Sharepoint ToolShell attacks targeted organizations across four continents

Posted in Commentary with tags on October 22, 2025 by itnerd

Hackers believed to be associated with China have leveraged the ToolShell vulnerability (CVE-2025-53770) in Microsoft SharePoint in attacks targeting government agencies, universities, telecommunication service providers, and finance organizations.

The same threat actors also compromised two government departments in the same African country during the same time period. Zingdoor, which was deployed on the networks of all three organizations, has in the past been associated with the Chinese group Glowworm (aka Earth Estries, FamousSparrow). 

Commenting on this is Roger Grimes, CISO Advisor at KnowBe4: 

“I think this is yet another great example of why default auto-patching should be required in every software program and device with firmware. That’s because every patch for every announced vulnerability will not be applied 100% by everyone. In fact, it’s very common for 10% – 25% of related instances to remain unpatched for months — and even years — after a patch is released. There are always people who don’t apply critical patches for some reason or another. But if auto-patching were the default, more instances would get patched in a timely manner.”

I wasn’t a believer in patching as soon as patches come out. But I have changed my mind on that front and I patch everything ASAP to stop a threat actor from making my life miserable. Perhaps you should consider doing the same thing as clearly this is a today problem.

Leave a comment »

Bluepath Robotics expands North American footprint with strong debut at ADM

Posted in Commentary with tags on October 22, 2025 by itnerd

Bluepath Robotics has completed its first participation at ADM Toronto (Advanced Design and Manufacturing) with strong engagement from manufacturers across Canada. The event marked Bluepath Robotics’ formal entry into the Canadian market and highlighted its growing North American footprint, supported by a new office in Detroit, Michigan.

Bluepath’s presence at ADM Toronto generated significant interest among industrial, logistics, and automotive sector participants seeking safer, more efficient material flows and faster time-to-value from automation. The company’s entry to Canada aligns with a broader regional expansion strategy focused on strengthening local deployment, service, and lifecycle support capabilities.

Single accountable partner, compliance by design

Bluepath Robotics designs and manufactures both the AMR hardware and the fleet management software in-house, providing customers with a single accountable partner from planning to scale. This full-stack approach reduces integration risk and accelerates commissioning, while enabling tighter alignment with site-specific workflows, safety practices, and industrial standards.

The company’s portfolio includes Underdrive/Platform and Tugger AMRs, along with Forklift and Stacker models. Payloads, navigation methods, and attachments are configurable to the application. Deployments typically follow a phased pathway—assessment, pilot, and scale-up—supported by operator training and safety validation at each step.

Bluepath Robotics’ fleet software interfaces with common systems such as WMS (Warehouse Management System), MES (Manufacturing Execution System), and ERP (Enterprise Resource Planning), and is developed for industrial safety standards and VDA-5050-style interoperability.

Chosen by global manufacturers and now available in Canada

Bluepath Robotics’ entry to the Canadian market is underpinned by references with leading manufacturers. These projects demonstrate field-tested reliability, safety, and measurable ROI (Return on Investment) in complex production environments—credentials that are increasingly sought by the Canadian operators advancing their automation roadmaps.

Canadian manufacturers are accelerating automation to protect workers, stabilize operations, and offset labour constraints. Bluepath Robotics’ AMRs are designed to reduce manual strain, streamline repetitive transport tasks, and help teams focus on higher-value work. The company’s approach emphasizes pragmatic integration and stepwise scale-up, enabling customers to realize benefits early while building toward larger fleets.

Following ADM Toronto, Bluepath Robotics is engaging with plant leaders, industrial engineering teams, and systems integrators across Canada to identify pilot opportunities in manufacturing, logistics, e-commerce fulfillment, heavy industry, and discrete production. The Detroit office will coordinate assessments, pilots, and post-deployment support for Canadian sites, with remote monitoring and updates delivered through the fleet management platform of Bluepath Robotics.

Leave a comment »

Saviynt Announces Integration with the CrowdStrike Falcon Platform

Posted in Commentary with tags on October 22, 2025 by itnerd

Saviynt today announced a new integration with the CrowdStrike Falcon® platform, now available on the CrowdStrike Marketplace. The bidirectional integration enables Saviynt to leverage CrowdStrike’s industry-leading endpoint, identity, and cloud telemetry to drive dynamic, risk-based access governance decisions, while CrowdStrike Falcon® Next-Gen SIEM ingests Saviynt identity data to deliver unified visibility, faster investigations, and improved response across hybrid environments.

