Eldorado Ransomware, Fujitsu Data Breach, Massive Microsoft Update
Risk 1: High
Issue: Eldorado, a recently released ransomware, has increased its reach to Windows and VMware. Their largest targets have been in real estate, education, and healthcare; however, financial services typically follow shortly after.
Resolution: As with all ransomware, users must ensure their security suite is up to date and take added precautions to avoid phishing attacks.
Risk 2: Medium
Issue: Fujitsu confirmed a large data breach back in March of this year. This included customer data, including credit card information stored in their systems. No further details have been provided. Devices by this manufacturer are used heavily in financial services.
Resolution: This is massively disappointing in how long it took Fujitsu to acknowledge the breach. Given the delays and reduced transparency, it is recommended that clients update their profiles, change their passwords, and cancel/replace credit cards.
This is exactly the reason the FTC has recently pushed for the 60 day notification requirement.
Risk 3: High
Issue: Microsoft released a large cumulative and security update today including 186 security and patch updates, including 4 zero-day (or known and exposed) vulnerabilities. However, the largest update was to migrate Copilot, their AI application, to a desktop app.
Resolution: Windows users should update their system to apply the new security updates.
Users should also immediately review their Copilot settings to ensure it is within the constraints of their WISP and cyber insurance.
Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants.
