Further your career and secure your future with an advanced degree from the George Washington University — choose from 100% online master’s in cybersecurity analytics or in cybersecurity policy & compliance. Designed by D.C. experts and taught by cybersecurity leaders, these programs integrate computer science and engineering courses to give you the well-rounded expertise you need for leadership roles and professional advancement. Discover how you can get a world-class education made for working professional.
Today marks the CyberWire's eleventh anniversary. We published our first issue on September 28th, 2012, and many of you have been with us from the beginning. Your readership and support have been invaluable: without you we wouldn't have been able to do it, and it's a pleasure to express our gratitude.
Symantec (a Broadcom company) says the Budworm APT (tracked by others as “Emissary Panda” or “APT27”) in August 2023 used a new version of its SysUpdate backdoor to target “a Middle Eastern telecommunications organization and an Asian government.” The researchers note, “The targeting of a telecommunications company and government also point to the motivation behind the campaign being intelligence gathering, which is the motivation that generally drives Budworm activity. That Budworm continues to use a known malware (SysUpdate), alongside techniques it is known to favor, such as DLL sideloading using an application it has used for this purpose before, indicate that the group isn’t too concerned about having this activity associated with it if it is discovered.”
Building automation company Johnson Controls International has sustained a major ransomware attack that’s affected the operations of several of the company’s subsidiaries, BleepingComputer reports. The attackers have encrypted the company’s VMWare ESXi servers and claim to have stolen more than 27 terabytes of corporate data. BleepingComputer cites a source as saying that the attackers are demanding a $51 million ransom.
Johnson Controls confirmed a “cybersecurity incident” in an 8-K filing with the SEC, stating, “The Company continues to assess what information was impacted and is executing its incident management and protection plan, including implementing remediation measures to mitigate the impact of the incident, and will continue taking additional steps as appropriate. To date, many of the Company’s applications are largely unaffected and remain operational. To the extent possible, and in line with its business continuity plans, the Company implemented workarounds for certain operations to mitigate disruptions and continue servicing its customers. However, the incident has caused, and is expected to continue to cause, disruption to parts of the Company’s business operations.”
These days, everyone is at risk of a software supply chain attack. Traditionally, security has focused on vulnerabilities in the codebase, but the supply chain problem is far broader and deeper.
Get this eBook to learn:
Download the free eBook and get informed guidance on your supply chain security journey!
A divided Privacy and Civil Liberties Oversight Board has reported its recommendations concerning Section 702 of the Foreign Intelligence Surveillance Act.
The first seven recommendations are calls for Congressional action:
The remaining recommendations concern procedures Executive agencies might adopt.
Section 702 has been controversial for what critics see as its potential for abusive surveillance of US citizens. Intelligence and law enforcement agencies defend the law as an essential authority for collection, especially collection against terrorist organizations.
Nextgov outlines the potential cybersecurity implications of a US government shutdown, noting that around 80% of employees at the Cybersecurity and Infrastructure Security Agency (CISA) would be furloughed during a shutdown. Rep. Shontel Brown (Democrat of Ohio) compared the effects of a government shutdown to those of a ransomware attack, saying it “would be dangerous, destructive, and disastrous.” Brown added that a shutdown “would undercut organizations and state and local governments that are relying on federal funds to prevent the crippling ransomware attacks we are discussing in this very hearing.”
Rep. Nancy Mace (Republican of South Carolina) countered that the White House could choose to designate CISA employees as essential workers in the event of a shutdown.
(Added, 3:15 PM ET, September 28th, 2023.) Debrup Ghosh, Staff Product Manager at Synopsys Software Integrity Group, noted the difficulty of staffing an agency during a budget impasse. “Based on the U.S. Department of Homeland Security Procedures Relating to a Lapse in Appropriations – only about 414/2269 employees (about 15%) at the Cybersecurity and Infrastructure Security Agency would be retained. As we have seen with instances where the nation’s infrastructure has been threatened, for example the Colonial Pipeline, the industry leans on CISA for guidelines and best practices related to Incident Detection, Response, and Prevention for novel threats and vulnerabilities. With reduced staffing at CISA, these timelines to react may be impacted, and business leaders should have contingency plans in place to engage cybersecurity consulting firms at short notice to protect critical infrastructure and respond quickly to potential cyberattacks.”
To coincide with Cybersecurity Awareness Month, Fortra’s Terranova Security is proud to host a new edition of the Gone Phishing Tournament.
Co-sponsored by Microsoft, the event uses real-world simulations to establish accurate phishing benchmarking statistics to help you drastically reduce your cyber security risk levels.
In 2022, over 1.2 million participating end users tested their cyber knowledge during the Gone Phishing Tournament. Can your team outsmart this year’s simulation? Register for free.
Aprio has released the results of a survey looking at cybersecurity in the manufacturing industry, finding that “nearly two-thirds of manufacturers experienced unauthorized access to their companies’ networks and data in the past year.” The survey also found that “fewer than half of companies surveyed report having a cybersecurity policy and only 36% have enhanced IT security.”
Aprio adds, “Manufacturers can leverage digital tools to achieve competitive advantage by sharing information across functions and with supply-chain partners to improve productivity and respond in real-time to operational problems. But most companies are not utilizing this – in fact, 39% of surveyed manufacturers are using 5G networks and only 21% are using edge computing.”
X (formerly Twitter) has disabled a feature for reporting election misinformation, Reuters reports. The Information says X has also cut half of its election integrity team, including the team’s head, Aaron Rodericks. X owner Elon Musk said in a post that the team “was undermining election integrity.”
The Hill notes that X said last month that it was expanding its elections safety team to “focus on combating manipulation, surfacing inauthentic accounts and closely monitoring the platform for emerging threats.”
Cloud risk can grow faster than your AWS bill (true story).
That’s why Wiz partnered with Wiley to create the AWS Security for Dummies eBook. This free pdf contains 46 pages of expert tips to harden your AWS environment, including:
Grab your free digital copy now and boost your AWS security posture.
Several Russian airlines warned customers to expect difficulties at the gates. Aeroflot, Pobeda, Azur Air, and Rossiya at least have experienced problems with their check-in systems. Aeroflot offered an explanation in its Telegram channel: “Attention to passengers flying on Aeroflot Group airlines. Due to a global failure in the Leonardo reservation system, check-in at airports in the company’s route network is difficult." "Global" should be interpreted as "general," because Leonardo is a home-grown Russian airline reservation system. It was developed by Sirena-Travel, a subsidiary of the Russian state-owned tech conglomerate, Rostec, in 2014, but the system came into use only last year, when Western tech companies pulled out of the Russian market after the invasion of Ukraine.
Cybernews describes the issue as a distributed denial-of-service (DDoS) attack, with Leonardo "flooded" by traffic. The IT Army of Ukraine, a cyber auxiliary group operated on behalf of Ukraine, claimed responsibility. “While you’re sipping your artisanal latte, our 'noble' neighbors to the north are stuck in queues, trying to book flights,” the IT Army taunted in its Telegram channel. “Well done, IT Army!” The attack was over in a matter of hours, and service is now said to be returning to normal.
The CyberWire's continuing coverage of Russia's war against Ukraine, with special attention to the cyber phases of that war, may be found here.
The most popular email app is also the most targeted one. Out-of-the-box M365 security may leave your inbox vulnerable to attacks. Mimecastis optimized for M365 so that you can install the best email security in minutes and neutralize threats. Start a free trial today to fill the gaps in email security and help your employees and business Work Protected.
Today's issue includes events affecting Armenia, Azerbaijan, China, NATO/OTAN, New Zealand, Poland, Russia, Slovakia, Ukraine, the United Kingdom, and the United States.
Ukraine at D+581: Nuisance-level DDoS. (CyberWire) Nuisance-level hacktivism hits Russian airlines. The Russian Foreign Ministry blames Anglo-Saxonia for strikes against the Black Sea Fleet.
Russia-Ukraine war: List of key events, day 582 (Al Jazeera) As the war enters its 582nd day, these are the main developments.
Russia-Ukraine war at a glance: what we know on day 582 of the invasion (the Guardian) Ukraine claims to have shot down 34 of 44 drones; Greenpeace criticises monitoring of Zaporizhzhia nuclear power plant; UK defence secretary visits Kyiv
Ukraine-Russia war: Children evacuated from front line villages ahead of expected fighting (The Telegraph) Ukraine said it had evacuated all children from several towns and villages in Zaporizhzhia in a sign of possible intensified fighting in the area.
Who’s Gaining Ground in Ukraine? This Year, No One. (New York Times) Although both sides have launched ambitious offensives, the front line has barely shifted. After 18 months of war, a breakthrough looks more difficult than ever.
