DDoS as threat to e-commerce. Meta's GDPR fine. TikTok challenge spreads malware. US CYBERCOM's support for Ukraine.

Summary

By the CyberWire staff

At a glance.

DDoS as a holiday-season threat to e-commerce.
Meta's GDPR fine.
TikTok challenge spreads malware.
US Cyber Command describes support for Ukraine's cyber defense.

DDoS as a holiday-season threat to e-commerce.

While consumers look to protect themselves from scams when shopping online during the holidays, retailers face an additional threat: distributed denial-of-service (DDoS) attacks intended to make their sites unavailable to customers. Bloomberg Law reports that the motives for such attacks against e-commerce sites vary (it can be anything from extortion to economic disruption to hacktivist protest to the simple lulz), and that the threat actors can range from individuals to nation-state services. While such attacks are usually of relatively short duration, measured in minutes or at most hours as opposed to days, they can nonetheless exact a significant toll from affected merchants. And, unfortunately, victims seldom have any realistic legal recourse to DDoS attacks: the perpetrators are commonly out of reach.

Top 7 AWS security misconfigurations and how to fix them

Migrating to a cloud provider, like AWS, offers numerous benefits to its customers but setup must be done correctly to prevent potential security breaches.

Check out the top 7 AWS security misconfigurations you should be aware of to prevent potential security gaps in your infrastructure and discover remediations including:

Use AWS SCP in AWS Organizations to define safety guardrails
Limit access of Security Groups of AWS RDS instances to only known IPs

Meta's GDPR fine.

The Irish Data Protection Commission has fined Facebook's corporate parent Meta €265 million over a breach that affected personal information of "hundreds of millions" (up to 525 million) of Facebook users, the BBC reports. The case is an unusual one in that most of the data obtained and subsequently dumped on an online forum had been scraped, and not hacked. The Data Protection Commission found Meta in violation of Article 25 of the General Data Protection Regulation (GDPR). The Commission noted in its decision that this wasn't Facebook's first brush with unwelcome and illicit data scraping. The BBC quotes a Facebook spokesman: "We made changes to our systems during the time in question, including removing the ability to scrape our features in this way using phone numbers. Unauthorised data scraping is unacceptable and against our rules and we will continue working with our peers on this industry challenge. We are reviewing this decision carefully." More on this story will appear in the CyberWire's Pro Privacy Briefing later today.

How to create, train, and monitor machine learning models for accurate bot detection.

Machine learning (ML) has been used in cybersecurity for decades. Unfortunately, ML can be as useful to attackers as it is to defenders. Explore the possibilities for applying ML in bot detection and cybersecurity with this guide from DataDome’s SOC and threat research experts. Review common challenges in ML model training and get a step-by-step walk-through of how to create and monitor ML models with two real-life case study examples of ML applied in bot detection.

TikTok challenge spreads malware.

Attackers are exploiting a popular TikTok challenge to distribute malware, according to researchers at Checkmarx. A trending TikTok challenge involves posing naked using a filter called “Invisible Body,” which (they say) replaces the user’s body with a blurred outline. Attackers capitalized on this by purporting to offer another filter that could remove the Invisible Body filter and expose the user’s naked body. This filter is fake, and will install the WASP stealer malware. (If you fall for this, you probably fell for the X-Ray Specs ads in the old comic books.) The researchers observed that more than 30,000 users have joined the attackers’ Discord server so far. BleepingComputer notes that the GitHub repo hosting the malicious code achieved a trending status on GitHub. For more on this cyber-version of X-Ray Specs, see CyberWire Pro.

How did the internet respond to recent celebrity vulnerabilities?

When your business accelerates faster than your cybersecurity capabilities, responding to major vulnerabilities can be difficult. In the 2022 State of Risk & Remediation Report, the Censys Research Team examined recent celebrity vulnerabilities and observed how organizations reacted to each. What did we learn, and how can you apply these insights to your own organization?

