Outmaneuver your most sophisticated cyber enemies—automatically.
Cyber attacks are getting more sophisticated. Cybercrime and data breach costs will reach the billions and even trillions in the next few years. These are things we already know. But what are you doing to help your cybersecurity teams (who are already stretched thin) mitigate the billions of threats? The ScoutShield threat intelligence gateway keeps your overburdened teams from throwing in the towel by blocking threats automatically – making their lives easier and saving you from cyber attacks. Watch our video to learn more.
March 29, 2018.
By The CyberWire Staff
Ecuador has cut off WikiLeaks' founder Julian Assange's Internet access, saying he violated a written promise not to do things that would damage Ecuador's international relations while he enjoyed asylum in their London embassy. They yanked Assange's connection because of his recent tweeting in Russia's interest and against Britain's in the ongoing matter of the Salisbury nerve agent attacks.
Russia has promised to retaliate in response to the more than twenty-five countries who have taken diplomatic measures to protest the Salisbury assassination attempts, but hasn't so far done so. Kremlin representatives say they reserve the right to do so at "some appropriate time."
The retaliation that most concerns Western countries, particularly the UK and the US, is the prospect of Russia executing a cyberattack against electrical power grids that's been long under preparation.
WannaCry has resurfaced, infecting a Boeing 777 assembly line in South Carolina yesterday. Boeing says the infection's been contained, was minor, and didn't interrupt production.
A new keylogger, which Cybereason calls "Fauxpersky" because of the code's rather lame attempt to impersonate a Kaspersky splash screen, is circulating in the wild. Built on AutoHotKey, the malware is, according to Cybereason researchers, unsophisticated but efficient, with a large appetite for data and not much stealth.
Facebook pushes some new privacy tools, policies, and settings, to mixed reviews and some gloating by Apple, which reminds everyone that if you're not paying for the product, you are the product.
A European police sweep takes up alleged members of a phishing gang.
Struggling with your DLP? It's time to rethink your data loss prevention strategy.
Traditional data loss prevention tools aren’t cutting it anymore. Why? They are high-maintenance and require endless fine-tuning. They often miss insider threats. They stymie communication between security and other departments. And they slow down endpoints, leading to crashes and failures that drive users crazy. Learn from ObserveIT why DLP tools aren’t getting the job done in 2018 and how you can stop data loss in its tracks. Read Now.
ON THE PODCAST
In today's podcast we hear from our partners at Webroot. First-time security conference goer? First timer at RSA? Webroot's David Dufour has advice for you. And our guest, Deral Heiland from Rapid7, provides us with an overview of smart sensors.
XM Cyber is coming to RSA(San Francisco, California, United States, April 16 - 20, 2018) Visit XM Cyber at the Israeli Pavilion, South Hall booth 635, to experience the first automated APT simulation platform to expose, assess and amend every attack path to organizational critical assets.
ChessMaster Adds Updated Tools to Its Arsenal(TrendLabs Security Intelligence Blog) In this blog post, we analyze ChessMaster's current status, including the updated tools in its arsenal — with a particular focus on the evolution of ANEL and how it is used in the campaign.
Omitting the “o” in .com Could Be Costly(KrebsOnSecurity) Take care when typing a domain name into a browser address bar, because it’s far too easy to fat-finger a key and wind up somewhere you don’t want to go.
2018 Attacker Behavior Industry Report(Vectra) The Attacker Behavior Industry Report provides a first-hand analysis of active and persistent attacker behaviors inside cloud, data center and enterprise environments.
Businesses suspect their mobile workers are being hacked(Help Net Security) Most organisations are concerned their growing mobile workforce presents an increasing number of mobile security challenges. Overall, 81% of respondents said they had seen Wi-Fi related security incidents in the last 12 months.
No Room For Cyber-Complacency(Information Security Buzz) No Room for Cyber-Complacency: a Quarter of DDoS Attacks Claim Unintended Victims Over a quarter of businesses that have been hit by a Distributed Denial of Service (DDoS) attack don’t think they were the intended target, highlighting that businesses can’t afford to be complacent when it comes to today’s threat landscape. According to research from …
Compliance functions make a turn towards innovation-fueled strategies(Help Net Security) Accenture has conducted the Compliance Risk Study every year since 2013. Over that time, compliance functions have made a dramatic turn towards innovation-fueled strategies, as they seek to deliver the risk management outcomes required in an era of digital transformation.
