Weekly Security Sprint EP 137. Holiday backups and scams, plus identifying concerning behaviors
Description
In this week's Security Sprint, Dave and Andy covered the following topics:
Warm Open:
• WaterISAC – EPA: National Security Information Sharing Bulletin – Q4 2025 & Access the PDF
• Canadian Centre for Cyber Security: The cyber threat to Canada’s water systems: Assessment and mitigation
• Canadian Centre for Cyber Security: Don't take the bait: Recognize and avoid phishing attacks - ITSAP.00.101
• How cannabis businesses can go digital while thwarting hackers
Main Topics:
• Semperis Warns That Holiday & Weekend Gaps Leave Critical Infrastructure Open to Ransomware Attacks
• FBI San Diego Warns Shoppers to Be Aware of Scams During the 2025 Holiday Season
• FBI PSA: Account Takeover Fraud via Impersonation of Financial Institution Support
• Take9: Cyber threats are everywhere. And getting sneakier. What can you do to protect yourself, your community and our nation? Take a 9-second pause and think before you click, download, share. A short pause goes a long way.
• JCAT First Responder's Toolbox: Tech Sector Outreach: Identifying Violent Extremist Indicators and Reporting Mechanisms for Online Service Providers
Quick Hits:
• OnSolve CodeRED cyberattack disrupts emergency alert systems nationwide
• CISA: Mobile Communications Best Practice Guidance
• CISA: Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications





