Russian disinformation at the UN. German police take down the Hydra Market. Compromise at Mailchimp. FIN7's ransomware.

Special Section

By The CyberWire staff.

Fighting in Ukraine shifts as Russia retreats from Kyiv to reconstitute and shift forces to the Donbas and the Black Sea.

The UK's Ministry of Defence watches the redeployment of Russian units as they retreat from scenes of atrocities around their initial objectives and redeploy to the Donbas. Redeployment is unlikely to be swift; the Russian units withdrawing are going to require some reconstitution.

US National Security Advisor Sullivan sees a long war ahead, Bloomberg reports, one that could last for months. “All indications are that Russia will seek to surround and overwhelm Ukrainian forces in eastern Ukraine,” Sullivan said early this week. The coming offensive, US intelligence services think, will have a narrative importance more significant than any tactical success it might achieve: it's likely to be used, assuming things work out as Moscow hopes, as evidence of Russian progress and battlefield competence that (Moscow hopes) will obscure the current record of failure, brutality, and ineptitude.

Russian atrocities draw widespread outrage.

The United Nations Security Council this morning held hearings on Russia's war against Ukraine. The UN Secretary General called for an immediate end to the war against Ukraine ("a humanitarian cease-fire"), Ukrainian President Zelenskyy, who appeared before the Council by video conference, denounced, in detail, Russian atrocities in Bucha and other cities Ukrainian forces have now been retaken. The war crimes he described were horrific. President Zelenskyy asked what the point of the UN Charter can be if its central article, Article One, which prohibits wars of aggression, is so easily flouted by a permanent member of the Security Council. Russia has turned its veto, he said, into a right to kill. He accurately predicted the disinformation Russia would shop in response to evidence of atrocities: "They will blame everyone, just to justify their own actions." His peroration called for equal treatment of all nations, and an end to the privilege Russia has enjoyed as a permanent member of the Security Council. "Either remove Russia as an aggressor and a source of war...or else dissolve yourself altogether." He asked the Council to watch a brief video in which names of towns were displayed, without narration, over images of dead civilians, many of them naked, some of them burned, many of them with hands bound behind their backs, clearly executed at close range.

Russia's representative, in a strikingly mendacious response which President Zelenskyy had accurately predicted, cast Russia as the victim, its invasion as a defensive operation against (again) "Nazis." In a strikingly creative explanation of Russian combat failure, he explained military incompetence as evidence of humanitarian restraint.

Russian cyber operations against Ukraine.

Security firm Intezer followed up CERT-UA's (Ukraine's CERT) discovery of a new malware framework being used in phishing campaigns.

"A recently developed malware framework called Elephant is being delivered in targeted spear phishing campaigns using spoofed Ukrainian governmental email addresses. The four malware components delivered are used for stealing credentials, documents, and to provide remote access to the infected machine.

"Two of these components were first reported on by the Computer Emergency Response Team for Ukraine (CERT-UA) in March 2022. They named the two components GraphSteel and GrimPlant. When investigating these events, we have identified that Elephant has also been delivered via phishing emails from spoofed Ukrainian email addresses. Elephant is a malware framework written in Go. The activity has been attributed to UAC-0056 (TA471, SaintBear, UNC2589) by CERT-UA."

The utility of such a framework in both intelligence collection and battelspace preparation is obvious.

The CyberWire's continuing coverage of the unfolding crisis in Ukraine may be found here.

Summary

By the CyberWire staff

Germany's Bundeskriminalamt, (BKA, Germany's Federal police), today announced its takedown of Hydra Market, the largest Russophone dark web contraband souk. The blockchain analysis firm Elliptic says that it's been able to determine that Hydra Market has processed some $5 billion in Bitcoin since 2016, with its take peaking in 2021. The BKA said that it had seized about 23 million Euros from the illegal trading platform, and that its investigation and takedown had been accomplished in cooperation with international partners, especially US law enforcement agencies. In addition to trading such contraband as illegal drugs and stolen data, Hydra Market was heavily involved in money laundering.