US Cyber Command describes support for Ukraine's cyber defense.

US Cyber Command yesterday released a brief and general account that provides some additional insight into when US support for Ukraine's cyber defense began, and what the nature of that support was. The US Cyber National Mission Force (CNMF) deployed a large hunt forward team in December of last year to work with Ukraine's own Cyber Command; that initial deployment continued through March of this year. Despite the aggressive-sounding name, "hunt forward" operations are, US Cyber Command says, defensive in nature. The hunting is conducted in the networks being defended. "Hunt forward operations are purely defensive activities and operations are informed by intelligence."

While US Cyber National Mission Force personnel are no longer physically deployed in Ukraine, continued direct support of Ukraine's cyber defense continues. "CYBERCOM remains committed and continues to provide support to Ukraine, other allies and partner nations, with U.S. joint forces aligned and supporting the European Theater. This support included information sharing of threats and cyber insights, such as indicators of compromise and malware. For example, in July 2022, CNMF publicly disclosed novel indicators to cybersecurity industry partners in close collaboration with the Security Service of Ukraine."

The CyberWire's continuing coverage of the unfolding crisis in Ukraine may be found here.

At Raytheon, Intelligence & Space, if it’s not broken, we break it.

Somebody once said, “if it ain’t broke, don’t fix it.” That somebody didn’t work in cybersecurity. And that somebody didn't work at Raytheon, Intelligence & Space. Here we break the definition of cyber defense: Hiring the sharpest minds, actively hunting threats, and designing one-of-a-kind-never-been-done-before solutions. That’s how we shake up the future and uncover new thinking to protect our customer's most vital infrastructure and our way of life.

Notes.

Today's issue includes events affecting Australia, Belgium, China, the European Union, Germany, Israel, NATO/OTAN, Poland, Russia, Spain, Taiwan, Ukraine, the United Kingdom, and the United States.

Selected Reading

Dateline

Ukraine at D+278: Bakhmut remains Russia's face-saving objective. (CyberWire) Bakhmut becomes Russia's prestige objective as indiscriminate shelling of towns continues wherever Russian systems are in range. US Cyber Command describes its support for Ukraine's defense.

Russia-Ukraine war: List of key events, day 279 (Al Jazeera) As the Russia-Ukraine war enters its 279th day, we take a look at the main developments.

Fighting Rages in Eastern Ukraine as Zelensky Warns of More Russian Missile Attacks (Wall Street Journal) Russia is pushing to seize the city of Bakhmut and achieve a symbolic victory, and dismissing claims that it will abandon the Zaporizhzhia nuclear-power plant.

Russia dismisses speculation it is planning to withdraw from Ukraine nuclear plant (The Hill) The Kremlin on Monday dismissed reports that Russian forces may be planning to retreat from the Zaporizhzhia nuclear power plant in Ukraine. Dmitry Peskov, a press secretary for Russian President …

Torture allegations mount in aftermath of Kherson occupation (AP NEWS) When a dozen Russian soldiers stormed into Dmytro Bilyi's home in August, the 24-year-old police officer said they gave him a chilling choice: Hand in his pistol or his mother and brother would disappear.

The Hard Truth About Long Wars (Foreign Affairs) The conflict in Ukraine won’t end anytime soon.

Russian Exiles Struggle to Form a United Opposition to Putin (Foreign Policy) Historically, Russian emigrants have been reluctant to form exile communities and have tried to assimilate.

Why Putin May Endure (Foreign Affairs) Powerful leaders have often withstood staggering defeats.

NATO set to renew vow on Ukraine membership, boost non-lethal aid (Military Times) Foreign ministers will meet in Bucharest, where, 14 years ago, the alliance decided to allow Ukraine and Georgia to join over vehement Russian objections.

