Author | Lightnews

Josh Moulin @joshmoulin.bsky.social · 22h

When security roles, policies, and priorities aren’t aligned, risk grows silently. I help teams build programs that scale and work. #CyberStrategy #ProgramDesign #CyberAwareness #Leadership www.natsar.com

Cybersecurity Consulting & Strategic Advisory Services | Natsar

With decades of experience, Natsar provides tailored cybersecurity consulting and strategic leadership advisory services to help you safeguard your organization and achieve your business objectives.

www.natsar.com

1

Josh Moulin @joshmoulin.bsky.social · 1d

Ransomware disrupted Japan’s Asahi brewery—no orders, no deliveries. Manufacturers must prioritize resilience before it’s tapped out. #CyberResilience #Ransomware #ManufacturingSecurity #CyberRisk www.darkreading.com/ics-ot-secur...

Cyberattack Leads to Beer Shortage as Asahi Recovers

A ransomware left the Asahi brewery in Japan struggling to take orders and deliver its products domestically, as manufacturers become a favored target.

www.darkreading.com

1

Josh Moulin @joshmoulin.bsky.social · 2d

When cyber issues go legal, I help attorneys, execs, and investigators understand the facts—and tell the story with technical clarity. #LitigationSupport #ExpertWitness #DigitalForensics #CyberLaw www.natsar.com/consulting

Natsar Services | Natsar

Natsar offers cybersecurity services for individuals and organizations, including risk management, incident response, digital forensics, vCISO support, and coaching—tailored to help you build…

www.natsar.com

1

Josh Moulin @joshmoulin.bsky.social · 3d

SonicWall now says all cloud backup users were affected in its September breach—regardless of when backups were created. #CyberBreach #Cloudsecurity #BackupSecurity #SonicWall www.theregister.com/2025/10/09/s...

SonicWall breach hit every cloud backup customer, not 5%

Affects users regardless of when their backups were created

www.theregister.com

1

Josh Moulin @joshmoulin.bsky.social · 4d

From AI-driven attacks to deepfakes, cybersecurity is changing fast. I joined WGU’s panel to talk strategy, skills, and next steps. #Cybersecurity #AI #CareerPath #WGU Watch here: www.youtube.com/watch?v=S9AO...

Navigating Cybersecurity Careers in the AI Era — Your Path to Success

A global shortage of nearly 5 million cybersecurity professionals leaves teams vulnerable as cyber threats evolve fast: from AI-driven viruses to robust hacking systems and ransomware. Attackers now…

www.youtube.com

1

Josh Moulin @joshmoulin.bsky.social · 7d

Security that confuses leadership rarely leads to action. I brief boards in plain language—focused on what matters. #BoardCybersecurity #ExecutiveBriefing #CyberAwareness #Leadership www.natsar.com/executive-an...

Executive and Board Briefings | Natsar

Equip your leadership team with expert cybersecurity briefings from Natsar. Empower informed decision-making and strengthen governance.

www.natsar.com

Josh Moulin @joshmoulin.bsky.social · 8d

I help water utilities meet NY’s cybersecurity rules without blowing the budget. From vCISO to training, we make compliance practical. #CyberRegulations #NYSUtilities #DOH #DEC www.natsar.com/blog/how-nat...

Josh Moulin @joshmoulin.bsky.social · 8d

Storm-2657 is stealing paychecks by hijacking HR accounts—another reason access controls and audit logs in platforms like Workday matter. #Cybersecurity #Storm2657 #HRSoftware #Workday #SaaSSecurity thehackernews.com/2025/10/micr...

Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries

Storm-2657 exploits phishing and weak MFA to hijack HR SaaS accounts and redirect payroll funds.

thehackernews.com

Josh Moulin @joshmoulin.bsky.social · 9d

If you operate a water or wastewater system in NY, the next 2 years are critical. I broke down what you need to do (and when) in this roadmap to compliance. #Cybersecurity #NYWater #Utilities #RiskManagement #Compliance www.natsar.com/blog/getting...

Getting Ready for New York’s Water Cybersecurity Rules

Turn New York’s new water cybersecurity rules into an action plan. Natsar helps utilities assess, train, and comply efficiently and affordably.

www.natsar.com

1

Josh Moulin @joshmoulin.bsky.social · 9d

I built this IR bundle to save you time. It’s the same proven framework I’ve used with clients to meet NIST and CIS standards. #IncidentResponse #NIST #CyberPreparedness #SecurityDocs www.natsar.com/incident-res...

Cybersecurity Incident Response Toolkit

NIST 800-61-aligned incident response templates, policies, and checklists. Editable, professional, and ready to deploy. Instant download with lifetime updates.

www.natsar.com

Josh Moulin @joshmoulin.bsky.social · 10d

Confused by New York’s DOH vs. DEC cybersecurity rules? You’re not alone. I break down what each requires and when it kicks in—so you can focus on what matters. #CyberCompliance #WaterUtilities #NYWater #Cybersecurity www.natsar.com/blog/compari...

1

Josh Moulin @joshmoulin.bsky.social · 10d

Storm-2603 is misusing DFIR tools to stay inside networks. It’s a sharp reminder: even your defenses can be turned against you. #DFIR #CyberThreats #Storm2603 #CyberDefense www.darkreading.com/cybersecurit...

China Hackers Use Velociraptor IR Tool for Ransomware

A new adversary tactic, Storm-2603 threat group is abusing the digital forensics & incident response (DFIR) tool for persistent access to victim networks.

www.darkreading.com

Josh Moulin @joshmoulin.bsky.social · 11d

New rules are reshaping cybersecurity for NY water utilities. I help local providers cut through the noise and meet DOH & DEC requirements with clarity. #CyberCompliance #WaterSecurity #NYSRegulations www.natsar.com/blog/underst...