London police may have arrested several alleged leaders of the Lapsus$ Group (and arraigned two of them), but Naked Security reports that the gang's activities seem to have resumed. Evidently some of its members have been carrying on even after the leaders' arrest.

Mailchimp says it's discovered and contained a data breach (accomplished by criminal social engineering). TechCrunch reports that about 300 users' accounts were compromised, and that customer data were extracted from 102 of those. The stolen data appears to have been put to use in phishing attempts against the cryptocurrency and financial services sectors. BleepingComputer reports that cryptocurrency customers appear to be particularly at risk.

According to researchers at Mandiant, the financial cybercrime gang FIN7, hitherto best known for breaking into payment systems and corporate networks, has now added ransomware to its repertoire. FIN7 is now using REVIL, DARKSIDE, BLACKMATTER, and ALPHV ransomware.

Dateline

Ukraine at D+40: Confronting disinformation at the UN. (The CyberWire) Russia recasts, on the ground, combat failure as all part of the plan. At the UN, it recasts that failure as humanitarian restraint.

U.S. National Security Adviser Says Russia Pivoting to Offensive in Ukraine’s East (Bloomberg) President Joe Biden’s national security adviser said the U.S. believes Russia is repositioning forces to focus on an offensive in Ukraine’s eastern Donbas and Luhansk provinces, in a major revision of Moscow’s war goals.

Russian troops readying for big attack in Luhansk region of eastern Ukraine (The Telegraph) Officials say 'we understand that they are preparing for a full-scale big breakthrough'

Russia-Ukraine latest news: Volodymyr Zelensky addresses UN Security Council on Russian 'war crimes' - watch live (The Telegraph) Volodymyr Zelensky, the Ukrainian president, is addressing a United Nations Security Council meeting convened by Britain amid growing outrage over Russian atrocities.

Live Updates: U.N. Security Council to Meet as Evidence of War Crimes Mounts (New York Times) China and Russia are unlikely to support any measures that France, the U.S. and Britain propose. European leaders sought to impose more sanctions, but were divided on whether to ban Russian natural gas.

Ukraine's leader to brief top UN body on alleged massacres (AP NEWS) Ukraine's president planned to address the U.N.'s most powerful body on Tuesday after even more grisly evidence emerged of civilian massacres in areas that Russian forces recently withdrew from .

Russia-Ukraine war: Zelenskyy to address U.N. Security Council amid outrage over Bucha deaths (NBC News) Ukrainian President Volodymyr Zelenskyy will address the United Nations Security Council on Tuesday as Russia faces growing condemnation over alleged atrocities in Bucha.

Ukraine: Secretary-General calls for probe into Bucha killings (UN News) UN Secretary-General António Guterres on Sunday called for an independent investigation into the killing of civilians in the Ukrainian town of Bucha, a suburb of the capital, Kyiv.

Russia to insist on UN Security Council meeting on Bucha situation on April 4 — envoy (TASS) It was stated that the British presidency of the Security Council is trying to deny us Russia's right to request a separate Security Council meeting on the terrible Ukrainian provocation in Bucha

US to seek Russia's suspension from Human Rights Council (AP NEWS) The United States plans to seek a suspension of Russia from its seat on the U.N.’s top human rights body, pointing to increasing signs that Russian forces may have committed war crimes in Ukraine, U.S.

Debunking Russia’s Bucha massacre conspiracy theories (The Telegraph) Observers on social media have been quick to take down Moscow’s claims that the killings of civilians was a hoax

Bucha massacre: ‘We brought the dead here because the dogs were trying to eat them’ (The Telegraph) Under the domes of the Church of St Andrew Pervozvannoho All Saints is an open trench 45 feet long, filled with at least 60 bodies

Bucha survivor: One man was tortured … They cut out his cheek and shot him in the heart (The Telegraph) Vladislav Kozlovsky, a sommelier in Kyiv before the Ukraine war, describes the horrors of being trapped in the town for nearly a month

‘Sitting at Home and Trembling.’ A Town Emerges After a Russian Retreat. (New York Times) Badly frightened and hungry, residents of Nova Basan, a town east of Kyiv, emerged from their cottages and farmhouses on Monday, and described living through the terrifying ordeal of the Russian occupation — detentions, threats and a strict curfew that confined them to their homes with no outside communication for more than a month.

