Are REvil's victims just restoring from backup? Russo-American cyber conflict. Chinese cyberespionage in Asia. Microsoft on PrintNightmare.

Special Section

Update on REvil's exploitation of Kaseya's VSA.

Kaseya CTO Dan Timpson posted a video late yesterday afternoon in which he provided a high-level overview of the steps the company was taking to fix the problems with its VSA software, whose modular design he credited with helping limit the scope of the attacks by REvil. Timpson made a point of listing the organizations Kaseya was working with as it responded to the ransomware attack: Mandiant, ("including its affiliate FireEye), the FBI, CISA, and DIVD, as well as with partners, customers, and researchers. Kaseya has fixed the vulnerabilities in both on-premises and cloud versions of VSA, he said, documented the updates and had them "peer-reviewed" by the partners the company has engaged.

A post on Kaseya's site indicates that patches for VSA's on-premises version are still scheduled for release this coming Sunday July 11th, at 4:00 PM EDT. That's also when Kaseya intends to begin deploying the fixes to its VSA SaaS Infrastructure.

How successful has REvil actually been, this time?

The Wall Street Journal reports that ransomware infestations connected with the exploitation of Kaseya had, by yesterday, been found in six European countries. The Record reports that Kaseya's president and general manager for EMEA, Ronan Kirby, addressing a meeting convened by Belgium's CERT, those six countries were the UK, the Netherlands, Germany, Sweden, Norway, and Italy. Eight of the sixty direct customers affected by the campaign are in Europe. Kaseya still thinks there are between eight-hundred and fifteen-hundred total downstream victims, that is, customers of the MSPs who use Kaseya's VSA.

But BleepingComputer has found only two victims who've paid any ransom, and concludes that the responsible REvil affiliate is unlikely to get the big payday they're hoping for. REvil went after the software itself, the better to cast a broad net, and so passed up the now customary step of wiping or encrypting backups. "[A]n MSP and multiple victims encrypted during the attack told BleepingComputer that none of their backups were affected, and they chose to restore rather than paying a ransom." So the victims may have simply opted to restore from backups and bite the bullet on any doxing that may develop later.

A US response to the ransomware campaign remains under consideration.

SecurityWeek writes that the US Administration faces pressure to do something about REvil's campaign. The Administration has been circumspect about its plans and options, and the Defense Department has declined to discuss specific US Cyber Command capabilities, plans or operations, beyond expressing its conviction that any response should embody a "whole-of-government" approach.

More coverage of this incident may be found on the CyberWire's site.

Summary

By the CyberWire staff

The Russian government is generally suspected of complicity (at least complicity through toleration of criminals operating from its territory) in the ransomware campaign staged through a vulnerability in Kaseya's VSA software, but the Kremlin has denied any involvement. The Independent reports similar denials in the other current case of suspected Russian activity, the attempted penetration of the US Republican Party's National Committee. “We can only repeat that whatever happened, and we don’t know specifically what took place here, this had no connection to official Moscow,” Kremlin spokesman Dmitry Peskov said. The SVR, Cozy Bear, is generally regarded as the organization behind the cyberespionage.

Recorded Future's Insikt Group reports finding what appears to be a Chinese cyberespionage campaign active against targets in Nepal, Taiwan, and the Philippines. The threat group, which Recorded Future tracks as Threat Activity Group 22 (TAG-22), is interested in telecommunications, academic, research and development, and government organizations in the three countries. The researchers believe TAG-22 used compromised GlassFish servers and Cobalt Strike for initial access, subsequently switching to its own "bespoke" backdoors for long-term persistence.

Microsoft has issued a clarification regarding the patch it issued this week for the CVE-2021-34527 Windows Print Spooler vulnerability (PrintNightmare). Redmond says the patch is working as designed, and urges users to apply it. The Microsoft Security Response Center investigated reports that the patch was ineffective and concluded that "All reports we have investigated have relied on the changing of default registry settings related to Point and Print to an insecure configuration."

Dateline Miami (and probably Moscow): the Kaseya ransomware incident.