As organizations face growing complexity in managing human, non-human, and AI identities across hybrid and multicloud environments, attackers increasingly exploit compromised accounts and devices to reach critical systems and data. Falcon Next-Gen SIEM, the engine of the agentic SOC, combines native Falcon platform telemetry and third-party data with industry-leading threat intelligence and AI-driven automation to deliver unified visibility and rapid response across domains. By integrating CrowdStrike’s real-time telemetry with Saviynt’s governance capabilities, customers can respond faster to threats.

The Saviynt–CrowdStrike integration delivers identity-driven outcomes that enhance visibility and streamline response:

  • Automated Remediation to Minimize Exposure and Accelerate Response – Suspends compromised accounts, revokes risky entitlements, and automates policy-driven workflows to accelerate containment and recovery without manual intervention.

Leave a comment »

Dynamic changes in data analytics reflected in CompTIA Data+ certification update

Posted in Commentary with tags on October 22, 2025 by itnerd

Rapid changes in data analytics practices and technologies are reflected in the updated CompTIA Data+ certification released by CompTIA, the leading global provider of vendor-neutral information technology (IT) training and certifications.

The new CompTIA Data+ exam (V2), available worldwide, covers the technologies and processes that are increasingly used by workers in the data realm, including generative artificial intelligence (AI), regular expression testers (RegEx), integrated development environments (IDEs) and more.

Over the next 10 years job growth for data scientist and data analyst occupations is expected to grow at a rate that is 414% higher than the overall U.S. rate, according to CompTIA’s analysis of projections from the U.S. Bureau of Labor and Statistics and Lightcast

Today’s data analysts must be familiar with cloud providers and how infrastructure impacts the way they access data. Modern data science relies on IDEs to write, test and debug code for analysis and other tasks. Also, the rise of generative AI makes it essential for data analysts to understand how they can utilize language models to improve the manipulation and analysis of data.

CompTIA Data+ validates a range of knowledge and skills; for example, the ability to mine, analyze and interpret data while adhering to governance and quality standards, and to communicate data-driven insights in ways that inform rather than confuse, leading to more informed data-driven business decisions.

The certification is vendor neutral, setting it apart from other data analytics credentials. Rather than zeroing in on a specific technology, CompTIA Data+ focuses on the core concepts applicable to analysts no matter which systems their organization uses. The exam assesses knowledge and hands-on skills in five areas: data concepts and environments, data acquisition and preparation, data analysis, virtualization and reporting and data governance.

CompTIA Data+ is compliant with ISO 17024 standards. ISO accreditation by the ANSI National Accreditation Board is important because it provides confidence and trust in the outputs of an accredited program. CompTIA Data+ also meets the requirements of the NICE Workforce Framework for Cybersecurity.

New CertMaster learning options for the updated CompTIA Data+ exam are available. CompTIA uses a research-based framework in its learning solutions. This approach delivers instruction in a more effective way, helping learners retain what they’ve learned and apply it to job scenarios and job task requirements. CertMaster’s flexible, self-paced training solutions are designed to fit anyone’s learning style and timeline.

Leave a comment »

UnifyApps raises $50M to become the Enterprise Operating System for AI to help CIOs succeed with GenAI

Posted in Commentary with tags on October 22, 2025 by itnerd

Enterprises have spent decades becoming digital. Now, they must become AI-native. UnifyApps, the company building the Enterprise Operating System for AI, today announced a $50 million Series B led by WestBridge Capital with participation from ICONIQ and others. The new capital brings UnifyApps’ total funding to $81 million and marks a new phase of scale with Ragy Thomas, joining as Chairman and Co-CEO, alongside existing co-founder and CEO Pavitar Singh.

Enterprises have poured millions into GenAI pilots, yet most can’t scale them. Today’s LLMs can’t connect to the siloed systems of record and knowledge to find the right data or to systems of activity to make work happen. Vertical and use-case-specific AI applications remain isolated, each requiring its own integrations across the enterprise—creating costly AI sprawl and stalled outcomes. This challenge results in a 95% failure rate for enterprise AI solutions. UnifyApps closes this gap with an LLM-agnostic, AI-native architecture that unifies systems of knowledge, record, and activity through a low-code/no-code workflow and UI builder—turning fragmented experiments into scalable, production-grade AI.

UnifyApps connects systems of record, knowledge, and activity across the enterprise. It unifies data from platforms like Salesforce, Workday, and corporate intranets, applies the right AI models and ontologies, and acts within the tools employees already use. This closed-loop approach links data, intelligence, and execution—turning fragmented GenAI pilots into scalable business outcomes.