Photos: the Scene Inside Bucha, as Seen by a Post Photographer (Washington POst) Ukrainian forces found mass graves in Bucha...

Satellite images show bodies lay in Bucha for weeks, despite Russian claims. (New York Times) The images rebut Russia’s claim that the killing of civilians in Bucha, near Kyiv, took place after its soldiers had left town.

'Tortured, executed civilians': Reaction to Ukraine war dead (AP NEWS) Global reaction Monday to what appears to be deliberate killings of civilians in Ukraine in areas north of Kyiv, the capital, where Russian soldiers have either retreated or been pushed back:

Pictured: The Bucha mass grave that is so large it can be seen by satellites (The Telegraph) Photos taken from the ground have confirmed that this is a mass grave containing the bodies of Ukrainian civilians

Ukraine mayor’s tortured body found alongside husband and son in mass grave (The Telegraph) Olga Sukhenko's corpse was discovered face down with 'broken arms and fingers' in a burial pit near the town of Motyzhyn

Russia’s Urban Warfare Predictably Struggles (Foreign Policy) Fighting in cities is hard for any military.

Russia is incapable of fighting a ‘long war’ (The Telegraph) The received wisdom that the country’s greater size makes victory over Ukraine inevitable is misguided

The Meaning of Ukraine’s Coming Neutrality (Foreign Policy) History offers clear examples of what neutral status means—and what it doesn’t.

Russia faces growing outrage amid new evidence of atrocities (AP NEWS) Russia faced a fresh wave of condemnation on Monday after evidence emerged of what appeared to be deliberate killings of civilians in Ukraine. Some Western leaders called for further sanctions in response to the alleged atrocities, even as Moscow continued to press its offensive in the country's east.

Outrage widens over Russian attacks Zelensky now calls a ‘genocide’ (Washington Post) Haunting images of dead bodies littering the streets of a Kyiv suburb and reports of civilian executions are triggering new international condemnation against Russia, as Ukrainian President Volodymyr Zelensky demanded accountability for what he said amounts to “genocide.”

Allies want Vladimir Putin to face justice for war atrocities in Ukraine (The Telegraph) Boris Johnson condemns murder of hundreds by Russian troops and promises help in bringing charges at The Hague

Biden: Putin should face war crimes trial for Bucha killings (AP NEWS) President Joe Biden on Monday called for Vladimir Putin to be tried for war crimes and said he’ll seek more sanctions against Russia after what he described as “outrageous” atrocities around Kyiv.

Biden calls for a Putin ‘war crimes trial' (Washington Post) President Biden once again called Russian President Vladimir Putin a “war criminal” and noted the grim scenes emerging as Russian troops pull out of northern areas of Ukraine. He called for gathering more details toward a “war crimes trial.”

Liz Truss: We must inflict ‘new wave’ of punishments on Vladimir Putin after Bucha atrocities (The Telegraph) Foreign Secretary warns only ‘being tough’ on Moscow will end war, as Germany rules out immediate ban on Russian gas imports

Building a war crimes case against Putin's forces must start immediately (The Telegraph) It is vital that Russia's atrocities are documented for the whole world to see

FAST THINKING: How will the West punish Russia for its war crimes? (Atlantic Council) Gruesome images of murdered Ukrainian civilians—evidence of apparent Russian war crimes uncovered in Bucha and other newly liberated towns north of Kyiv—have shocked the world.

