Securin Inc.

🔍 Hello LinkedIn Network! I'm currently looking for an experienced cybersecurity professional to join our team at Securin Inc. for the following opportunity: 🚀 Team Lead – Offensive Security | Albuquerque, NM 🚀 If you have 3+ years of experience in offensive security, penetration testing, SOC operations, and team leadership — this could be a fantastic opportunity to take your career to the next level. This role offers the chance to lead critical security initiatives and make a real impact in a fast-paced, mission-driven environment. 📍 Location: Albuquerque, NM 💼 Full-time | Leadership Role Ready to join a team that's passionate about protecting and innovating in cybersecurity? Apply now: 🔗 https://lnkd.in/g9gj5kdH #CybersecurityJobs #OffensiveSecurity #PenetrationTesting #LeadershipOpportunity #AlbuquerqueJobs #Hiring #SecurinJobs #NMjobs #NewMexicoJobs

🚨 Adversarial Knowledge Graph: CVE-2024-53104 ☢️ What it is: A high-severity vulnerability impacting Linux kernels from 2.6.26 onwards, spanning a vast ecosystem, from servers to embedded devices and Android systems. It was added to the KEV catalog in February 2025, followed by a CISA mandate that Federal Civilian Executive Branch agencies address the vulnerability by February 26 2025. ☢️ Why it matters: Linux’s prevalence across servers, cloud, embedded systems and Android devices means the operational impacts of an exploit are extensive. Attackers could gain root access, execute code, or cause service disruptions, amplifying operational impact. Both on-premises and cloud environments are at risk, with legacy systems running older kernels (pre-4.19.3294) particularly vulnerable, as patching may be delayed or impractical. This vulnerability aligns with privilege escalation and execution tactics, reflecting its potential use in gaining elevated access or running malicious code - staple techniques in advanced persistent threats (APTs) and other malicious tactics. For attackers, the vulnerability's appeal lies in its kernel-level impact, and low barrier to entry. ⚠️ Associated weaknesses: The root cause of CVE-2024-53104 is an out-of-bounds write (CWE-787), a severe flaw that permits attackers to overwrite memory beyond allocated buffers. In the kernel context, this can lead to catastrophic outcomes, including privilege escalation or system compromise. 🛡️Defense recommendations: Prompt action is critical to close this exploitable gap: 👉 Apply kernel patches to specified stable releases  👉 Apply Android security updates from February 2025 #ProactiveSecurity #CVE #Cybersecurity

🔥 Cl0p accounted for 18% of ransomware attacks last year, and the group’s pattern of exploiting file transfer vulnerabilities is underlined in the Western Alliance breach, impacting 22,000 customers. Western Alliance has not publicly disclosed the file transfer application exploited in its breach, but we can learn a lot from other, similar attacks. 🚨 Cl0p’s MOVEit campaign was a masterclass in supply chain exploitation, targeting tech, manufacturing, and energy—with significant impact: 🔹 Sophisticated zero-day vulnerability exploitation 🔹 Strategic mass-exploitation methodology 🔹 Multi-industry targeting approach 🔹 Efficient data exfiltration at scale 🔹 Targets critical file transfer infrastructure (Cleo and MOVEit) 🛑 Software supply chain vulnerabilities enable cybercriminals to scale with relatively low effort: one exploit of a widely used software vulnerability allows them to ‘mug’ multiple targets and gain a foothold in organizations further up the chain. 💡 For example: The massive MOVEit breach enabled 3rd, 4th, and even 5th party compromises. 🛡️ Recommendations for defense: Securin’s Kiran Chinnagangannagari says it’s a harsh reality that organizations must confront this trend and evaluate their partners’ cybersecurity practices. Other best practices include: 📌 Ask partners to complete a standardized security questionnaire based on frameworks like NIST CSF or ISO 27001—covering: 👉 Network segmentation & access controls. 👉 Patch & vulnerability management. 📌 Round out the questionnaire with insights from External Attack Surface Management (EASM) tools to: Reveal exposed assets 👉 Identify potential vulnerabilities. 👉 Assess overall risk posture. #ProactiveSecurity #Cybersecurity

🚨 Salt Typhoon: Turning defense tools into attack vectors 🚨 Salt Typhoon spent 2024 aggressively exploiting high-severity vulnerabilities in enterprise security products and VPN solutions, turning defensive tools into attack vectors. 🔻 Key CVEs exploited: ⚠️ CVE-2023-48788 (9.7) – Fortinet FortiClient EMS ⚠️ CVE-2024-21887 (9.42) – Ivanti Connect Secure, Policy Secure ⚠️ CVE-2023-46805 (9.94) – Ivanti Connect Secure, Policy Secure These flaws enable remote code execution and authentication bypass, potentially leading to complete network takeover. The threat to critical infrastructure is real: Denmark recently issued the first European government warning about state-backed cyber espionage targeting telecoms providers. 🔻Defense recommendations: 👉 Patch ASAP – Prioritize security updates for critical systems 👉Monitor and hunt – Strengthen network visibility and threat detection 👉Lock down access – Enforce MFA and harden remote access 👉Be prepared – Build APT-specific response plans When attackers target security infrastructure itself, defense-in-depth is crucial. Learn more about Salt Typhoon’s tactics and techniques, check our latest blog post (link in comments)👇 #ProactiveSecurity #SaltTyphoon #Cybersecurity #CriticalInfrastructure

