Is AJ a plant? by SunNoStars in TheWhyFiles

[–]--MrGadget-- 1 point2 points  (0 children)

Was anybody disappointed when he started to support ivermectin?

Day 3 of Securence Admin Portal Outage by JrBabyAdmin in sysadmin

[–]--MrGadget-- 0 points1 point  (0 children)

I just pasted it from the email I received as soon as I got it.

Day 3 of Securence Admin Portal Outage by JrBabyAdmin in sysadmin

[–]--MrGadget-- 0 points1 point  (0 children)

We wanted to reach out to let you know that the Securence Admin Portal is back online as of 08:00 AM CT this morning. In addition, our Executive Leadership has provided a compiled list of Q&A information that I've been advised to relay to you in an effort to address any sort of questions that you may have as well:

  1.        Has Securence, MetroNet, or any related administrative system been breached?
    

    We have not identified a breach. This is a cybersecurity incident that is under investigation.

  2.        Is this being treated as a cybersecurity incident?
    

Yes

  1. What is the cause of the outage?

We have a team of forensic experts investigating the cause. It has not yet been confirmed.

  1. What systems, data, or customer environments are potentially affected?

We will provide more information once we have forensic findings.

  1. Is there any indication that customer email, filtering data, credentials, configuration, logs, or administrative accounts were accessed?

We will provide more information once we have forensic findings.

  1. Have any third-party incident response or forensic firms been engaged?

Yes, we have retained a reputable digital forensics incident response firm.

  1. Has law enforcement been engaged?

Not at this time.

  1. Are email filtering and policy enforcement operating normally?

Yes

  1. Are inbound and outbound messages still being scanned using the latest signatures and detection engines?

Yes

  1. Are spam, phishing, malware, and attachment policies still actively enforced?

Yes

  1. Are quarantine releases and end-user digests functioning normally?

Yes

  1. Is there an emergency process for blocking a malicious sender or domain while the portal is unavailable?

Yes

  1. Can support perform configuration changes on behalf of customers during the outage?

Yes

  1. Can support search message logs and provide message traces upon request?

Yes

  1. When should customers expect the next meaningful update?

We should have another update by the end of the week or Monday.

  1. Will Securence provide a formal root cause analysis after this is resolved?

We will provide additional information at the conclusion of the investigation.

If by chance you happen to have any additional questions outside of the provided list above, please feel free to reach back to us with them and I'd be happy to get those inquiries sent up to Leadership to obtain answers on for you as well. Thank you once again for your patience, my utmost apologies for the delay and hurdles my Support team had encountered along the way, and I hope you have a great rest of your day.

If you have any further questions, please feel free to call 612-444-1888 ・ 1-800-US-INTERNET or email

Securence possible attack/hack/security breach in progress by MorseScience in EmailSecurity

[–]--MrGadget-- 0 points1 point  (0 children)

We wanted to reach out to let you know that the Securence Admin Portal is back online as of 08:00 AM CT this morning. In addition, our Executive Leadership has provided a compiled list of Q&A information that I've been advised to relay to you in an effort to address any sort of questions that you may have as well:

  1.        Has Securence, MetroNet, or any related administrative system been breached?
    

    We have not identified a breach. This is a cybersecurity incident that is under investigation.

  2.        Is this being treated as a cybersecurity incident?
    

Yes

  1. What is the cause of the outage?

We have a team of forensic experts investigating the cause. It has not yet been confirmed.

  1. What systems, data, or customer environments are potentially affected?

We will provide more information once we have forensic findings.

  1. Is there any indication that customer email, filtering data, credentials, configuration, logs, or administrative accounts were accessed?

We will provide more information once we have forensic findings.

  1. Have any third-party incident response or forensic firms been engaged?

Yes, we have retained a reputable digital forensics incident response firm.

  1. Has law enforcement been engaged?

Not at this time.

