Welcome to your daily cybersecurity briefing.
🛡️ CERT-UA Alert: official update released – CERT-UA publishes an expanded update detailing malicious activity targeting educational and public-sector infrastructures, including new technical insights and reinforced hardening recommendations.
🧪 CERT-FR: new security advisory – CERT-FR issues a refreshed advisory regarding ongoing vulnerability analysis, highlighting potential operational risks affecting both Windows and Linux environments depending on configuration.
✈️ CERT-FR: additional security notice – A second CERT-FR advisory stresses the need for immediate mitigation actions due to the possibility of opportunistic exploitation associated with certain flaws with SYNOLOGY NAS.
🔐 NCSC: guidance for selecting an MSP – The NCSC releases updated recommendations to help organisations choose a trustworthy Managed Service Provider, with emphasis on baseline security controls, operational resilience and supply-chain risk management.
⚡ Don’t Think – Patch Now and ask later.
📚 Sources:
🔗 CERT-UA – Official update
https://cert.gov.ua/article/6286219
🔗 CERT-FR – Advisory CERTFR-2025-AVI-1035 (Synology)
https://www.cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-1035/
🔗 CERT-FR – Advisory CERTFR-2025-AVI-1036 (Tanzu – VMware)
https://www.cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-1036/
🔗 NCSC – Choosing a Managed Service Provider
https://www.ncsc.gov.uk/guidance/choosing-a-managed-service-provider-msp
📞 Your feedback is welcome!
📧 Email: radiocsirt@gmail.com
🌐 Website: https://www.radiocsirt.org
📰 Weekly Newsletter: https://radiocsirtintl.substack.com
#CyberSecurity #CERTFR #CERTUA #NCSC #MSP #SupplyChainSecurity #RadioCSIRT