⚡ The systems keeping our lights on, water running and hospitals operating are increasingly vulnerable to cyberattacks. This isn't hypothetical - it's happening now. 🎙️ Securin’s Kiran Chinnagangannagari joined TFiR’s Secure by Design podcast to discuss the findings of our Critical Infrastructure Report, including: 💣 Over 3,000 vulnerabilities discovered in manufacturing systems. 💣 30% increase in energy sector cyber risks. 💣 800 vulnerabilities affecting water and waste management. Have a listen and find out who’s behind the attacks, which sectors are most at risk, and why attackers are increasingly targeting smaller organizations with fewer security resources. Then download your copy of the report to get the full analysis of what we learned from over 1700 attacks – and what you can do about it. Link in the comments 👇 #ProactiveSecurity #CriticalInfrastructure #Cybersecurity https://lnkd.in/ejCFh-82

⚡ The systems keeping our lights on, water running and hospitals operating are increasingly vulnerable to cyberattacks. This isn't hypothetical - it's happening now. 🎙️ Securin’s Kiran Chinnagangannagari joined TFiR’s Secure by Design podcast to discuss the findings of our Critical Infrastructure Report, including: 💣 Over 3,000 vulnerabilities discovered in manufacturing systems. 💣 30% increase in energy sector cyber risks. 💣 800 vulnerabilities affecting water and waste management. Have a listen and find out who’s behind the attacks, which sectors are most at risk, and why attackers are increasingly targeting smaller organizations with fewer security resources. Then download your copy of the report to get the full analysis of what we learned from over 1700 attacks – and what you can do about it. Link in the comments 👇 #ProactiveSecurity #CriticalInfrastructure #Cybersecurity https://lnkd.in/ejCFh-82

🚨 Salt Typhoon: mitigating the risks 🚨 Salt Typhoon continues its aggressive targeting of critical infrastructure via high-severity vulnerabilities in enterprise security products and VPN solutions. Securin’s researchers analyzed more than 40 attacks associated with the group in the past year. What they found: a strategic shift towards long-term cyberespionage, with APT-like behaviors. This is underlined by the evolution of the group’s toolkit  from Mimikatz to custom malware such as GHOSTSPIDER). Check out our latest blog for the full details (link in comments), but for now: 👉 Defense recommendations: 🛡️ Implement robust patch management processes, prioritizing vulnerabilities in security infrastructure. 🛡️ Enhance network monitoring capabilities to detect anomalous behavior and potential lateral movement. 🛡️ Conduct regular threat hunting exercises, focusing on indicators associated with Salt Typhoon's tactics and techniques. 🛡️ Strengthen authentication mechanisms, particularly for remote access and privileged accounts. 🛡️ Develop and test incident response plans specifically tailored to APT intrusions. 👉 Bottom line: The targeting of security products underlines the importance of timely patching and vendor management. It’s a good time to implement defense-in-depth strategies. #ProactiveSecurity #SaltTyphoon #Cybersecurity

🚨 THREAT OVERVIEW: APT29 (aka "Cozy Bear") targeted 40+ organizations in 2024 🚨 Top sectors targeted last year included: 🚧 Government/Public Sector (15) 🚧 IT and Telecoms (13) 🚧 Defense (7) 🚧 Transportation/Logistics (6) 🚧 Energy (5) This Russia-linked group is systematically targeting tech providers with large customer bases - a clear pivot toward #SupplyChain attacks. Notable victims include Microsoft, HPE, TeamViewer, and German Air Traffic Control. 👉 Defense recommendations: 🛡️ Robust patch management and vendor oversight. 🛡️ Strong multifactor authentication (MFA) for remote and privileged access. 🛡️ Enhance network monitoring and threat hunting. 🛡️ Strengthen authentication for remote and privileged access. #ProactiveSecurity #Cybersecurity #APT29

Threat overview: Salt Typhoon – A perfect storm for critical infrastructure. Salt Typhoon’s evolving toolkit (from Mimikatz to custom malware such as GHOSTSPIDER) highlights a strategic shift towards long-term cyberespionage. The China-linked group ramped up its operations in 2024, targeting critical infrastructure globally – and breaching major US telecom providers, including AT&T, T‑Mobile and Verizon. Secure government communications and wiretap systems have also been compromised. 👉 Key takeaway: Organizations in telecoms and critical sectors should implement multi-layered, proactive security strategies to mitigate risks. 👉 Defense recommendations: 🛡️ Robust patch management and vendor oversight. 🛡️ Enhance network monitoring and threat hunting. 🛡️ Strengthen authentication for remote and privileged access. #CyberSecurity #CriticalInfrastructure #ProactiveSecurity

🚨 I'm Hiring a Marketing Manager! 🚨 Are you a highly organized and strategic event planner with a passion for creating impactful experiences? Securin Inc., a cybersecurity company based in New Mexico, is looking for an Events Marketing Manager to lead and execute a variety of events, from industry conferences and trade shows to executive dinners and customer appreciation events. If you thrive in fast-paced environments and love turning ideas into unforgettable experiences, we want to hear from you! 📌 Apply here: https://lnkd.in/gW5a4UTH Know someone who would be a great fit? Please share this post with your network! Interested? Have questions? Reach out to me directly! Let’s connect. #Hiring #EventMarketing #MarketingJobs #CyberSecurity #NewMexicoJobs #EventPlanning #MarketingManager #JobSearch #NMjobs Deepika Gajaria