CYBER FRI — Inherited attack surface
Your newest acquisition might be your biggest security hole — just ask Maersk. Here’s what mattered this week: - Maersk breached through an acquired company’s legacy system (BleepingComputer, Nov 11): Ransomware group WhiteArmor stole ~100 GB from a platform Maersk inherited through its 2022 acquisition of LF Logistics — including driver records, admin credentials, and customer data — then demanded $5 million. - Microsoft Outlook zero-day actively exploited (BleepingComputer, Nov 10): A record-breaking 1,235-flaw Patch Tuesday included an Outlook flaw (CVEredactedthat steals Windows credentials when a user opens a crafted email attachment. Every business running Office is exposed until patched. - MSPs breached through ScreenConnect (BleepingComputer, Nov 11): An active malware campaign compromising ConnectWise ScreenConnect environments has already hit dozens of managed service providers — and the SMB clients downstream of each one. The deal lens: When you buy a company, you inherit its entire attack surface — legacy systems, forgotten integrations, third-party tools, and MSP relationships included. Maersk learned this the hard way: a platform from a four-year-old acquisition still held admin credentials and customer data that attackers walked off with. Cybersecurity diligence isn’t a checkbox. It’s about understanding what’s lurking in the tech stack before you own the liability — not after. At Legacy Forward Consulting, we help buyers surface these risks before close. What’s the scariest hidden risk you’ve uncovered in due diligence? #CyberSecurity #ThreatIntel #SMBAcquisition #DueDiligence