Russia accuses Ukraine's Western allies of helping attack its Black Sea Fleet headquarters (AP News) Russia has accused Ukraine’s Western allies of helping plan and conduct last week’s missile strike on the Black Sea Fleet’s headquarters in Crimea.
‘Pathetic remnants’ of Wagner return to fight in Ukraine (The Telegraph) Scattered mercenary fighters are having ‘no significant impact’ on the battlefield, claims Kyiv
Secretary General in Kyiv: Ukraine is closer to NATO than ever before (NATO) Secretary General Jens Stoltenberg visited Kyiv on Thursday (28 September 2023), underscoring NATO’s powerful support for Ukraine in talks with President Volodymyr Zelenskyy and his government. Calling Kyiv “a city with a special place in the hearts of the free world,” Mr Stoltenberg paid tribute to President Zelenskyy’s leadership and the heroism of the Ukrainian armed forces, welcoming that Ukraine is “gradually gaining ground” in its hard-fought counteroffensive.
Joint press conference by NATO Secretary General Jens Stoltenberg with the President of Ukraine Volodymyr Zelenskyy (NATO) (As delivered)
National Armaments Directors Meet in Support of Ukraine (U.S. Department of Defense) National Armaments Directors from more than 40 countries, the European Union and NATO gathered in Brussels to further ongoing efforts aimed at solving industrial base and sustainment challenges in
Poll Shows Slovaks Split Ahead Of Elections With Ukraine In Spotlight (RadioFreeEurope/RadioLiberty) Slovak opposition party Smer, led by former Prime Minister Robert Fico, holds a narrow lead over its liberal challenger ahead of weekend elections that have revealed stark dividing lines over whether the country should continue to support Ukraine or instead seek closer ties with Russia.
Zelensky’s blunders risk alienating Ukraine’s allies (The Telegraph) Kyiv‘s ingratitude towards Poland has escalated into active animosity
Russia seeks to rejoin UN Human Rights Council despite its war on Ukraine (CNN) Russia is formally seeking to rejoin the United Nations’ Human Rights Council, nearly 18 months after it was suspended from the body following its invasion of Ukraine.
1984 And George Orwell Live Again In Putin’s Russia (Forbes) Orwell’s message to Russians is that freedom and happiness go together, and dictators lie to promote tyranny over liberty.
Putin and Prigozhin went through an ‘amazing transformation,’ says former Kremlin speechwriter (Record) Abbas Gallyamov, now persona non grata with the Putin regime, talks with the Click Here podcast team about the Russian president and the late mercenary leader.
Aeroflot, other airlines’ flights delayed over DDoS attack (Cybernews) Aeroflot and several other Russian airlines were forced to delay flights after pro-Ukrainian attackers flooded Russia’s airline ticket reservation system.
The elite Russian spy embedded in the heart of Europe (The Telegraph) Jan Marsalek was a high-flying executive until his secrets began to spill out. Now, there’s been an astonishing twist...
Russia reminds Hillary Clinton of her own gaffe in response to dig at Putin (the Guardian) Speaking of Ukraine war, Clinton said ‘too bad Vladimir, you brought it on yourself’, to which Kremlin pointed out 2009 mistake
Binance to Exit Russia With Sale to New Crypto Exchange CommEX (Wall Street Journal) Binance, the world’s largest cryptocurrency exchange, is exiting Russia by selling its operations there to a new crypto exchange known as CommEX. “As we look toward the future, we recognize that operating in Russia is not compatible with Binance's compliance strategy,” said Noah Perlman, Binance's
How a Google loophole lets drug dealers hijack nearly any website — including our own (Business Insider) When Google updated how it crawled the web, drug dealers took advantage, turning unsuspecting websites into advertisements for their wares.
‘Snatch’ Ransom Group Exposes Visitor IP Addresses (KrebsOnSecurity) The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. The leaked data suggest that Snatch is…
Threat Actors Exploit the Tensions Between Azerbaijan and Armenia (Fortinet) In 1923, the Soviet Union created the Nagorno-Karabakh Autonomous Oblast (an oblast is an administrative region or province) within the Azerbaijan Soviet Socialist Republic. This oblast has a 95% ethnically Armenian population.
Budworm: APT Group Uses Updated Custom Tool in Attacks on Government and Telecoms Org (Symantec Enterprise Blogs) Previously unseen version of SysUpdate used in August 2023 campaign.
