Freewater Technologies

Thank you for your service to all the Veterans out there!! We appreciate all you have done and continue to do.

FBI Warns of Salesforce attacks by UNC6040 and UNC6395 The U.S. FBI issued a flash alert to warn of malicious activities carried out by two cybercriminal groups tracked as UNC6040 and UNC6395.

AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns AI-powered Villager tool reached 11,000 PyPI downloads since July 2025, enabling scalable cyberattacks and complicating forensics.

AI-Forged Military IDs Used in North Korean Phishing Attack Genians observed the Kimsuky group impersonate a defense institution in a spear-phishing attack, leveraging ChatGPT to create fake military ID cards

Google confirms fraudulent account created in law enforcement portal Google has confirmed that hackers created a fraudulent account in its Law Enforcement Request System (LERS) platform that law enforcement uses to submit official data requests to the company

Listed below are just some of our scheduled courses for September, October, November and December 2025. If you know anyone that is interested, just give the office a call at (757) 499-6150. Please keep in mind these classes fill up quickly. You can also continue to look at our updated 2025 course calendar on our web page (https://freewatertech.com/). Due to high demand some classes are occasionally added within a week or two of class and will appear on our website.

September 2-5: ECIH
September 8-12: Cloud+
September 15-26: Linux (10-day course)
September 15-19: Security+
September 29-October 3: SecurityX (formerly CASP)
October 6-10: Security+
October 14-17: ITIL Foundations
October 20-24: CEH
October 20-24: CPENT
October 27-31: NFA (group registration)
October 27-31: Security+
November 3-7: CCNA
November 3-7: CYSA+
November 11-14: Closed course
November 17-21: Security+
December 1-5: Cloud+
December 8-12: Security+
December 15-19: Security+

Send a message to learn more

'Screenshot-grabbing' Chrome VPN extension still available : Researcher claims extension didn't start out by exfiltrating info... while dev says its actions are 'compliant'

CrowdStrike warns of uptick in Silk Typhoon attacks this summer The China-affiliated espionage group, which CrowdStrike tracks as Murky Panda, has been linked to more than a dozen incident response cases since late spring.

After SharePoint attacks, Microsoft stops sharing PoC exploit code with China Microsoft halts PoC exploit sharing with Chinese firms after SharePoint zero-day leaks, giving only written bug details to curb future abuse.

Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Attacks A critical vulnerability in Open VSX Registry could allow attackers to control VS Code extensions, threatening millions of developers.

Microsoft 365 'Direct Send' abused to send phishing as internal users An ongoing phishing campaign abuses a little‑known feature in Microsoft 365 called "Direct Send" to evade detection by email security and steal credentials.

Decrement by one to rule them all: AsIO3.sys driver exploitation Cisco Talos uncovered and analyzed two critical vulnerabilities in ASUS' AsIO3.sys driver, highlighting serious security risks and the importance of robust driver design.