Update Regarding VSA Security Incident (Kaseya) Kaseya’s technical teams and their partners have been working around the clock to help affected customers get back up and running. CTO Dan Timpson talks about the agency, incident response and research partners who are assisting Kaseya’s internal teams to ensure the highest levels of security prior to go-live and outlines the steps Kaseya is taking to ensure its VSA customers get back online securely. He further discusses the contained impact to VSA within the IT Complete platform and the intentional compartmentalized design that ensures the security of the remaining 26 modules within the platform.

REvil and Kaseya: response and recovery. (The CyberWire) Kaseya continues to work toward recovery as the US Government continues to work out a response.

Kaseya Hack Ripples Across Europe as Ransomware Boom Escalates (Wall Street Journal) A ransomware attack disclosed last week by a Miami-based software provider spread to customers in six European countries, a company official said Thursday, showing how a hack targeting digital supply chains can quickly extend across industries and international borders.

Kaseya ransomware attack affected eight European customers (The Record by Recorded Future) Florida-based software vendor Kaseya said that eight of its direct customers in the European Union were successfully hit by the sprawling ransomware attack that took place last Friday.

REvil victims are refusing to pay after flawed Kaseya ransomware attack (BleepingComputer) The REvil ransomware gang's attack on MSPs and their customers last week outwardly should have been successful, yet changes in their typical tactics and procedures have led to few ransom payments.

Biden Pressured to Act on 'Russian' Ransomware, Hacking (SecurityWeek) Top US officials met at the White House on stopping ransomware Wednesday, as pressure mounted on President Joe Biden to take action against Russia over cyberattacks.

Biden Faces Russian Ransomware Curtailment Challenge (GovInfoSecurity) The Biden administration has a message for Russia: Rein in the criminal hackers operating from inside your borders who hit Western targets, or we'll do it for you.

Calls grow for military cyber response to global criminal hackers (WRCB) The U.S. has long been reluctant to respond forcefully with cyber weapons to hacking by either nations or criminals, partly because the U.S. is vulnerable.

Cyber Command lawyer calls for military operations against hackers (TheHill) The top lawyer for U.S. Cyber Command is calling for the United States to push back against transnational criminal hackers with military cyber operations.

Top U.S. cyberwarrior calls for military cyber response to hackers (NBC News) The U.S. has long been reluctant to respond forcefully with cyber weapons to hacking by either nations or criminals, partly because the U.S. is vulnerable.

Revisiting a Framework on Military Takedowns Against Cybercriminals (Lawfare) The U.S. military’s mission is not to carry out military operations. Its mission is to defend the nation. Cyberspace offers the military an incredibly useful capability to advance national security. Cybersecurity is national security.

Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software (KrebsOnSecurity) Last week cybercriminals deployed ransomware to 1,500 organizations that provide IT security and technical support to many other companies. The attackers exploited a vulnerability in software from Kaseya, a Miami-based company whose products help system administrators manage large networks remotely.…

The Kaseya/REvil Attack Explained | @Bugcrowd (Bugcrowd) Learn about the Kaseya and REvil ransomware attack, why it matters, helpful resources, and steps to protect yourself and organization.

Kaseya ransomware attack: Your questions answered (ZDNet) Updated: The latest major software supply chain hack has impacted more than 1,500 companies. Here is everything we know so far.

Kaseya Cyber Attack Lesson? Never Rest (IndustryWeek) Another supply chain attack surfaces on brink of the holiday weekend.

Attacks, Threats, and Vulnerabilities

Suspected Chinese hackers target telecoms, research in Taiwan, Recorded Future says (CyberScoop) A suspected Chinese state-sponsored group is targeting telecommunications organizations in Taiwan, Nepal and the Philippines, researchers at Recorded Future’s Insikt Group said in a report Thursday.

Chinese State-Sponsored Activity Group TAG-22 Targets Nepal, the Philippines, and Taiwan Using Winnti and Other Tooling (Recorded Future) Recorded Future has identified a suspected Chinese state-sponsored group that we track as TAG-22 targeting Nepal, the Philippines, and Taiwan.