US says Russia abruptly postpones arms control talks (AP NEWS) The Biden administration said Monday that Russia has abruptly and without explanation postponed the scheduled resumption of arms control talks this week. The State Department said Russia had “unilaterally postponed” a meeting of the Bilateral Consultative Commission that was scheduled to begin Tuesday in Egypt and last through next week.

Exclusive: U.S., Russia have used their military hotline once so far during Ukraine war (Reuters) The U.S. initiated a call to communicate concerns about Russian military operations near critical infrastructure in Ukraine.

Senators urge Pentagon to send advanced Gray Eagle drones to Ukraine (Defense News) The senators are pushing the Pentagon to modify the MQ-1C Gray Eagle drones so that the U.S. can transfer them to Ukraine.

Poland wants to divert pledged German air defenses to Ukraine (Defense News) Berlin is unlikely to accept the terms because they would entail sending German forces into Ukraine.

Before the Invasion: Hunt Forward Operations in Ukraine (U.S. Cyber Command) U.S. joint forces, in close cooperation with the government of Ukraine, conducted defensive cyber operations alongside Ukrainian Cyber Command personnel from December 2021 to March 2022, as part of a

More Europeans will perish from energy crisis than Ukraine war death toll (Modern Diplomacy) More people will perish in Europe this winter because of unaffordable household energy costs than those who have died on the battlefield in the Ukraine war, according to research by the British weekly newspaper The Economist. Last week, the United Nations said the official civilian death toll from the Ukraine war has risen to nearly […]

Biden, Macron ready to talk Ukraine, trade in state visit (AP NEWS) French President Emmanuel Macron is headed to Washington for the first state visit of Joe Biden's presidency — a revival of diplomatic pageantry that had been put on hold because of the COVID-19 pandemic.

Attacks, Threats, and Vulnerabilities

China intensifying cyberattacks against Taiwan: report (Taipei Times) Bringing Taiwan to the World and the World to Taiwan

Cyber-Threat Group Targets Critical RCE Vulnerability in 'Bleed You' Campaign (Dark Reading) More than 1,000 systems are exposed to a campaign hunting weak Windows servers and more.

Black Basta Gang Deploys Qakbot Malware in Aggressive Cyber Campaign (Dark Reading) The ransomware group is using Qakbot to make the initial point of entry before moving laterally within an organization’s network.

Infosec researcher reports possible 'massive' Twitter breach (SearchSecurity) Security researcher Chad Loder last week reported a 'massive' Twitter breach involving millions of phone numbers in the U.S. and Europe.

Meta Fined For 2021 Data Breach As Millions Of Twitter Users’ Data Also Leaked (Forbes) A massive data breach may have affected some 5.4 million Twitter user accounts containing non-public information in Europe and the United States.

TikTok ‘Invisible Body’ challenge exploited to push malware (BleepingComputer) Hackers are capitalizing on a trending TikTok challenge named 'Invisible Challenge' to install malware on thousands of devices and steal their passwords, Discord accounts, and, potentially, cryptocurrency wallets.

Hackers are spreading malware via trending TikTok challenge: report (The Record by Recorded Future) Hackers are using the popular “Invisible” TikTok challenge to get people to download information-stealing malware.

Trio of new vulnerabilities allow code manipulation, denial of service (and worse) for industrial controllers (SC Media) The bugs allow for logic manipulation and denial of service, primarily impacting products from two major German vendors: Festo automated controllers and CODESYS runtime.

A flaw in some Acer laptops can be used to bypass security features (Security Affairs) ESET announced the discovery of a vulnerability impacting Acer laptops that can allow an attacker to deactivate UEFI Secure Boot. ESET researchers announced in a series of tweets the discovery of a vulnerability impacting Acer laptops, the issue can allow an attacker to deactivate UEFI Secure Boot. The experts explained that the flaw, tracked as […]

A school told parents only 'limited' data was published by hackers. What the ABC found went far further (ABC) ABC Investigation uncovers large swathes of confidential material widely available on the open internet, ranging from sensitive contracts to privileged legal advice about a student's death.

