The Largest Patch Tuesday Ever: 622 CVEs, a 1,380% Phishing Surge, and the Two-Front War on Initial Access
Show notes
Defenders aren't losing ground on one front, they're losing it on two at once. The largest Patch Tuesday in history just dropped alongside a 1,380% surge in phishing, and threat actors aren't waiting for you to catch up.
Join hosts Alexandra Moore and John Dilgen as they break down:
- How new extortion group Helix and ClickFix are weaponizing identity compromise at scale
- Why 622 vulnerabilities in a single week signals a permanent shift in the discovery rate
- Practical defenses for both fronts without doubling your team
Two questions your organization should be asking right now:
- Have you audited which accounts in your environment are permitted to authenticate via device code grants and restricted the ones that don't need it?
- Does your IR runbook hunt for additional compromised accounts, or does it stop at the one sending extortion demands?
Resources: https://linktr.ee/ReliaQuestShadowTalk
John Dilgen: Cyber Threat Intelligence Analyst at ReliaQuest, where he specializes in researching cyber threats impacting ReliaQuest customers. With a strong technical background, he previously served as an Incident Response Analyst and Trainer at ReliaQuest.
Alexandra Moore: Manager of Threat Intelligence at ReliaQuest, where she leads intelligence analysis and customer dissemination to help organizations understand and respond to emerging cyber threats. Prior to this, she established and scaled monitoring across Russian-language cybercriminal platforms at Digital Shadows, building collection and analytical coverage to support digital risk protection capabilities.