War Crimes Watch: Hard path to justice in Bucha atrocities (AP NEWS) The horrific images and stories tumbling out of Ukrainian towns like Bucha in the wake of the withdrawal of Russian troops bear witness to depravity on a scale recalling the barbarities of Cambodia, the Balkans, World War II.

Exiled oligarch calls on other Russian tycoons to break with Putin (Washington Post) Mikhail Khodorkovsky says they must denounce the invasion of Ukraine if they want to be above suspicion of collaborating with the Kremlin.

Bucha’s Atrocities Are Not Russia’s First. They Must Be the Last (Bloomberg) Retreating soldiers are leaving behind evidence of brutal civilian killings. Absent further action to make this war too costly for the Kremlin, this will not be a one-off.

The West must choose: Either arm Ukraine or enable Putin’s genocide (Atlantic Council) Revelations of Russian war crimes outside Kyiv underscore the urgency of providing the Ukrainian military more weapons.

U.S. Drones for Ukraine Will Include Latest Tank Killers (Bloomberg) Newest model versions can destroy Russian tanks, artillery. ‘Flying Shotgun’ is part of new $300 million Pentagon order.

Putin's War: Ukraine can defeat Russia but urgently needs more weapons (Atlantic Council) Western leaders must urgently rethink their cautious attitude towards arming Ukraine and provide the country with the offensive weapons it needs in order to defeat Putin on the battlefield, argues Oleksandr Danylyuk.

Biden doubles down on calling Putin a war criminal: "This guy is brutal" (Newsweek) Images showing civilian bodies dead in the streets of Bucha, Ukraine have sparked international outrage.

'Mindless' Killing in Ukraine Won't Stop Until Biden Changes Strategy (Newsweek) As gruesome scenes showing the human cost of the Ukraine war emerge with the withdrawal of Russian troops north of Kyiv, Vladimir Putin's armed forces are unable to move forward on any front, and are ineffective in the air.

Joe Biden is calling for regime change in Russia and this time it isn't a gaffe (Newsweek) As President Joe Biden challenges Russian counterpart Vladimir Putin's legitimacy, professor Rajan Menon warns of two consequences that could prolong or even deepen the war in Ukraine.

Russian anger at Vladimir Putin can "explode" any time: Alexei Navalny aide (Newsweek) Leonid Volkov, Navalny's chief of staff, told Newsweek that public polls in Russia that show broad support for the war in Ukraine are "pure and simple propaganda."

'Two Russian soldiers dead and 28 in hospital' after eating poisoned pastries from Ukrainian villagers (The Telegraph) Ukrainian intelligence describes the action as an ingenious way to 'offer resistance to the occupying troops by all means possible'

Russia’s war in Ukraine: How it started and where it could lead (European Leadership Network) Russia’s invasion of Ukraine is set to fundamentally transform the international order. Mykola Kapitonenko argues that the Kremlin's miscalculations could prove devastating not only for Russia but for international security as a whole, and he offers some suggestions as to how these global ramifications could be eased.

Bristling Against the West, China Rallies Domestic Sympathy for Russia (New York Times) China’s Communist Party is mounting an ideological campaign aimed at officials and students. The message: The country will not turn its back on Russia.

Ukraine Crisis Tests Cyber Warfare’s Red Lines, Bitdefender Says (BNN Bloomberg) Russia’s invasion of Ukraine has ushered in a new era of cyber warfare, raising the risks of spillover from conventional conflicts, according to the chief executive officer of Bitdefender Holding BV.

Elephant Framework Delivered in Phishing Attacks against Ukrainian Organizations (Intezer) Malware using the elephant malware framework was delivered via phishing emails from spoofed Ukrainian email addresses.

New Android Spyware Uses Turla-Linked Infrastructure (SecurityWeek) Lab52 security researchers have dissected a new piece of Android malware that they discovered while analyzing infrastructure associated with Russian cyberespionage group Turla.

The ruble has bounced back. Are sanctions not working? (Quartz) Barely a month into sanctions on Russia, the ruble has bounded back up against the US dollar. Energy prices and capital controls are propping the currency up.