The alarming risks for Legal Firms Cybersecurity (Salt | Secure Communications) Cybercrime has increased substantially in recent years, harming businesses and key services in unfathomable quantities. Breaches in cyber security cost billions of pounds and are responsible for 50% of all crimes in the UK. Attacks carried out by cybercriminals for personal gain have become increasingly complex, with threats coming from both domestic and foreign […]

Belgian Police Under Fire After Major Ransomware Leak (Infosecurity Magazine) Crime reports dating back 15 years are made public

Stop Before You Shop - Are Your Shopping Apps Sharing Access to Your Device? (Incogni Blog) In a recent consumer survey, 88% of respondents reported having at least one shopping app installed on their mobile device1. Given their popularity, you might

Vulnerability Summary for the Week of November 21, 2022 (CISA) The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

Security Patches, Mitigations, and Software Updates

Chrome fixes 8th zero-day of 2022 – check your version now (Naked Security) There isn’t a rhyme to remind you which months have browser zero-days… you just have to keep your eyes and ears open!

Trends

State of SIEM Report 2022 | Panther Labs (Panther Labs) Panther alleviates the pain of traditional SIEM with detection-as-code, a robust security data lake, & flexible scalability. Visit our website for a demo or pricing.

NSA cyber director talks threats, opportunities (POLITICO) The country’s top cyber warriors are dedicating “substantial resources” to combating ransomware, but attack activity is “back to as much or more than the historical norm,” Rob Joyce said.

What’s next in cybersecurity (MIT Technology Review) “When it comes to really cutting off ransomware from the source, I think we took a step back.”

Don't be fooled by end-of-the-year articles on cybersecurity trends. Most of them aren't focusing on the right thing (Geektime) Why threat intelligence must lead cybersecurity configuration in 2023

The Cloud is a Growing Target for Cyberattacks, A New Sophos Survey Finds (GlobeNewswire News Room) Among Infrastructure as a Service (IaaS) Users, 56% Experienced an Increase in the Volume of Attacks and 67% Were Hit by Ransomware...

The Reality of SMB Cloud Security in 2022 (Sophos News) 4,986 IT professionals in small and mid-sized organizations (SMBs) share their real-world experiences

Marketplace

Cyber Insurers Turn Attention to Catastrophic Hacks (Wall Street Journal) While cyber insurance has evolved significantly in recent years, insurers say they might still be unprepared for the fallout from a catastrophic cyberattack.

Is it worth taking out personal cyber insurance in case you are caught up in a data hack? (the Guardian) Experts say investing in identity theft protection may provide peace of mind, but won’t help recover lost information

RegScale Acquires GovReady to Deliver Leading NIST OSCAL-Enabled GRC Platform (PR Newswire) RegScale, a next-generation Governance Risk and Compliance (GRC) software company, today announced that it has acquired GovReady, an...

Recorded Future Surpasses $250M ARR (Benzinga) Company Reaches Significant Milestone as Intelligence Proves Vital to Defend Against Converging Threats BOSTON, Nov. 28, 2022 /PRNewswire/ -- Recorded Future, the intelligence company, today announced it has surpassed

Cybersecurity Consolidation Continues, Even as Valuations Stall (Dark Reading) Financing and acquisitions are trending toward smaller deals, which means fewer high-valuation purchases and funding, but likely fewer post-merger layoffs as well.

Layoffs Have Gutted Twitter’s Child Safety Team (WIRED) Just one person remains to enforce the company’s ban on child sexual abuse across Japan and the Asia Pacific region.

Aqua Security Named the Top Innovation Leader in Frost & Sullivan Global Cloud-Native Application Protection Platform Report (Aqua) Aqua Security was named a top vendor in Frost & Sullivan’s report: Global Cloud-Native Application Protection Platform (CNAPP) Radar.

