Cybersecurity and Risk Insights and Alerts
Cyber risks and threats continue to evolve, and firms are under pressure to meet SEC and FCA expectations for operational resilience as well as their own internal and client expectations for cybersecurity and privacy. Stay current on the latest cybersecurity, privacy, and risk threat and regulatory alerts, and build your cybersecurity and privacy knowledge with insights from our cybersecurity and technology risk experts.
ACA Aponix Cybersecurity Checklist
Cyber alerts and insights

CISA Issues Emergency Directive and Cybersecurity Advisory for VMware Vulnerabilities
The Cybersecurity & Infrastructure Security Agency (CISA) issued Cybersecurity Advisory (CSA) AA22-138B and Emergency Directive (ED) 22-03 alerting users to active vulnerabilities susceptible to exploitation in several VMware products.
- Cybersecurity
- Cybersecurity Resources

Global Cybersecurity Authorities Warn of Cyber Threats Against Managed Service Providers
The joint Cybersecurity Advisory (CSA) advises that MSPs, are prime targets for cyber-attacks, a trend likely to continue for the foreseeable future, as threat actors aim to exploit the innate trust in MSP-customer relationships.
- Cybersecurity
- Cybersecurity Resources

SEC Increases The Size Of Their Crypto Assets and Cyber Unit
With new challenges and risks crypto poses to investors, the U.S. Securities and Exchange Commission endeavors to dedicate more resources to protect market participants from securities law violations related to crypto.
- Cybersecurity
- Cybersecurity Resources
- Compliance

Cybersecurity And The Workplace: Part 3
In part 3 of our series, we discuss how to confront cybersecurity workforce shortages through flexible hiring and retention strategies
- Cybersecurity
- Cybersecurity Resources

UPDATE: Okta Concludes Investigation, Determines Only Two Tenants Affected
An update from a previous cyber alert. Okta has revealed the impacted customers trace back to a January security incident.
- Cybersecurity
- Cybersecurity Resources

Microsoft Identifies Critical Remote Code Vulnerability
On April 12, 2022, Microsoft notified users of a remote code execution vulnerability (CVE-2022-26809). Immediate patching is needed.
- Cybersecurity
- Cybersecurity Resources