SideCopy Hackers Target Indian Government Officials With New Malware (The Hacker News) Indian government and military officials are being targeted by new malware created by Pakistan linked SideCopy hackers.

Pakistan-linked hackers are targeting critical infrastructure PSUs in India, report says (The Hindu) Researchers explained the final payload can capture sensitive information including screenshots, keystrokes, and files from affected system.

Lazarus gang targets engineers with job offers using poisoned emails (The State of Security) Security researchers report that Lazarus, the notorious hacking group, has been targeting engineers working in the defence industry.

Kremlin denies links to cyber attack on US Republicans (independent) Russian government hackers breached the computer systems of the US Republican National Committee last week, around the time a Russia-linked criminal group unleashed a massive ransomware attack, according to people familiar with the matter.

In future elections, federal officials predict repeat of 2020 threats (StateScoop) Officials from DHS, the FBI and the NSA told county IT officials that threats election security will linger, but there are steps to strengthening public trust.

Cybergang REvil hits defense contractor with Army, Navy, Air Force, NASA customers (The Washington Times) The REvil cybergang hit a defense contractor whose customers include the U.S. military in a brash test of President Biden’s tough talk seeking to deter cyberattackers bombarding America.

Insurance giant CNA reports data breach after ransomware attack (BleepingComputer) CNA Financial Corporation, a leading US-based insurance company, is notifying customers of a data breach following a Phoenix CryptoLocker ransomware attack that hit its systems in March.

Most wanted: The top 5 online crime gangs running ransomware (TNW) DarkSide, REvil, Clop, Syrian Electronic Army Far, and FIN7 are the ones you need to watch out for

Use of Common Malware in Operation Targeting Energy Sector Makes Attribution Difficult (SecurityWeek) Researchers spot targeted campaign aimed at energy companies and their suppliers, but attribution is difficult due to the use of several common malware families.

Mac Malware Used in Attacks Targeting Industrial Organizations in Middle East (SecurityWeek) A malicious campaign focused on the industrial sector in the Middle East has been expanded to also target Mac computers

Malspam banks on Kaseya ransomware attack (Malwarebytes Labs) The Malwarebytes Threat Intelligence Team recently found a malspam campaign banking on the ransomware attack that hit Kaseya VSA.

Emails Offering Kaseya Patches Deliver Malware (SecurityWeek) Kaseya has yet to release patches for the vulnerabilities exploited in the recent ransomware attack, but cybercriminals are leveraging the news to deliver malware.

Kaseya warns of phishing campaign pushing fake security updates (BleepingComputer) Kaseya has warned customers that an ongoing phishing campaign attempts to breach their networks by spamming emails bundling malicious attachments and embedded links posing as legitimate VSA security updates.

"Black Widow" digital premier a cover for malware and scams, says Kaspersky (TechRepublic) Phishing, malicious files and other forms of fraud have followed the highly awaited movie since it was first delayed due to COVID-19. On the eve of its actual release, the scams have begun anew.

Threat Thursday: Redline Infostealer (BlackBerry) RedLine is a new infostealer malware family that is distributed via COVID-19 phishing email campaigns. RedLine is extremely versatile and has appeared variously as Trojanized services, games, cracks, and tools.

Non-Malicious Android Crypto Mining Apps Scam Users at Scale (SecurityWeek) Researchers have identified more than 170 Android apps that scam users interested in cryptocurrencies, which cannot even be classified as 'malware' since they do nothing typified as malicious and don't contain a payload.

Humans and VPNs – some of the biggest remote work risk factors (ITWeb) The human element is one of the biggest security risks in any organisation, says Anna Collard, KnowBe4 Africa.

Hackers leak scraped data of 87,000 GETTR users (HackRead) GETTR, a pro-Trump social media platform, has been attacked twice since its launch on July 4th, 2021.

Morgan Stanley says some personal data stolen after data breach (Reuters) Morgan Stanley said on Thursday personal data of some of its corporate clients was stolen due to a data breach involving a third-party vendor. (Reporting by Niket Nishant in Bengaluru; Editing by Arun Koyyur)

Morgan Stanley reports data breach after vendor Accellion hack (BleepingComputer) Investment banking firm Morgan Stanley has reported a data breach after attackers stole personal information belonging to its customers by hacking into the Accellion FTA server of a third party vendor.