Designed with its Six-Layer Enterprise AI Architecture, UnifyApps brings together system integration, data and ontology management, workflow automation, application experience, and autonomous agent deployment. Companies including HDFC Bank, Deutsche Telekom, Contentstack, Belcorp, Sirion Labs, WalkMe, Air Arabia, Liva Insurance, as well as the Abu Dhabi Government and Dubai Government are using UnifyApps to unify data and accelerate AI adoption. The platform gives CIOs a secure, efficient, and scalable way to embed AI across business processes and lead their organizations into the AI-native era.

New Co-CEO Ragy Thomas brings more than 25 years of enterprise software leadership across industries with deep expertise in CIO relationships, compliance, security, and SaaS operations.

With this new funding, the company will expand the team and European presence, accelerate platform development, and deepen integrations across enterprise technologies while building a catalog of pre-built applications. UnifyApps’ vision extends beyond technology—it’s about enabling enterprises to become living, learning systems. Just as the digital era reshaped every process, the AI-native era will redefine how organizations think, act, and evolve.

UnifyApps’ momentum underscores that shift. The company has grown revenue more than 600% year over year and serves global enterprises across retail, banking, travel, telecom, healthcare, public sector, and technology industries. Customers are using its platform to automate HR operations, streamline claims processing, optimize supply chains, and reimagine customer engagement—achieving measurable efficiency gains within months of deployment. 

Being AI-native isn’t a feature, it’s fundamental to surviving in the AI-era. UnifyApps believes enterprises that evolve with AI will not just automate tasks but also reinvent how they create value, govern systems, and engage the world around them. 

Leave a comment »

Small Business AI Adoption Is Rising, But ROI and Skills Gaps Threaten Progress: Sage

Posted in Commentary with tags on October 22, 2025 by itnerd

Sage today released new research revealing that small businesses could hold the key to closing Canada’s long-standing productivity gap—if supported by SME-first AI and digital policies.

The report, Canada’s Digital & AI Imperative: Closing the Productivity Gap and Driving SME Growth, shows that while digital adoption is now essential to business survival and growth, uneven access to technology and skills risks creating a two-speed economy that leaves smaller firms behind.

Research Overview

Conducted in collaboration with Strand Partners, the research surveyed over 2,000 SME leaders across Canada. It found that:

  • Skills shortages are a growing concern: 41% of medium-sized firms cite a lack of internal expertise as a barrier to scaling digital adoption.
  • Cost remains the top hurdle for small firms: 58% say affordability is the biggest barrier to digital transformation.
  • Digitalization is mission-critical: 80% of SMEs say it’s essential for growth, and 82% say it’s vital for survival.
  • AI adoption is accelerating: 51% of SMEs already use AI, with another 18% planning to adopt it within three years.
  • Medium-sized firms are leading the charge: They’re investing nearly twice as much in AI as small firms and reporting significantly higher productivity gains.
  • Digital investment pays off: SMEs adopting digital tools see an average 29% productivity boost in the first year, with every dollar invested returning up to $2.40 among digital leaders.

However, regional and sectoral divides persist:

  •  AI adoption rates range from 56% in Québec to just 28% in Northern Canada.
  • Sectors like finance and tech lead the way, while agriculture and construction lag.
  • Cost, skills shortages, and unclear ROI remain major barriers.

SME-First AI Policy Recommendations

Sage is urging policymakers to place SME adoption at the heart of Canada’s AI strategy, backed by targeted skills investment and sustained support frameworks. To secure long-term prosperity and global competitiveness, Canada must close its productivity gap through inclusive AI adoption. This means empowering SMEs across all sectors and regions to lead confidently in the digital economy, while ensuring alignment with evolving global standards.

To address the most pressing barriers, Sage recommends the following policy actions:

  • Embed SME adoption at the core of national AI strategy
  • Equip SMEs with practical AI skills and confidence
  • Unlock AI investment through targeted tax breaks and grants
  • Deliver trusted, context-specific guidance for SMEs
  • Foster a whole-of-ecosystem approach, uniting federal and provincial governments, industry, academia, and community partners
  • Accelerate e-invoicing and structured data adoption

Closing Canada’s productivity gap demands inclusive action. Sage urges policymakers to adopt SME-first AI policies grounded in the lived experience of small business leaders. By investing in access, skills, and infrastructure—and aligning globally—Canada can unlock the full potential of its entrepreneurial economy. These priorities reflect the realities of Canadian entrepreneurs and chart a path to inclusive, innovation-led growth. As we mark Small Business Month, Sage calls on all stakeholders to champion a digital economy where small businesses lead.