Avint Taps BD and Capture Executive Brian Edwards as Its First Executive Director of Growth (PR Newswire) Avint LLC, a fast-growing federal cybersecurity and management consulting firm, today announced the hiring of Brian Edwards as the company's...

HackerOne Appoints Jayson Noland as Chief Financial Officer (HakcerOne) Ex-Cloudflare Executive Will Drive Financial Strategy as HackerOne Continues Platform Expansion SAN FRANCISCO, November 29, 2022: HackerOne, the le

Products, Services, and Solutions

KnowBe4 Launches New Mobile Learner App for Cybersecurity Learning (Dark Reading) KnowBe4 empowers end users by introducing security awareness and compliance training on the go at no additional cost.

CyberCube Account Manager Version 4.0 helps underwriters proactively assess their CAT exposure (Help Net Security) CyberCube launched Version 4.0 of Account Manager, the SaaS solution designed explicitly for single risk (re)insurance underwriters.

AWS releases Wickr, its encrypted messaging service for enterprises (Computerworld) The release of the enterprise version of the encrypted messaging service, announced at AWS re:Invent, is designed to allow secure collaboration across messaging, voice, video and file sharing.

CYE Expands US Footprint by Partnering with Leading Intelligence Firm ISG to Provide Customized Security Solutions to Enterprises that Reduces Cyber Risk Exposure (Benzinga) CYE, the industry leader in cybersecurity optimization platforms, announced today a new partnership with ISG, an intelligence and cybersecurity firm applying its unique DNA

Orange Cyberdefense Unveils Its Security Navigator With OT Hacking Demos (Infosecurity Magazine) The cybersecurity arm of Orange Business Services (OBS) organized a launch event at its Lyon campus, in France, for its latest annual threat report

Fast50 company Mantel Group launches cyber security offering (CRN Australia) Led by CMD Solutions co-CEO Adam Durbin.

Open-Source Tool Tests Java Applications for Unexpected Behaviors (Code Intelligence) The CI Fuzz CLI tool enables developers to find functional bugs and security vulnerabilities by dynamically generating millions of unusual test inputs

Dynatrace Extends Advanced Observability and AIOps to AWS Compute Optimizer (Business Wire) Software Intelligence company Dynatrace (NYSE: DT) announced today its platform natively supports AWS Compute Optimizer, a service that uses customers

Drata Joins AWS ISV Accelerate Program (PR Newswire) Drata, a continuous security and compliance automation platform, today announced it has joined the Amazon Web Services (AWS) Independent...

Nok Nok and UberEther Partner to Deliver Phishing-Resistant MFA Fedram (PRWeb) Nok Nok, a leader in FIDO (Fast IDentity Online) authentication solutions and a founder of the FIDO Alliance, today announced it is partnering with Uber

Technologies, Techniques, and Standards

DOD Releases Path to Cyber Security Through Zero Trust Architecture (U.S. Department of Defense) The Defense Department released its Zero Trust Strategy and Roadmap, which spells out how it plans to move beyond traditional network security methods to achieve multiple cybersecurity goals over the

What the Census Bureau Can Learn From the IRS About Detecting Cyberattacks (Nextgov.com) Inspectors general from Commerce and Treasury present a tale of two testing regimes.

Cybersecurity Tips for SMBs To Avoid Phishing Scams (E-Commerce Times) Hackers understand that SMBs are vulnerable when connected to the internet and that there is a market to monetize stolen data.

An Introductory Guide to the Point-to-Point Tunneling Protocol (PPTP) (TechGenix) What is PPTP? Read this article to learn more about one of the fastest and oldest VPN protocols still in use.

NATO's Cyber Coalition 2022 exercise kicking off in Tallinn (Baltic Times) TALLINN – The NATO cyber exercise Cyber Coalition, starting on Monday at the CR14 foundation in Tallinn, is one of the largest of its kind...