The Accellion data breach continues to get messier (TechCrunch) The Accellion attack claims a new victim, Morgan Stanley, six months after the security breach was discovered.

NSW Department of Education discloses security attack (CRN Australia) Internal systems were shuttered in response.

NSW Department of Education victim of cyber security attack (iTWire) The New South Wales Department of Education is working to recover departmental systems after becoming a victim of a cyber-security attack, with the department saying it has worked with Cyber Security NSW to reactivate services as soon as possible. The attack hit following a directive from the state...

Coursera Flunks API Security Test in Researchers' Exam (Threatpost) The problem APIs included numero uno on the OWASP API Security Top 10: a Broken Object Level Authorization (BOLA) issue that could have exposed personal data.

Belden Inc. Issues Supplemental Notification of Data Breach (BusinessWire) Belden Inc. Issues Supplemental Notification of Data Breach

'Increased threat' of serious cyber attack at council facing regular phishing attempts (Notts TV News) Councillors fear Gedling Borough Council could come under a cyber attack, putting residents’ information such as council tax details at risk, after a number of unsuccessful 'phishing' attempts.

Security Patches, Mitigations, and Software Updates

Clarified Guidance for CVE-2021-34527 Windows Print Spooler Vulnerability (Microsoft Security Response Center) On Tuesday July 6, 2021, Microsoft issued CVE-2021-34527 regarding a Windows Print Spooler vulnerability. Updates were released on July 6 and 7 which addressed the vulnerability for all supported Windows versions. We encourage customers to update as soon as possible.

Android Updates for July 2021 Patch Tens of High-Severity Vulnerabilities (SecurityWeek) Google on Wednesday announced the availability of the July 2021 security updates for the Android operating system, which include patches for over 40 vulnerabilities.

Cisco Patches High Severity Vulnerabilities in BPA, WSA (SecurityWeek) Cisco issues an advisory with a warning that the vulnerabilities could be exploited by authenticated, remote attackers to gain elevated privileges.

VirusTotal fixes bug that slowed down threat hunting operations (The Record by Recorded Future) Malware scanning service and threat intelligence platform VirusTotal said it fixed a bug today that was slowing down threat hunting operations on its website.

Rockwell Automation MicroLogix 1100 (CISA) 1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: MicroLogix 1100 Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to create a denial-of-service condition. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Rockwell Automation reports the vulnerability affects the following products:

MDT AutoSave (CISA) 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: MDT Software Equipment: MDT AutoSave Vulnerabilities: Inadequate Encryption Strength, SQL Injection, Relative Path Traversal, Command Injection, Uncontrolled Search Path Element, Generation of Error Message Containing Sensitive Information, Unrestricted Upload of File with Dangerous Type 2.

VISAM Automation Base (VBASE) (Update A) (CISA) 1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low skill level to exploit. Vendor: VISAM Equipment: VBASE Vulnerabilities: Relative Path Traversal, Incorrect Default Permissions, Inadequate Encryption Strength, Insecure Storage of Sensitive Information, Stack-based Buffer Overflow

Trends

'Barely able to keep up': America's cyberwarriors are spread thin by attacks (NBC News) A once-quiet epidemic, ransomware has emerged in 2021 as a major national security issue.

Cybersecurity expert on ransomware attacks, cyber threats from Russia, and protecting infrastructure (CBS News) Retired FBI Executive Assistant Director ans CrowdStrike Service President Shawn Henry joins “CBS This Morning” to discuss the largest global ransomware on record and how the U.S. could respond to these cyberattacks believed to have originated from Russia.

A new government report shows that 60% of agencies still fall for one of the most basic scamming techniques — and the repercussions are potentially devastating (Business Insider) A new Cybersecurity and Infrastructure Security Agency (CISA) report shows that agencies are likely to fall victim to devastating phishing attacks.

