u/FutureSafeMSSP

**OPEN POST TO SEE IMAGE** I'm sharing early-stage intel on the ForGaite exploit for sale in a Russian Telegram group for $2500. This individual has sold these bypasses before; they get patched, he sells another, and around we go. This one is early stage BUT Flare is usually RIGHT on the money. We provide this protection to our MSP clients, but if you're particularly interested in how this flushes out or for more detail, I'll post an update, but I don't want to bother folks so enough thumbs up and I'll keep the group updated.

https://preview.redd.it/wewji9kbeg1h1.png?width=1276&format=png&auto=webp&s=e3d58598d98b593b4b11e9ca7ae471c459d540ca

Anyway, here's the detail.

Have any of you used patchmypc at any scale?
The pricing is very hard to beat, but I'm hesitant to use something I haven't heard of compared to tools like Automox and ManageEngine.
If you have used it at scale, I would very much like to hear your experience.

Use case: managed patch SKU for clients as a standalone product, not part of a larger stack.
Business: MSSP for MSPs working behind the scenes. We are usually full stack but want a standlone patch offering.

Have any of you used patchmypc at any scale?
The pricing is very hard to beat, but I'm hesitant to use something I haven't heard of compared to tools like Automox and ManageEngine.
If you have used it at scale, I would very much like to hear your experience.

Use case: managed patch SKU for clients as a standalone product, not part of a larger stack.

SOmetime between the 30th of April and the 3rd of May (depends when the update was installed) a Defender / Defender for Endpoint signature update caused two legitimate DigiCert root certificates to be flagged as a Trojan:win32/Cerdigent.A!dha

All the info one may need can be found below. Perhaps the link to the detailed original post will save some folks some time.
https://www.reddit.com/r/cybersecurity/comments/1t2hfsh/mde_flagging_digi_cert_certificate_as_malicious/

Hi all,
Looking for a solid multi-tenant 3rd party CSPM platform. We don't want to use Microsoft as our SOC will use it as much as the MSP, and we don't want to access their Microsoft tenant.

Any recommendations? Does anyone have practical experience with one?