCI DSS auditors

· Advisory

Advisory: QR-code phishing bypassing link scanning; detection rule deployed

· Advisory

Advisory: malicious OAuth applications harvesting mailbox access; consent policy guidance

Retest within 90 days now included on every assessment

· Advisory

Advisory: help-desk social engineering used to reset MFA; verification script issued

Nonprofit and education pricing published

Report-a-phish button routes to the SOC with a 30-minute verdict

Spanish-language awareness modules for all plans

Quarterly threat brief: business email compromise in title and escrow

· Advisory

Advisory: credential-stuffing wave against Microsoft 365 tenants without conditional access

Annual external penetration test now included in Enterprise

OT and industrial network monitoring add-on for manufacturing clients

Weekly threat hunting on Enterprise moves from monthly to weekly

Quarterly review now includes a 90-day roadmap with owners

Tabletop exercise kits for ransomware and business email compromise

Client portal: asset inventory with agent coverage by site

· Advisory

Advisory: MFA-fatigue push campaigns targeting healthcare clients; number matching enforced

Entries before 2022-11-02 are available from your client success contact on request.