U.S. stops Russian bond payments, raising risk of default (Reuters) The United States stopped the Russian government on Monday from paying holders of its sovereign debt more than $600 million from reserves held at U.S. banks, in a move meant to ratchet up pressure on Moscow and eat into its holdings of dollars.

Ukraine Update: U.S. Readies More Russian Sanctions This Week (Bloomberg) Ukraine’s Defense Ministry said Russia is regrouping its troops to gain a tactical advantage in the south of the country, storing fuel and organizing hospitals for an influx of wounded as it prepares for a new offensive. Kyiv officials also warned of a coming attack on Kharkiv in the north.

How a Ukraine Conflict Could Reshape Europe’s Reliance on Russia (New York Times) Europe needs Russian natural gas to help heat homes, generate electricity and power factories — a crucial factor in the crisis.

Lithuania says it has stopped importing gas from Russia. (New York Times) Although tiny, Lithuania is the largest economy in the Baltic States and a eurozone member, giving the decision significance to European nations. “If we can do it, the rest of Europe can do it too,” the president said.

Germany main roadblock to tougher Russian sanctions, says Poland's PM (The Telegraph) Berlin is resisting mounting pressure for an embargo on Russian energy imports amid recession fears

Metals World Agonizes Over War But Keeps Buying From Russia (Bloomberg) Companies with long-term deals are still buying Russian metal. A pile-up of Russian metal on the LME could create dislocation.

Fortnite raised $144 million for Ukraine relief (The Verge) A two week effort

Attacks, Threats, and Vulnerabilities

New Hacking Campaign by Transparent Tribe Hackers Targeting Indian Officials (The Hacker News) Researchers have observed a new “Transparent Tribe” hacking campaign targeting Indian government and military entities.

Vendors Assessing Impact of Spring4Shell Vulnerability (SecurityWeek) Companies have started assessing the impact of the Spring vulnerability dubbed Spring4Shell on their products.

SpringShell (Spring4Shell) Zero-Day Vulnerability: All You Need to Know (JFrog) Understand SpringShell (Spring4Shell) vulnerability CVE-2022-22965 exploitation vectors, learn what's vulnerable & discover remediations to this zero-day vulnerability

Spring4Shell – by the numbers (Sonatype) Spring4Shell, a new 0-day RCE, is not quite as bad as Log4shell but has a wide blast radius. We dive into the numbers on how the world is fixing the issue.

Preventing the initial Spring4Shell exploit, a demonstration (Security Boulevard) The hits keep coming. Spring4Shell is the latest zero-day security issue that takes advantage of a vulnerability in a widely adopted application framework for Java – the Spring Framework. Our own data shows 74% of Java applications use Spring Core. This vulnerability impacts Spring MVC and Spring WebFlux applications running on JDK 9+. So far, the issue has been confirmed for Spring applications packaged as WAR files running on Tomcat servers. CVE-2022-22965 has more specifics. Contrast Security has written an initial blog that has been picked-up widely by other publications for its timely and practical information.

TOTOLINK Routers, Other Device Exploits Added to Beastmode Botnet (SecurityWeek) The Mirai-based DDoS botnet known as Beastmode continues to expand its arsenal with at least five new exploits added over the last two months.

FIN7 hackers evolve toolset, work with multiple ransomware gangs (BleepingComputer) Threat analysts have compiled a detailed technical report on FIN7 operations from late 2021 to early 2022, showing that the actor is still very active, evolving, and trying new monetization methods.

Notorious hacking group FIN7 adds ransomware to its repertoire (CyberScoop) Ransomware strains such as Maze, Ryuk and BlackCat have increasingly been part of FIN7's playbook in recent years, Mandiant says.

Hackers breach MailChimp's internal tools to target crypto customers (BleepingComputer) Email marketing firm MailChimp disclosed on Sunday that they had been hit by hackers who gained access to internal customer support and account management tools to steal audience data and conduct phishing attacks.