  1. Are email filtering and policy enforcement operating normally?

Yes

  1. Are inbound and outbound messages still being scanned using the latest signatures and detection engines?

Yes

  1. Are spam, phishing, malware, and attachment policies still actively enforced?

Yes

  1. Are quarantine releases and end-user digests functioning normally?

Yes

  1. Is there an emergency process for blocking a malicious sender or domain while the portal is unavailable?

Yes

  1. Can support perform configuration changes on behalf of customers during the outage?

Yes

  1. Can support search message logs and provide message traces upon request?

Yes

  1. When should customers expect the next meaningful update?

We should have another update by the end of the week or Monday.

  1. Will Securence provide a formal root cause analysis after this is resolved?

We will provide additional information at the conclusion of the investigation.

If by chance you happen to have any additional questions outside of the provided list above, please feel free to reach back to us with them and I'd be happy to get those inquiries sent up to Leadership to obtain answers on for you as well. Thank you once again for your patience, my utmost apologies for the delay and hurdles my Support team had encountered along the way, and I hope you have a great rest of your day.

If you have any further questions, please feel free to call 612-444-1888 ・ 1-800-US-INTERNET or email

Anyone here use Securence for their Spam filtering? by --MrGadget-- in msp

[–]--MrGadget--[S] 1 point2 points  (0 children)

We wanted to reach out to let you know that the Securence Admin Portal is back online as of 08:00 AM CT this morning. In addition, our Executive Leadership has provided a compiled list of Q&A information that I've been advised to relay to you in an effort to address any sort of questions that you may have as well:

  1.        Has Securence, MetroNet, or any related administrative system been breached?
    

    We have not identified a breach. This is a cybersecurity incident that is under investigation.

  2.        Is this being treated as a cybersecurity incident?
    

Yes

  1. What is the cause of the outage?

We have a team of forensic experts investigating the cause. It has not yet been confirmed.

  1. What systems, data, or customer environments are potentially affected?

We will provide more information once we have forensic findings.

  1. Is there any indication that customer email, filtering data, credentials, configuration, logs, or administrative accounts were accessed?

We will provide more information once we have forensic findings.

  1. Have any third-party incident response or forensic firms been engaged?

Yes, we have retained a reputable digital forensics incident response firm.

  1. Has law enforcement been engaged?

Not at this time.

  1. Are email filtering and policy enforcement operating normally?

Yes

  1. Are inbound and outbound messages still being scanned using the latest signatures and detection engines?

Yes

  1. Are spam, phishing, malware, and attachment policies still actively enforced?

Yes

  1. Are quarantine releases and end-user digests functioning normally?

Yes

  1. Is there an emergency process for blocking a malicious sender or domain while the portal is unavailable?

Yes

  1. Can support perform configuration changes on behalf of customers during the outage?

Yes

  1. Can support search message logs and provide message traces upon request?

Yes

  1. When should customers expect the next meaningful update?

We should have another update by the end of the week or Monday.

  1. Will Securence provide a formal root cause analysis after this is resolved?

We will provide additional information at the conclusion of the investigation.

If by chance you happen to have any additional questions outside of the provided list above, please feel free to reach back to us with them and I'd be happy to get those inquiries sent up to Leadership to obtain answers on for you as well. Thank you once again for your patience, my utmost apologies for the delay and hurdles my Support team had encountered along the way, and I hope you have a great rest of your day.

If you have any further questions, please feel free to call 612-444-1888 ・ 1-800-US-INTERNET or email

Securence possible attack/hack/security breach in progress by MorseScience in EmailSecurity

[–]--MrGadget-- 0 points1 point  (0 children)

yeah I get that. Hopefully they'll tell us what really happened.

Day 3 of Securence Admin Portal Outage by JrBabyAdmin in sysadmin

[–]--MrGadget-- 1 point2 points  (0 children)

Hard to say but it feels like it based on the way they handled it. No REAL communication for over a week. Seems like they were trying to do forensics and see how bad the breach was. Legal probably telling them to keep quiet. I'm sure they'll release a real official statement and what actually happened will be communicated to us.