Understanding New York’s Proposed Cybersecurity Rules for Water and Wastewater Utilities

New York is mandating cybersecurity for water and wastewater systems. Learn what’s changing and how Natsar, a trusted NY firm, can help.

www.natsar.com

1

Josh Moulin @joshmoulin.bsky.social · 14d

Every plan sounds good until the real-world test. I lead tabletop exercises that reveal the gaps before the attackers do. #IncidentResponse #CyberAwareness #Leadership #TabletopExercises www.natsar.com/consulting

Natsar Services | Natsar

Natsar offers cybersecurity services for individuals and organizations, including risk management, incident response, digital forensics, vCISO support, and coaching—tailored to help you build…

www.natsar.com

Josh Moulin @joshmoulin.bsky.social · 15d

New Yorkers: beware of texts claiming to be from the Tax Department offering “inflation refunds.” It’s a smishing scam targeting your personal info. #Phishing #Smishing #CyberAwareness #NYSecurity www.bleepingcomputer.com/news/securit...

Fake 'Inflation Refund' texts target New Yorkers in new scam

An ongoing smishing campaign is targeting New Yorkers with text messages posing as the Department of Taxation and Finance, claiming to offer "Inflation Refunds" in an attempt to steal victims'…

www.bleepingcomputer.com

Josh Moulin @joshmoulin.bsky.social · 16d

AI is reshaping cyber threats and career paths. I’ll share insights from the field on WGU’s virtual panel today! #WGU #CyberAwareness #CareersInTech #CyberPanel www.wgu.edu/lp/webinar/n...

Navigating Cybersecurity Careers in the AI Era

Join us for a special WGU partner hosted webinar exploring how AI powered threats are reshaping cybersecurity.

www.wgu.edu

Josh Moulin @joshmoulin.bsky.social · 16d

I help teams write cybersecurity policies that actually work—clear, relevant, and aligned with both compliance and mission. #CyberPolicies #Compliance #RiskManagement #InfoSecLeadership www.natsar.com/consulting

Natsar Services | Natsar

Natsar offers cybersecurity services for individuals and organizations, including risk management, incident response, digital forensics, vCISO support, and coaching—tailored to help you build…

www.natsar.com

Josh Moulin @joshmoulin.bsky.social · 17d

Want to break into cybersecurity—or level up your path? I’m joining a #WGU panel to help you map your next step. Oct 15, free & virtual. #CyberSecurity #WGUAlumni #CyberCareers #AI www.wgu.edu/lp/webinar/n...

Navigating Cybersecurity Careers in the AI Era

Join us for a special WGU partner hosted webinar exploring how AI powered threats are reshaping cybersecurity.

www.wgu.edu

Josh Moulin @joshmoulin.bsky.social · 17d

Oracle just flagged a new EBS vulnerability that could expose sensitive data. If you rely on E-Business Suite, don’t ignore this one. #CyberRisk #Oracle #InfoSecLeadership #EBSecurity thehackernews.com/2025/10/new-...

New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login

Oracle warns of CVE-2025-61884 flaw in E-Business Suite enabling unauthorized data access.

thehackernews.com

Josh Moulin @joshmoulin.bsky.social · 18d

Excited to join WGU’s cybersecurity panel on Oct 15 to talk careers, AI, and the real-world challenges defenders face. Join us. #CyberCareers #AIinSecurity #WGU #CyberWorkforce www.wgu.edu/lp/webinar/n...

Navigating Cybersecurity Careers in the AI Era

Join us for a special WGU partner hosted webinar exploring how AI powered threats are reshaping cybersecurity.

www.wgu.edu

Josh Moulin @joshmoulin.bsky.social · Sep 29

I help IT providers and defense contractors assess and prepare for CMMC—before the contracts are out of reach. Let’s get you ready. #CMMC #CyberLeadership #ComplianceSupport #DefenseIndustry www.natsar.com/cmmc

Josh Moulin @joshmoulin.bsky.social · Sep 25

I help research institutions, universities, and firms with DoD ties get ready for CMMC before the pressure hits. Let’s prepare well. #CMMC #Research #DoDProjects #CyberCompliance www.natsar.com/cmmc

Josh Moulin @joshmoulin.bsky.social · Sep 24

Hello Gym exposed 1.6M+ member voice recordings via an unsecured database. Another reminder: sensitive data isn’t always visual. #DataPrivacy #Cybersecurity #VoiceDataBreach hackread.com/hello-gym-da...

Hello Gym Data Leak Exposes 1.6 Million Audio Files of Gym Members

An unsecured database managed by Hello Gym has exposed over 1.6 million audio recordings of gym members.

hackread.com

Josh Moulin @joshmoulin.bsky.social · Sep 23

If you support DoD contracts through cloud or IT, CMMC is on your path. I’ll help you assess, prep, and comply with confidence. #CMMC #CloudSecurity #ITServices #DefenseSupport www.natsar.com/cmmc

Josh Moulin @joshmoulin.bsky.social · Sep 22

LNER’s breach shows why I dig deep into vendor risks. If your partners get hit, your data may too. #InfoSec #DataBreach #ThirdPartyRisk #SupplyChainSecurity #CyberRisk www.securityweek.com/uk-train-ope...

UK Train Operator LNER Warns Customers of Data Breach

LNER said the security incident involved a third-party supplier and resulted in contact information and other data being compromised.

www.securityweek.com