WatchGuard’s Threat Lab Analyzes the Latest Malware and Internet Attacks(WatchGuard) The Threat Lab team analyzes data from WatchGuard’s Firebox Feed, internal and partner threat intelligence, and a research honeynet, to provide insightful analysis about the top threats on the Internet. Their smart, practical security advice contained in the Internet Security Report will enable you to better protect your organization in the ever-changing threat landscape.
Cyberattacks Now #1 Threat To Swiss Banks(Information Security Buzz) It has been reported that cyber-attacks pose the biggest threat to the Swiss financial system with risks from hacking incursions on the rise, watchdog FINMA warned on Tuesday, calling on Switzerland to step up its national defences against the menace. FINMA said on the whole Swiss banks seemed aware of the risks and were well equipped…
Innovation in the Old Line State: the Maryland Cybersecurity Awards(The CyberWire) On Tuesday, March 27th, 2018, the Cybersecurity Association of Maryland met for its second annual awards celebration. Convening again at Baltimore's Visionary Art Museum at Federal Hill beside the Inner Harbor, Maryland Cybersecurity celebrated some of the state's leading innovators and practitioners in information security.
Why's Symantec Stock Reacting Poorly?(Seeking Alpha) The market is currently not happy with Symantec's revenue miss and lowered forecast. Increasing competition and consolidation also have affected the stock. What
Mike Ruettgers Joins Virsec Board of Directors(GlobeNewswire News Room) Virsec, a cybersecurity company delivering a radically new approach to protect against advanced attacks, today announced that Mike Ruettgers has joined its Board of Directors.
Appointment of Chief Executive Officer(Regulatory News, RNS - London South East) The Board of Blancco Technology Group plc is delighted to announce that, following an extensive selection process, Matt Jones is joining the Company today as Chief Executive Officer and Board Director.
Unisys Leverages Cylance’s Advanced Endpoint Protection Solution(Security Boulevard) The new Unisys Advanced Endpoint Protection Solution incorporates Unisys consulting and managed security services as well as Cylance advanced threat prevention technology to leverage artificial intelligence and machine learning to prevent malware attacks on endpoints.
Verizon Talks Up Private Core as AT&T Launches FirstNet(Express Newsline) AT&T said FirstNet has gone live, timed to the one-year anniversary of the telco securing the contract for the public-private interactive broadband emergency communications network funded with FCC auction proceeds.
Sports world adapts to growing cybersecurity threats(Sportsnet.ca) Imagine the fallout if the NHL was hacked and its star players -- think Sidney Crosby, Auston Matthews and Connor McDavid -- had their home addresses, phone numbers and other personal information made accessible online.
Risky Business: The Fifth Element(SecurityWeek) While security-as-a-service for functions like WAF and DDoS protection are well-established, they are just the beginning of a new industry that is emerging around consumption-based security models.
Why are Russia and the West allowed to spy on each other?(Deutsche Welle) The expulsion of Russian diplomats from the UK, US and several other NATO states has cast a light on the world of espionage. DW looks at why spies are allowed to even operate in a targeted country in the first place.
Ukrainian Police Bust Online Market For Military Equipment(RadioFreeEurope/RadioLiberty) Amphibious armored-personnel carriers and infantry fighting vehicles, off-road transport trucks, tanker trucks, and trailers were among some 200 objects that have been seized by Ukrainian police after being offered for sale online.
Judge Denies Mueller Request for Protective Order(Courthouse News) A federal judge has denied Special Counsel Robert Mueller’s request for a protective order for materials gathered during discovery for the upcoming trial of former Trump campaign manager Paul…
For a complete running list of events, please visit the Event Tracker on the CyberWire website.
Newly Noted Events
Application of the Law of War to Cyber Operations(Washington, DC, USA, May 3, 2018) Cyber law experts meeting at the George Washington University will cover Title 10 vs. Title 32 vs. Title 50 and the lawful and operational restrictions related to these authorities. The panelists will...
National Cyber League Spring Season(Chevy Chase, Maryland, USA, March 30 - May 25, 2018) The NCL is a defensive and offensive puzzle-based, capture-the-flag style cybersecurity competition. Its virtual training ground helps high school and college students prepare and test themselves against...
4th Middle East Cyber Security Summit(Riyadh, Saudi Arabia, April 4 - 5, 2018) The summit will feature state of the art presentations, hackathons and technology showcasing from regional and international experts and leading technology providers. One of the focus areas of the summit...
Cybersecurity: A Shared Responsibility(Auburn, Alabama, USA, April 8 - 10, 2018) During the 2018 SEC Academic Conference, we will explore three themes within cyber security: the underlying computer and communication technology; the economic and physical systems that are controlled...