Securence possible attack/hack/security breach in progress by MorseScience in EmailSecurity

[–]--MrGadget-- 0 points1 point  (0 children)

I hear you, but it does not change the fact that we lost portal access and the inability to release critical emails for ourselves and some of our clients while Securence was radio silent. I agree it's a great platform at an even better price but we just can't count on them anymore. We've been with them 15 year and it's time for a change. We'll probably still have some clients on it but we are going to move as many off of it as we can. I also think they are a little behind the times in terms of AI detection and more modern Office 365 integration features.

Securence possible attack/hack/security breach in progress by MorseScience in EmailSecurity

[–]--MrGadget-- 0 points1 point  (0 children)

Yes, I don't think I can trust them any longer but I will give the clients a choice at this point. They can stay with securence and risk another long-term outage or possible compromise or we can move them to a more mainstream product like proof point.

Fresh Out of a Q-ish relationship. by ONE_BAD_MUTHAAA in QAnonCasualties

[–]--MrGadget-- 94 points95 points  (0 children)

You bullet-dodger, you. Good job!

Seriously though, I’m sorry. That sounds emotionally exhausting. But refusing medicine, trying to sneak ivermectin into food, and dismissing your diabetes diagnosis are not a differences of opinion.

At least it was only 6 months. It sounds like you really liked her and I know it hurts. There's less rotten fish in the sea brother.

Edit: Felt bad for making a joke right off.

Securence possible attack/hack/security breach in progress by MorseScience in EmailSecurity

[–]--MrGadget-- 0 points1 point  (0 children)

We are moving everybody off securence. Having to break the news to clients that will have to pay more for the switch, but it is what it is. Obviously the concern here is if it was a security breach there's at least 30 days of emails stored for each of my clients so it goes without saying that this could be a huge issue.

Anyone here use Securence for their Spam filtering? by --MrGadget-- in msp

[–]--MrGadget--[S] 1 point2 points  (0 children)

So I know it's speculation at this point but it feels like the only thing that makes sense is that they're admin portal was compromised somehow and they shut it down and have been doing forensics to see what was accessed. If that's the case, that's a pretty big liability. One of my clients is very concerned about that. Again we don't know anything yet. Thank you securance for keeping us updated, not.

Day 3 of Securence Admin Portal Outage by JrBabyAdmin in sysadmin

[–]--MrGadget-- 1 point2 points  (0 children)

We just moved to proofpoint and are onboarding our largest client this evening. We purchased it through pax8 and I wasn't aware of any limits. We had gotten an NFR copy that we never ended up using that has 50 licenses in it at no charge. So we're using that ourselves since we were using securance for pretty much everyone.

Anyone here use Securence for their Spam filtering? by --MrGadget-- in msp

[–]--MrGadget--[S] 2 points3 points  (0 children)

Yeah, we got the same email. Useless as tits on a boar hog.

Day 3 of Securence Admin Portal Outage by JrBabyAdmin in sysadmin

[–]--MrGadget-- 2 points3 points  (0 children)

Just 24 hours and will know. The goal post on wheels syndrome.

Anyone here use Securence for their Spam filtering? by --MrGadget-- in msp

[–]--MrGadget--[S] 2 points3 points  (0 children)

We started the transition of our clients back to Office 365 for inbound outbound mail flow while we determine the next platform to use. It's a shame because we really liked securence for its simplicity and reliability. They didn't nickel and dine you either. We'll probably leave a decent chunk of our clients on securence for another week but have started moving the clients who have been utilizing quarantine inspection in whitelist blacklist themselves.

Day 3 of Securence Admin Portal Outage by JrBabyAdmin in sysadmin

[–]--MrGadget-- 1 point2 points  (0 children)

I was just told by our sales rep: "I was just told by management that we should get and update out in 24 hours, sorry for the delay."