SXIZA / IT SECURITY CONSULTING
We review access, cloud security and incident readiness. Independent of vendors.
About us
Companies come to us to find out who holds privileged permissions in Entra ID and why, whether Conditional Access and MFA settings match the actual risks, how responsibilities for cloud services are divided and what happens in the first hours of an incident. We also prepare evidence and controls for ISO 27001 and ISAE 3402 audits.
SXIZA = Security · Exposure · Identity · Zero Trust · Audit
Microsoft and partners disrupted infrastructure linked to YAM Store and the CoGUI and Iron Man phishing kits. The figures describe targeted messages, not confirmed successful attacks.
Microsoft confirmed exploitation of a Windows Shell flaw that bypasses the Mark of the Web label. The October fix is available, and organizations should verify it reached affected devices.
A flaw in Catalyst SD-WAN Manager is being exploited. An unauthenticated attacker could gain administrator access.
Microsoft has observed at least 13 larger Star Blizzard campaigns since January, with activity affecting more than 100 organizations. Its new RedFlick technique shortens the path from a message to malware, but these are targeted operations, not a mass attack on every business.
Citrix confirmed exploitation of two critical NetScaler ADC and Gateway flaws. The estimate of internet-exposed instances is not a victim count, but it gives companies a reason to check their own infrastructure now.
Microsoft says it has reliable evidence that attackers are exploiting CVE-2026-65660 in on-premises SharePoint. A patch has been available since August; the risk concerns organizations running their own servers.
A test version of the Czech business register made national ID numbers and some non-public documents accessible. The ministry shut the test portal down, but is still investigating how many people may have been affected.
Tell us what you are dealing with and we will come back with follow-up questions.
Get in touch