Why ransomware attacks are on the rise — and what can be done to stop them (PBS NewsHour) As a slew of disruptive ransomware attacks have rattled the U.S., here’s what you should know as debate over cybersecurity and how to fight ransomware continues.

Hacking Wall Street (bdnews24) At a congressional hearing in May, the CEOs of Wall Street’s six largest banks were asked to name the greatest threat to their companies and the wider financial system. They did not mention the global pandemic, climate change or factors that contributed to the 2008 financial crisis. The most popular answer instead was “cybersecurity.”

New Study Finds 1 in 3 Untrained Users Are Ticking Timebombs When It Comes to Cyber Attacks (PRWeb) KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, today announced it has released a new Phishing by Indus

One person in four risks sharing confidential work-related information (Intelligent CIO North America) KnowBe4 Research reveals the results of a survey that found that nearly a quarter of employees are unsure whether the information they are working with is confidential or not. A new survey carried out by KnowBe4 Research shows that nearly a quarter of employees are unsure whether the information they are working with is confidential […]

Ransomware attacks deliver wake-up call for corporate America (WGAL) Recent high-profile, multi-million-dollar ransomware attacks are making a lot of business leaders nervous.

Brazilians fear for the security of their data (ZDNet) The majority of users of digital platforms have suffered some kind of digital threat.

Keeper Security: New report reveals significant cybersecurity pressures on UK businesses (BusinessWire) UK businesses are struggling to deal with multiple urgent cybersecurity challenges, new research by Keeper Security has revealed.

Why are insurance companies being targeted by hackers? (Insurance Business) And what can companies do to mitigate this risk?

What Colonial Pipeline Means for Commercial Building Cybersecurity (Dark Reading) Banks and hospitals may be common targets, but now commercial real estate must learn to protect itself against stealthy hackers.

Marketplace

Funding Pours Into Cybersecurity As Mid-Year 2021 Numbers Eclipse Last Year’s Total (Crunchbase News) Although only halfway through the year, 2021 already has surpassed the record-breaking $7.8 billion raised by cybersecurity companies last year — and a lot more is likely to come.

Netskope Attracts $300 Million in Additional Investment, Elevating Valuation to $7.5 Billion (PR Newswire) Netskope, the SASE leader, today announced that the company has closed a new $300 million investment round led by existing investor ICONIQ...

GovCIO to acquire Salient CRGT (Intelligence Community News) GovernmentCIO announced it has agreed to acquire Fairfax, VA-based Salient CRGT ("SCRGT"), a leading provider of data analytics, cloud, agile software development, cybersecurity, and infrastructure solutions to U.S. national security, federal civilian, and federal health agencies, from Bridge Growth Partners and Frontenac.

IoT/OT Device Security Firm NanoLock Raises $11 Million (SecurityWeek) NanoLock Security, a company specializing in IoT and OT device protection and management, has raised $11 million in a Series B funding round.

The Cyberattack Silver Lining (InvestorPlace) Cyberattacks are growing in scope and complexity… how it’s fueling the “inevitable” trend of cybersecurity… a handful of related investments to consider today

Sumo Logic Named a Visionary in the 2021 Gartner Magic Quadrant for Security Information and Event Management (SIEM) (GlobeNewswire News Room) Company Positioned for the First Time as a Visionary in the 2021 Gartner Magic Quadrant for Cloud-Native SIEM Approach to Modernizing Security Operations ...

DoD sets deadline for other providers to get in on new cloud project (Federal News Network) In today’s Federal Newscast, the Pentagon is giving other cloud service providers a chance to participate in new contract after it cancelled JEDI.

NSW Justice strikes $7m cyber security deal with CSO Group (iTnews) Security operations centre to come online in August.

Microsoft awarded $13.6 million to security researchers in the past 12 months (The Record by Recorded Future) Microsoft said it awarded more than $13.6 million as monetary rewards to security researchers through its public bug bounty programs over the past 12 months.