Email marketing giant Mailchimp has confirmed a data breach (TechCrunch) Email marketing giant Mailchimp said hackers targeted customers in the cryptocurrency and finance sectors.

Emma Sleep Company admits attack on online checkout (Register) Customers wake to a nightmare as payment data pilfered from UK website

Hive ransomware gang strikes Indonesian gas giant PGN (Tech Monitor) With two victims in a matter of days, Hive is one of the most active ransomware gangs around. Businesses should beware.

Wind turbine maker Nordex shuts down systems as cyber attack hits (Wind Power Monthly) Wind turbine maker Nordex shuts down systems as cyber attack hits and other wind energy news & analysis on Windpower Monthly

The Works forced to shut some shops after cyber-attack (Yahoo) The retailer said that five of its 526 shops have temporarily been shut since the attack last week.

LockBit Ransomware Attack Costs CRM Services Provider Over $42 Million (MSSP Alert) Atento, a CRM services provider, experiences $42.1 million in financial losses due to a LockBit ransomware attack dating back to October 2021.

CISA Adds Four Known Exploited Vulnerabilities to Catalog (CISA) CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added vulnerabilities in the catalog, click on the arrow on the of the "Date Added to Catalog" column, which will sort by descending dates.

Vulnerability Summary for the Week of March 28, 2022 (CISA) The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

Trends

Account Takeover Attacks Predicted to Increase in 2022 (PerimeterX) CyberEdge Group released the 2022 Cyberthreat Defense Report detailing the top threats that online organizations are facing. Here are four key takeaways.

WatchGuard | New WatchGuard Threat Lab Report Shows Network Attacks at Highest Point Over Last Three Years (RealWire) Network detections in EMEA quadrupled, with malware detections occurring at nearly twice the rate as the rest of the world. 5 April 2022 – WatchGuard® Technologies’ latest quarterly I

Feedzai Q2 2022 FinCrime Report: The RiskOps Age (Feedzai) Download the Feedzai Q2 2022 Financial Crime Report, based on over 18 billion exclusive transactions to learn how fraudsters are thriving in the online ecosystem

Marketplace

What SentinelOne's Big Deal Means for Investors (The Motley Fool) SentinelOne's significant acquisition is the next chapter in its growth.

Synopsys and Juniper Networks Invest in New Company to Pursue Fast-Growing Silicon Photonics Market (PR Newswire) Synopsys, Inc. (Nasdaq: SNPS) and Juniper Networks (NYSE: JNPR) today announced that they have closed a transaction to form a new, separate...

SolarWinds CEO: Here's what my company learned after facing one of the most sophisticated cyberattacks in history (Fortune) SolarWinds CEO Sudhakar Ramakrishna on how the company moved on from the famous cyberattack attributed to Russia.

Okta: Credibility Has Been Smashed (NASDAQ:OKTA) (SeekingAlpha) Okta shocked investors and customers by delaying a response to a Lapsus$ hack by two months. We believe that OKTA stock could remain in the penalty box in the near term. Read more here.

This Cybersecurity Stock Is a Bargain in Plain Sight (The Motley Fool) Okta has seen its valuation nearly halved, despite its strong business performance.

SINET16 Process & Benefits - SINET (SINET) Key benefits of the SINET16 Innovator Award: The SINET16 Innovator award is a prestigious honor, and is widely recognized and valued within the Cybersecurity industry. SINET16 Innovators are invited to deliver their value proposition on our virtual stage. SINET16 Innovators are promoted in SINET press releases and marketing material. SINET16 Innovators enjoy additional opportunities to present at other SINET supported global venues throughout the year

Renowned Data Privacy Lawyer Dominique Shelton Leipzig Joins Mayer Brown's Growing Los Angeles Office (Benzinga) Veteran data privacy lawyer Dominique Shelton Leipzig has joined Mayer Brown as a partner in the Cybersecurity & Data Privacy practice in Los Angeles, continuing Mayer Brown's strategic expansion efforts on the West Coast.

