May 2026 Chapter Meeting

Topic: A Small Email. A Big Breach.

Speaker(s): Matt Rosenfeld, OpenText

Abstract:

A healthcare organization contacted OpenText after suspecting a potential security compromise due to unusual system behavior.

To quickly determine the scope and impact, we conducted both a penetration test and a vulnerability assessment. Through this combined approach, we traced the activity to malware that had successfully escalated privileges within the environment. It didn’t trigger any alerts. Internal teams were seeing irregular behavior on a handful of systems. User activity didn’t align with normal patterns, and privileged actions appeared to be occurring without clear authorization.

The Malware came in through email. Come by on May 21^st to find out details on what the Malware did and how we identified it and stopped it.