Darktrace launches UK internship programme with CyberFirst to boost cyberskills (Intelligent CIO Europe) Darktrace, a leading cybersecurity AI company, has announced that it has launched an internship programme in partnership with the UK’s National Cyber Security Centre’s (NCSC) CyberFirst initiative. CyberFirst encourages young people from all walks of life to start careers in cybersecurity, giving university students the opportunity to work with key players in the industry. The […]

Booz Allen Receives Cogswell Award for Security Practices; Karen Dahut Quoted (Executive Biz) Booz Allen Hamilton has received a James S. Cogswell Award from the Defense Counterintelligence and Security Agency for an industrial security program being implemented at a company facility in Colorado Springs, Colorado.

One of the nation’s top lines of cyber defense runs through this company in Davis Square (BostonGlobe.com) Recorded Future, which operates out of a former laundromat, has provided Washington’s top officials with intelligence on the country’s biggest breaches, from the Jan. 6 insurrection to recent ransomware attacks.

Data Security Disruptor Dasera Strengthens Executive Ranks with Three Top Women Leaders in Marketing, Engineering, and Product Roles (BusinessWire) Dasera, a cybersecurity startup whose cutting edge technology is reinventing the very essence of data security, announced today that it has named thre

WISeKey Appoints Cesar Martin-Perez as Chief Revenue Officer to Deliver Innovative Solutions Designed to Further Accelerate Global Sales (GlobeNewswire News Room) WISeKey Appoints Cesar Martin-Perez as Chief Revenue Officer to Deliver Innovative Solutions Designed to Further Accelerate Global Sales Geneva,...

FIRST appoints new Chair Dave Schwartzburg and welcomes five new Board of Directors (FIRST — Forum of Incident Response and Security Teams) Alexander Jäger, Senior Security Engineer of Google, continues in his role as Chief Financial Officer Also available in [PDF](FIRST-Press-Release-20210708.pdf)

Products, Services, and Solutions

ESET Launches Interactive Phishing Derby with Prizes to Raise Awareness of Cybersecurity (ESET) Derby follows multi-channel advertising campaign for small and midsize businesses to recognize and prevent potential attacks

1LINK, Cydea Tech and Skurio launch cybersecurity solution in Pakistan (PAYPERS) UK-based digital risk protection company <a href='https://skurio.com/' target='_blank'>Skurio</a> has announced the roll out of its new collaborative cyber threat intelligence solution in Pakistan in partnership with <a href='https://1link.net.pk/' target='_blank'>1LINK</a> and <a href='https://cydea.tech/' ...

WISeKey Combats Cybercrime With HIRO Cybersecurity Knowledge Automation (AiThority) WISeKey International Holding Ltd a cybersecurity AI and IoT platform company, announced that its HIRO platform is now able to minimize risks of cyberattacks

On Heels of Massive Kaseya Supply-Chain Cyber Attack, Interos Releases Upgraded AI-powered ... (The Bakersfield Californian) Interos, the operational resilience company, today announced that it has significantly enhanced its industry leading AI-powered platform to deliver instantaneous visibility into

Contrast Security Joins Forces With Secure Code Warrior to Deliver Secure Development Training for Customers (Cision) Integration delivers industry-leading just-in-time security training for developers embedded in Contrast UI, IDE plugins, and Secure Code Warrior Jira plugin

Technologies, Techniques, and Standards

FERC and NERC Publish Whitepaper on SolarWinds and Related Supply Chain Compromise (JD Supra) On July 6, 2021, the staff of the Federal Energy Regulatory Commission (FERC) and the North American Electric Reliability Corporation (NERC)...

Crowdsourced ransomware payments tracker launched (iTnews) Aims to provide transparency.

Cybersecurity Experts Explain How You Can Protect Yourself From Ransomware Attacks (NDTV Gadgets 360) The major recommendations in the Ransomware Task Force Report include increased regulation of the cryptocurrency sector.

Tripwire Survey: 98% of Security Professionals Say Multi-Cloud Environments Pose Greater Security Challenges (BusinessWire) Tripwire, Inc., a leading global provider of security and compliance solutions for enterprises and industrial organizations, today announced the resul

Securing Public Cloud Infrastructure Survey (Tripwire) How does your organization handle the security and compliance of your cloud accounts? Download this Tripwire report to see where you fit into the current landscape of public cloud infrastructure and learn about multi-cloud security challenges.