Design and Innovation

A Former Amazonian Hits Bumps in Push to Make Microsoft More Secure (The Information) When Microsoft last year recruited Charlie Bell, a top product engineering executive at Amazon Web Services, it was a major coup for the software giant. Bell had spent 23 years at Amazon—15 of them at AWS, the retailer’s cloud computing unit—where he earned a reputation for being able to ...

Research and Development

Sweden opens advanced automotive cyber security centre (EENewsEurope) Research institute relies on ethical hackers and latest research in cybertechnology to combat increasing threats to linked vehicles.

U.S. Cyber Command, DARPA Initiate Pilot Program (U.S. Cyber Command) The United States Cyber Command (CYBERCOM) and DARPA are kicking off a pilot program aimed at getting new cyber capabilities into the hands of cyber operators faster.Known as Constellation, the pilot

Academia

Norwich University Receives $975k Grant for Computer Security Scholars (PRWeb) Norwich University officials announced a $975,000 grant from the National Science Foundation’s (NSF) Scholarship for Service program. Over the cours

Legislation, Policy, and Regulation

Encouraging self-harm to be criminalised in Online Safety Bill (BBC News) An update to the Online Safety Bill was influenced by Molly Russell who ended her life in 2017.

No ‘bright-line rule’ shines on targeting commercial satellites (The Hill) Cyber counterspace weapons can target both space satellites and ground-based systems by intercepting and monitoring data, corrupting data with malware, or even wresting control of the space system …

Social media giants face multi-million pound fines if they fail to ban child accounts (The Telegraph) In a Telegraph article, Michelle Donelan says new Online Safety Bill will ensure tech firms 'no longer put profit before children’s lives'

EU Council adopts NIS2 directive to harmonize cybersecurity across member states (CSO Online) The NIS2 directive replaces NIS as EU Council seeks to improve resilience and incident response capacities in the EU.

Israel Police, FBI officials call for more aggressive crime tech laws (Jerusalem Post) There has been heavy criticism of the police’s use of one of NSO Group’s tools to hack suspects' cell phones and routinely collect data beyond what court orders stipulate.

What’s in store for cybersecurity in Congress’s stretch run (Washington Post) There could be some cyber hits and misses during Congress’s lame-duck session

Litigation, Investigation, and Law Enforcement

Pegasus spyware inquiry targeted by disinformation campaign, say experts (the Guardian) European parliament is investigating powerful surveillance tool used by governments around the world

Twitter failed to detect upload of Christchurch mosque terror attack videos (the Guardian) Footage was taken down only after the New Zealand government alerted Twitter, which had failed to pick up the content as harmful

Microsoft 365 faces darkening GDPR compliance clouds after German report (TechCrunch) Legal trouble may be brewing for Microsoft in the European Union where an assessment by a working group of German data protection regulators that’s spent around two years looking into a swathe of privacy concerns attached to its cloud-based 365 productivity products — including by engaging directly with the tech giant to try to get […]

Microsoft 365 faces GDPR challenges in Europe following German report (Computing) Microsoft has failed to clarify the wording of its contracts and its data retention and deletion rules don't always adhere to GDPR, German regulators have found

Crypto Exchange Kraken Settles Alleged Sanctions Violations (Wall Street Journal) Cryptocurrency exchange Kraken has agreed to pay more than $362,000 to settle allegations it violated U.S. sanctions against Iran, the U.S. Treasury Department said Monday.

Website offering spoofing services taken offline after joint operation (CSO Online) Law enforcement authorities in Europe, Australia and North America have arrested 142 people in connection with a website that allowed criminals to steal $120 million from victims that had fallen foul of spoofing campaigns.