Dragos Appoints Dawn Cappelli as Director for New OT CERT Program (Business Wire) Dragos Inc., the global leader in cybersecurity for industrial controls systems (ICS)/operational technology (OT) environments, today announced the ap

BlackSky forms a Strategic Advisory Group and appoints three prominent leaders (Help Net Security) BlackSky announced the formation of a Strategic Advisory Group and the appointment of three prominent U.S. leaders with diverse backgrounds.

Microsoft hires former Seattle Police Chief Carmen Best in global security role (Puget Sound Business Journal) Carmen Best stepped down as Seattle Police chief in September 2020, after just over two years. She'll be a director at Microsoft, responsible for global security risks.

Products, Services, and Solutions

Citrix® Modernizes Security to Accommodate Hybrid Work (Business Wire) Employees used to come to the office every day and work from company-managed assets. Today, they may be working at home, in the office, on the road an

SecurityScorecard Selects CrowdStrike to Deliver Powerful, Unified and Continuous Monitoring Solution with Visibility of Real-Time Risk Scores (SecurityScorecard) SecurityScorecard Joins the CrowdStrike Store to Help Organizations Reduce Risk of External and Insider Threats NEW YORK – April 4 , 2022 – SecurityScorecard , the global leader in cybersecurity ratings, today announced an integration with CrowdStrike, a leader in cloud-delivered protection of…

Omagh’s Loughtec announces six-figure cyber partnership with Darktrace (News Letter) Omagh IT and cyber security company LoughTec has announced its partnership with Darktrace, a global leader in cyber security AI.

Incode Technologies Redefines Event Experiences With a Single, Portable ID That Unifies Fan Interactions (Business Wire) Incode, the next-generation identity verification and authentication platform for global enterprises, is redefining event experiences and how stadiums

Technologies, Techniques, and Standards

NIST Seeks Input on International Aspects of the Cybersecurity Framework, Other Resources (NIST) Addressing global needs is a critical part of NIST’s work in the evolution of the Cybersecurity Framework, especially as we continue to see international ada

Council Post: In Cybersecurity, Strengthening Encryption Is Vital (Forbes) Complex systems can break in complex ways.

Council Post: Why Zero Trust Is All About Identity (Forbes) Attack methods are increasingly sophisticated.

Legislation, Policy, and Regulation

Debate erupts at news the White House may scale back DOD cyber-ops authorities (CyberScoop) Cybersecurity and homeland security experts are split on the wisdom of scaling back broad authorities the Department of Defense now has to launch cyber operations.

It’s a big day at the State Department for U.S. cyberdiplomacy (Washington Post) Nearly 100 people will staff a new cyber bureau at the State Department

State Department kicks off new cyber bureau (SC Magazine) For the first time in years, the State Department has a dedicated bureau focused on cyberspace that will “address the national security challenges, economic opportunities, and implications for U.S. values associated with cyberspace, digital technologies, and digital policy.”

State Department formally launches new cyber bureau (The Hill) The State Department launched its new Bureau of Cyberspace and Digital Policy on Monday in what it says is a modernization of the agency aimed at emerging technology issues in diplomacy. A statemen…

State Dept launches new bureau in broader effort to elevate its cyber mission (Federal News Network) The State Department is elevating its cybersecurity mission and is focusing on setting international norms for cyber through its newest bureau.

Litigation, Investigation, and Law Enforcement

Germany takes down Hydra, world's largest darknet market (BleepingComputer) The servers of Hydra Market, the most prominent Russian darknet platform for selling drugs and money laundering, have been seized by the German police.

LAPSUS$ hacks continue despite two hacker suspects in court (Naked Security) Do you know where in your company to report security anomalies? If you receive such reports, do you have an efficient way to process them?

Court largely refuses to dismiss D&O litigation against SolarWinds (Business Insurance) A Texas federal court largely refused to dismiss directors and officers securities litigation filed against SolarWinds Corp. in connection with a December 2020 cybersecurity breach.