CyberSecurity Is Not Enough: Businesses Must Insure Against Cyber Losses (Joseph Steinberg) Recent crippling ransomware attacks have highlighted the tremendous financial price that businesses often pay after suffering a cyber breach; hacker-inflicted damages such as multi-million-dollar ransoms and even larger recovery costs, harmed reputations, and significant downtimes, which, not that many years ago, were topics of only fictional novels and films, have now become part our collective […]

The COVID-19 vaccines weren’t hacked — this task force is one reason why (The Verge) A cyberattack could have delayed the vaccine.

Don’t be that employee: How to avoid ransomware attacks at work (Washington Post) Tips to avoid clicking something bad — and what might happen if you do

Research and Development

Minim Awarded First of Two Patents Fundamental to Intelligent WiFi (GlobeNewswire News Room) Intellectual property covers cloud-driven methods to detect, identify, register, monitor, and secure all connected devices in the smart home MANCHESTER,...

Legislation, Policy, and Regulation

N. Korea's malicious cyber activities pose threat to U.S., allies: State Dept. (Yonhap News Agency) North Korea poses a significant cyber thr...

WSJ News Exclusive | China’s Cyber Watchdog to Police Chinese Overseas Listings (Wall Street Journal) A powerful agency that China’s President Xi Jinping set up during his first term to police the internet is taking on a new role: regulating U.S.-listed Chinese companies.

UK Government Requests Views on Supply Chain Cybersecurity (JD Supra) The United Kingdom’s Department for Digital, Culture, Media & Sport (DCMS) is requesting views on supply chain cybersecurity, which it will look to...

India’s Growing Cyber Espionage Activities: Security Implications For Pakistan – OpEd (Eurasia Review) For decades espionage has been used by the states to gather confidential or secret information regarding their adversaries but in the past few decades, the states have entered into a new realm of s…

Europe Proposes New Agency to Tackle Money Laundering Problems (Wall Street Journal) The agency would be part of a broader plan to address failures that have made the region a haven for financial crime.

EDPB Issues New Guidance on Storing Credit Card Data for Future Purchases (JD Supra) Online retailers storing credit card data for the sole purpose of facilitating further purchases will likely need to obtain consumer consent. ...

The NSA's 'New' Mission: Get More Public With the Private Sector (Dark Reading) The National Security Agency's gradual emergence from the shadows was "inevitable" in cybersecurity, says Vinnie Liu, co-founder and CEO of offensive security f

The SEC’s Continued Focus on Cybersecurity Enforcement (JD Supra) On June 14, the Securities and Exchange Commission (SEC) announced a $490,000 settlement with the real estate services provider First American...

Proposed law seeks to boost federal cyber workforce thru apprenticeships (SC Media) A recently proposed legislation aims to bolster the federal cyber workforce through an apprenticeship program at CISA.

US Marines get new cyber boss (C4ISRNet) The new leader also commands the Marine Corps Forces Space Command.

WSJ News Exclusive | New York City Opens Cyberattack Defense Center (Wall Street Journal) New York has become the first major U.S. metropolitan area to open a real-time operational center to protect against cybersecurity threats, regional said, bringing businesses together with government agencies to share intelligence.

Litigation, Investigation, and Law Enforcement

Law enforcement facing global surge in ransomware attacks and organized crime violence (Interpol) Worldwide crime pandemic requires coordinated policing response

Bhima Koregaon Case: Govt Can Find Out Who Planted Documents, Says Cyber Expert (TheQuint) An attack of this nature requires intelligence, time and money, said Sandeep Shukla.