Sea-Air-Space: The Navy League’s Global Maritime Exposition(National Harbor, Maryland, USA, April 9 - 11, 2018) Join us this April for Sea-Air-Space, the largest maritime exposition in the U.S., with 275+ exhibitors displaying the latest in maritime, defense and energy technology. This year’s theme, “Learn. Compete.
2018 Mississippi College Cybersecurity Summit(Clinton, Mississippi, USA, April 10 - 11, 2018) The 2018 Mississippi College Cybersecurity Summit is a conference designed to engage, educate, and raise awareness about cybersecurity across the nation. The 2018 Cybersecurity Summit will provide valuable...
ISC West 2018(Las Vegas, Nevada, USA, April 11 - 13, 2018) ISC West is THE largest security industry trade show in the U.S. At ISC West, you will have the chance to network with over 30,000 security professionals through New Products & Technologies encompassing...
CYBERTACOS San Francisco(San Francisco, California, USA, April 16, 2018) CYBERTACOS is back and becoming one of the biggest cybersecurity networking events! Register today and join us for networking, food and drinks. This event includes a 45-minute meet the press panel made...
RSA Conference 2018(San Francisco, California, USA, April 16 - 20, 2018) Take this opportunity to learn about new approaches to info security, discover the latest technology and interact with top security leaders and pioneers. Hands-on sessions, keynotes and informal gatherings...
Our Security Advocates(San Francisco, California, USA, April 17, 2018) OUR Security Advocates highlights a diverse set of experts from across information security, safety, trust, and other related fields. OURSA is a single-track, one-day conference with four topic sessions.
5th Annual Cybersecurity Summit(McLean, Virginia, USA, April 24, 2018) Join the Potomac Officers Club for the Fifth Annual Cybersecurity Summit to hear from public and private sector leaders on how federal agencies can improve their respective data security measures.
Secutech(Taipei, Taiwan, April 25 - 27, 2018) To meet the rising demand for intelligent and customised solutions, Secutech converges security and safety, ICT, IoT, artificial intelligence, big data, edge computing, intelligent video analytics and...
INFILTRATE(Miami Beach, Florida, USA, April 26 - 27, 2018) INFILTRATE is a "pure offense" security conference aimed at the experienced to advanced practitioner. With the late-90s hacker con as its inspiration, the event has limited attendance in order to foster...
Automotive Cybersecurity Summit 2018(Chicago, Illinois, USA, May 1 - 8, 2018) Smart Vehicles. Smart Infrastructures. The 2nd annual Automotive Cybersecurity Summit brings together public and private-sector manufacturers, suppliers, assemblers, technology providers and V2X partners...
Global Cyber Security in Healthcare & Pharma Summit(London, England, UK, May 3 - 4, 2018) The number of cyber-attacks in healthcare is on the rise, and the industry must do more to prevent and respond to these incidents. The Global Cyber Security in Healthcare & Pharma Summit 2018 will bring...
Secure Summit DC(Washington, DC, USA, May 7 - 8, 2018) (ISC)² Secure Summit DC will assemble the best minds in cybersecurity for two days of insightful discussions, workshops and best-practices sharing. The goal of the event is to equip security leaders to...
HACKNYC(New York, New York, USA, May 8 - 10, 2018) The recent flood of data breach news may numb us to the threat of attacks with kinetic effects--direct or indirect physical damage, injury, or death. Hack NYC focus’ on our preparation for, and resilience...
SecureWorld Kansas CIty(Kansas City, Missouri, USA, May 9, 2018) Connecting, informing, and developing leaders in cybersecurity. SecureWorld conferences provide more content and facilitate more professional connections than any other event in the Information Security...
SPONSOR & SUPPORT
Grow your brand and reach new customers.
Grow your brand and increase your customer base by educating our audience about your products, services, and events by advertising on The CyberWire. We’ve built trust with an influential (and often hard to reach) audience of CISOs, CSOs, and other senior execs in the security space, across a wide array of industry verticals. Learn more.
Be a part of the CyberWire story.
People ask us (a lot) how they can support what we do. We have our sponsorships and services, of course, but those are not always within every supporter's financial reach, or it might just not be the right time for you to do those things. That's why we launched our new Patreon site, where we've created a wider variety of support levels, each with some new benefits. Our patrons are important to our future, and we hope you'll consider becoming one. We invite you to become part of the CyberWire story. Become a patron today.