Voice-scamming site “iSpoof” seized, 100s arrested in massive crackdown (Naked Security) Those numbers or names that pop up when a call comes up? They’re OK as a hint of who’s calling, but THEY PROVE NOTHING

Holiday DDoS Cyberattacks Can Hurt E-Commerce, Lack Legal Remedy (Bloomberg Law) Cyberattacks that knock internet platforms offline temporarily—a particular concern on Cyber Monday—are likely to spike this holiday season, but victims have few legal avenues to seek recovery, attorneys and industry professionals say.

$275M Fine for Meta After Facebook Data Scrape (Dark Reading) Meta has been found in violation of Europe's GDPR rules requiring the social media giant to protect user data by "design and default."

The Pig Butchery Scams That The U.S. Department of Justice Just Busted (CISO2CISO.COM & CYBER SECURITY GROUP) The Pig Butchery Scams That The U.S. Department of Justice Just BustedAuthorities have finally begun to crack down on fake investment platforms used by scammers.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Newly Noted Events

Vision 23: Looking Ahead at 2023 Cyber Threats (Virtual, Dec 13 - Nov 23, 2022) Registration for Vision 2023 is now open! Join us for a half-day virtual conference to hear about the latest attack trends and predictions for the new year from some of the biggest names in cybersecurity. Vision 2023 is dedicated to helping security leaders learn about the evolving threats that modern organizations face—both today and in the future.

Events

Certified CMMC Professional (CCP) 2.0 Exam Prep (Virtual, Nov 28 - Dec 2, 2022) This 5-day CCP course covers the foundational required curriculum along with CMMC Level 2 scoping and the full 110 practices. Edwards Cyber AB approved CCP 2.0 courses enable participants to sit for the CCP exam – making you a valuable resource to a consultancy providing CMMC preparation, C3PAO providing certified assessor support, or organization interested in having in-house CMMC trained resources. Edwards all-star lineup of Provisional Instructors (PIs) includes several of the CMMC industry’s most respected consultants along with Edwards’ internal SMEs to deliver their action packed bootcamps. Learn more and register now.

Healthcare Cybersecurity Forum (Boston, Massachusetts, USA, Dec 5 - 6, 2022) The HIMSS 2022 Healthcare Cybersecurity Forum will explore how the industry is protecting itself today and how it must evolve for the future. As healthcare cybersecurity professionals adapt to new threats, you also must remain focused on safeguarding patients, defending against attackers, and delivering business value. At this year’s forum, you’ll gain actionable insights from leading organizations on how to proactively shield healthcare's expanding digital footprint and secure data inside and outside your enterprise walls.

Open Source Security Summit (Virtual, Dec 8, 2022) Explore advancements in open source security and how using open source tools can build trust with customers and consumers. For the third annual Open Source Security Summit, we will bring together users, business leaders, and industry visionaries to chart a path forward and highlight the future of open source security solutions at this free virtual event.

Ignite '22 (Las Vegas, Nevada, USA, Dec 12 - 15, 2022) Securing our digital future against cyberthreats has never been more critical. Collectively, we have a huge opportunity to do it right. At Palo Alto Networks, our mission is to make sure each day is safer than the one before. But we can’t do that on our own. We’re committed to partnering with the world’s cybersecurity leaders, practitioners and strategists to build the right security architectures of the future. At Ignite ’22 we’ll share our innovation, insights, strategies, and training. We invite you to join us there so that, together, we can build what’s next.

Certified CMMC Professional (CCP) 2.0 Exam Prep (Virtual, Jan 9 - 13, 2023) This 5-day CCP course covers the foundational required curriculum along with CMMC Level 2 scoping and the full 110 practices. Edwards Cyber AB approved CCP 2.0 courses enable participants to sit for the CCP exam – making you a valuable resource to a consultancy providing CMMC preparation, C3PAO providing certified assessor support, or organization interested in having in-house CMMC trained resources. Edwards all-star lineup of Provisional Instructors (PIs) includes several of the CMMC industry’s most respected consultants along with Edwards’ internal SMEs to deliver their action packed bootcamps. Learn more and register now.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.