You can download the report here.

Leave a comment »

Threat Actors Target Global Retailers with Cloud-Based Gift Card Campaign 

Posted in Commentary with tags on October 22, 2025 by itnerd

Palo Alto Networks Unit 42 has posted new research called “Jingle Thief“—a campaign in which Morocco-based threat actors are exploiting Microsoft 365 environments to conduct large-scale gift card fraud against global retail enterprises. With the holiday shopping season approaching, these operations are expected to intensify in scale and frequency.

The research details a multi-stage campaign where attackers use phishing and smishing to infiltrate retail organizations, identify and compromise those with gift card administration privileges, and ultimately issue themselves massive quantities of gift cards. These actors employ sophisticated evasion techniques—including configuring inbox rules for silent exfiltration and deletion of sent messages—that have not been publicly detailed until now.

Key insights from the research include:

  • A shift from endpoint-based intrusions to cloud-native, identity-driven attacks that leverage Microsoft 365 services.
  • How these attackers exploit trusted environments such as SharePoint, OneDrive, and Entra ID to execute large-scale gift card fraud, and evade detection for months.
  • Broader context on how financially motivated groups are adopting APT-level tactics, mirroring the persistence and stealth of nation-state actors.

You can read the research here.

Leave a comment »

Now Available: The Proactive Defenders Guide to Infostealers From Flashpoint

Posted in Commentary with tags on October 22, 2025 by itnerd

We’ve all heard about a new wave of breaches that was sparked by a single stolen employee credential which marked the dawn of a new era in cyber risk: the rise of information-stealing malware (“infostealers”). This year alone, Flashpoint has identified over 1.8 billion stolen credentials circulating across illicit marketplaces, fueling identity-based attacks at an incredible and still growing scale.

To help organizations fight back, Flashpoint is releasing The Proactive Defender’s Guide to Infostealers—a practical resource for IT, Threat Intelligence, and Fraud teams. The 22-page guide provides:

  • A breakdown of the most prolific infostealers and their role in modern attack chains – Learn which strains are the most popular, how they incorporate tactics such as vulnerability exploits and ransomware, and how you can better defend against them. 
  • Strategies for managing the identity attack surface – Understand how threat actors weaponize stolen identities, and how your team can monitor, prioritize, and respond before damage is done. 
  • Guidance on operationalizing infostealer intelligence for proactive defense – Leverage Flashpoint’s comprehensive infostealer intelligence to reverse-engineer data dumps, understand infection trends, and address potential security gaps before threat actors exploit them.

 The report can be here, and a blog post about the report is here.

Leave a comment »

TP-Link Achieves Breakthrough With First WiFi 8 Connection

Posted in Commentary with tags on October 21, 2025 by itnerd

Geez. I haven’t even rolled out WiFi 7 yet.

 TP-Link today announced it has successfully demonstrated Wi-Fi 8 connectivity, transmitting data with a prototype device developed through a joint industry partnership. This achievement represents a major step toward defining the next generation of wireless technology.

The test successfully validated both the Wi-Fi 8 beacon and data throughput, confirming the viability of the technology and marking a critical milestone in Wi-Fi 8 development. This technology is poised to deliver the ultra-reliable wireless performance that the industry will require as more devices and bandwidth-intensive applications come online.

Through ongoing collaboration with ecosystem partners, TP-Link is dedicated to advancing the technologies that will shape the next era of connectivity, offering users unprecedented speed, stability and reliability.

TP-Link has this page on WiFi 8: https://www.tp-link.com/ca/wifi8/.

Leave a comment »

Rogers Gets Hit With Class Action Lawsuit Over 2021 Outage

Posted in Commentary with tags on October 21, 2025 by itnerd

Back in April 2021, Rogers had a massive outage. Not as big as the outage that they had a year later. But it was really big. Cell phones stopped working and Interac was down.

Fast forward to today and a class action lawsuit has been approved in a Quebec court that is related to this outage:

The Plaintiffs were ascribed the status of representative to act on behalf of all Class Members in Canada.  They allege in their action that the Class Members suffered damages as of result of the service interruption to the Rogers, Fido and Chatr networks which began on April 19, 2021.

Now Rogers threw Ericsson under the bus for this outage. But clearly this court didn’t buy that and here we are talking about it. Thus it will be interesting to see how Rogers responds to it. Will they defend themselves? Will they simply settle out of court to make this go away? This should be fun to see what route they go with this.

Leave a comment »

« Older Entries
Newer Entries »