European Commission Issues UK Adequacy Decisions (cyber/data/privacy insights) On 28 June 2021, the European Commission issued two adequacy decisions in respect of the UK – one under Regulation (EU) 2016/679 (the EU’s General Data Protection Regulation, or EU GDPR) and another under Directive (EU) 2016/680 (the Law Enforcement Directive). Amongst other things, this mean

Einstein Says No Harm, No Foul In Pa. Data Breach Case (Law360) Einstein Healthcare Network has urged a Pennsylvania state judge to throw out a would-be class action over a recent data breach, arguing that the plaintiff in the case hadn't claimed to have suffered any concrete harm as a result of the cyberattack.

Kroger reaches $5M breach settlement, as Supreme Court defines "harm" (SC Media) Providers face risk of lawsuits amid the rise in data breaches. The Supreme Court decision on “actual harm” may curtail the financial impact.

5 Cybersecurity Risks and 3 Obligations for Law Firms (The National Law Review) Law firms have recently become prime targets for cybercriminals seeking to steal, expose, sell, or otherwise extort confidential information.&nbsp; Both the digitalization of law firms&rsquo; sensitiv

Industry Events

For a complete running list of events, please visit the Event Tracker.

Newly Noted Events

Secure Miami (Virtual, Jul 15, 2021) As the world prepares to move beyond the pandemic, Secure Miami will look at how organizations can chart a secure path despite rising risks. Secure Miami will feature keynotes from some of the industry’s leading experts and informative breakout sessions on a range of topics critical to cybersecurity today. This online event is for executives, industry thought leaders, and IT professionals across industries who are responsible for creating a strategic and tactical cyber-resilient organization. Presented by expert stakeholders from the industry, the program is designed to offer practical guidance on breach prevention and incident response.

The Ransomware and Malware Conundrum (Virtual, Jul 22, 2021) Electrosoft Services, Inc. and the Capitol Technology University are hosting a “4th in the Series” webinar on “The Ransomware and Malware Conundrum”. The two-hour summit will showcase government and industry thought leaders with a focus on the growing Ransomware and Malware menace. A distinguished keynote speaker and industry-government panel will share valuable insights and solutions for creating a more resilient and secure network against future ransomware and malware cyberattacks.

Events

Virtual Cybersecurity Summit Series (Virtual, Jul 8 - Nov 14, 2021) As the first community organizer to bring the live, immersive experience to cybersecurity conferences in North America, Data Connectors has conducted more than 50 virtual events to it's members. We are happy to announce that the Virtual Cybersecurity Summit Series will continue in 2021. summits feature industry experts, government agencies and innovative solution providers all bringing real world experience & knowledge to the forefront on specific cybersecurity topics and concerns.

INTERFACE Kansas City 2021 (Virtual, Jul 15, 2021) Free admission to qualifying IT professionals. Stay current with the technology that runs your organization and secures your operational infrastructure. Join us at INTERFACE for CPE-accredited presentations, panel discussions, and exhibitors covering a variety of topics, as well as the latest innovations and best practices.

Secure Miami (Virtual, Jul 15, 2021) As the world prepares to move beyond the pandemic, Secure Miami will look at how organizations can chart a secure path despite rising risks. Secure Miami will feature keynotes from some of the industry’s leading experts and informative breakout sessions on a range of topics critical to cybersecurity today. This online event is for executives, industry thought leaders, and IT professionals across industries who are responsible for creating a strategic and tactical cyber-resilient organization. Presented by expert stakeholders from the industry, the program is designed to offer practical guidance on breach prevention and incident response.

KCLive Event: The Access Management Playbook: Securing Today’s Organizations (Virtual, Jul 21, 2021) In this virtual event you get to explore the symbiotic relationship between security and risk in successfully managing employee and third-party identities at your organization. Thought leaders and senior practitioners come together to discuss access management strategies that are the need-of-the-hour to kick-start the digital transformation journey.

The Ransomware and Malware Conundrum (Virtual, Jul 22, 2021) Electrosoft Services, Inc. and the Capitol Technology University are hosting a “4th in the Series” webinar on “The Ransomware and Malware Conundrum”. The two-hour summit will showcase government and industry thought leaders with a focus on the growing Ransomware and Malware menace. A distinguished keynote speaker and industry-government panel will share valuable insights and solutions for creating a more resilient and secure network against future ransomware and malware cyberattacks.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.