Cisco cites judge's family stock holdings in bid to wipe out $2.7 bln award (Reuters) Cisco Systems Inc told a U.S. appeals court Monday that a $2.7 billion patent award against it should be thrown out because the presiding judge's wife owned stock in the company.

Cisco Finds Panel Skeptical of Judge Who Dropped $2 Billion Hit (Bloomberg Law) Two Federal Circuit judges heavily questioned arguments that a $1.9 billion judgment levied against Cisco Systems Inc. should remain in place despite claims the district court judge failed to recuse himself after learning his wife owned Cisco stock.

Cisco Wants $2 Billion Patent Hit Axed Over Judge’s Wife’s Stock (Bloomberg Law) The next steps in Cisco Systems Inc.’s appeal of a $1.9 billion patent infringement award will hinge on whether the district judge should have recused himself after finding out his wife owned stocks in the company.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

Why AV & EDR are Failing to Stop Ransomware & What You Can Do About it (Virtual, Apr 6, 2022) Join our virtual event to learn how to augment your existing cybersecurity infrastructure and finally protect your company from the devastating impact of ransomware. April 6th @12pm ET

(ISC)² SECURE Summit – London (London, England, UK, Apr 7, 2022) (ISC)² SECURE Summits – London is open to both (ISC)² members and non-members. Cybersecurity professionals in every stage of their career are encouraged to participate, from those new to the field to established experts and seasoned practitioners. This one-day event will bring together information security professionals from London and surrounding areas to explore the most current issues impacting cybersecurity. A keynote presentation by Chris Ensor, Deputy Director for Cyber Skills and Growth, National Cyber Skills Center, and exciting breakout sessions will focus on topics such as: Ransomware Incidents: How to Prepare, How to Respond (featuring real-world examples); Security Awareness: Planning and Delivering a Successful Program; Which leading cloud provider has the most effective security features -- AWS, Azure or Google Cloud (GCP)? Attendees will also have plenty of opportunities to meet and network with peers throughout the day.

Identity Management Day Virtual Conference 2022 (Virtual, Apr 12, 2022) The Identity Defined Security Alliance (IDSA), a nonprofit that provides vendor-neutral education and resources to help organizations reduce the risk of a breach by combining identity and security strategies, today announced the Identity Management Day Virtual Conference 2022. The one-day, online event will take place on Identity Management Day, April 12, 2022, and features five panel sessions and an interactive event on Twitter hosted by event co-sponsor, the National Cybersecurity Alliance (NCA). Now in its second year, the mission of Identity Management Day is to educate business leaders, IT decision makers and consumers on the importance of identity management and key components including governance, identity-centric security best practices, processes, and technology, with a special focus on the dangers of not properly securing identities and access credentials.

Security Training and Awareness Conference (Scottsdale, Arizona, USA, Apr 12 - 13, 2022) Elevate your cybersecurity training and awareness programs and learn from the experts at our Regional Conference in Scottsdale, AZ. Swap your pajamas for business casual and join the National Cybersecurity Alliance for the first in-person conference for cybersecurity training and awareness professionals since 2019!

CyberDefenseCon 2022 (Orlando, Florida, USA, Apr 19 - 20, 2022) Hosted by Gary Miliefsky, a globally recognized cyber security expert and the publisher of cyber defense magazine, this is one of the most exclusive, fun and educational CISO conferences of the year, by invitation only for the Top 100 CISOs and Top 100 InfoSec Innovators in the World as well as select Venture Capitalists, Government & Military VIPs and select members of the Press. We will be unmasking the secrets of the experts at cyber defense including two days of intense CISO training from James Henderson, the leading authority on insider threats. Mr. Henderson runs the national insider threat special interest group (NITSIG) and insiderthreatdefense.us and has trained government, military, fortune 1000 as well as mid-market and SMB CISOs.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.