Apache NiFi CVE-2023- 34468 RCE Vulnerability Analysis and Exploitation (CYFIRMA) EXECUTIVE SUMMARY CVE-2023-34468 is a critical security vulnerability affecting the Apache NiFi project; a data integration and automation tool. The...
HiddenGh0st Malware Attacking MS-SQL & MySQL Servers (Cyber Security News) A remote control malware called Gh0st RAT, which is popular with Chinese threat actors and has publicly available source code was created by China's C. Rufus Security Team.
Vulnerability in popular ‘libwebp’ code more widespread than expected (Record) Initial alerts about a bug in the obscure but widely used libwebp library have expanded into concerns that it affects not only web browsers like Chrome, but also many other common pieces of software.
Building automation giant Johnson Controls hit by ransomware attack (BleepingComputer) Johnson Controls International has suffered what is described as a massive ransomware attack that encrypted many of the company devices, including VMware ESXi servers, impacting the company's and its subsidiaries' operations.
Johnson Controls reports data breach after severe ransomware attack (BeyondMachines) On September 27, 2023, multinational manufacturing conglomerate Johnson Controls International was impacted by a severe ransomware attack affecting critical IT infrastructure, including VMware ESXi servers, and causing disruptions across the company and its subsidiaries. The attack originated from Johnson Controls' Asia offices, encrypted vital devices, claimed theft of 27 terabytes of corporate data. The attackers are demanding a $51 million ransom.
Russian zero-day seller offers $20M for hacking Android and iPhones (TechCrunch) A company that acquires and sells zero-day exploits — flaws in software that are unknown to the affected developer — is now offering to pay researchers
Mozilla Releases Security Advisories for Thunderbird and Firefox | CISA (Cybersecurity and Infrastructure Security Agency CISA) Mozilla has released security updates to address vulnerabilities for Thunderbird 115.3, Firefox ESR 115.3, and Firefox 118. A cyber threat actor could exploit these vulnerabilities to take control of an affected system.
Cyber Security Report 2023 (Check Point Software) Check Point’s 2023 Cyber Security Report looks back on a tumultuous 2022, which saw cyberattacks reach an all-time high in response to the Russo-Ukrainian war.
Aprio Releases U.S. National Manufacturing Survey, Highlighting the Need for Improved Operational Excellence, Digitization and Cybersecurity Practices (Aprio) Aprio Insights on the Aprio Releases U.S. National Manufacturing Survey, Highlighting the Need for Improved Operational Excellence, Digitization and Cybersecurity Practices. Read the article.
Forrester Research into Future-proofing Fleet Management in a Hybrid World (HP Wolf Security) Don’t let cyber threats get the best of you. Read our post, Forrester Research into Future-proofing Fleet Management in a Hybrid World, to learn more about cyber threats and cyber security.
IRONSCALES Q3 Threat Index Reveals AI is Ushering in a Golden Age of Social Engineering (IRONSCALES) IRONSCALES Threat Index reveals emerging threats created by generative AI evade traditional defenses, BEC attacks are on the rise.
Behaviors and Attitudes of IT Leaders Toward Their Organizational Approach to Data Management (Veritas) The effect of improper data management goes far beyond security—so it’s critical to get it right
Palo Alto Networks in advanced negotiations to acquire Dig Security in $300-$400 million deal (CTech) Palo Alto is closing on two acquisitions of Israeli startups, with negotiations currently also ongoing to purchase Talon Cyber Security for $600-$700 million
Sources: Palo Alto Networks in advanced talks to buy Talon and Dig in a $1B security sweep (TechCrunch) Palo Alto Networks' stock price has been on the rise on the back of strong earnings and growing demand for cybersecurity services, and now the company is
CrowdStrike makes a breakout move (Security | TechTarget) CrowdStrike's annual Fal.Con event brought promises of platform expansion, generative AI features and cloud security.
Nexusflow Raises $10.6 Million Seed, Harnessing Generative AI to Revolutionize Cybersecurity (Business Wire) Nexusflow was founded by AI experts Professor Kurt Keutzer from the Berkeley AI Research (BAIR) Lab and Professor Jiantao Jiao, along with industry AI leader Jian Zhang. (Photo: Business Wire)
Absolute Software Recognized as a Leader in G2 Fall 2023 Grid Reports for Endpoint Management and Zero Trust Networking (Business Wire) Overwhelming majority of Secure Endpoint and Secure Access users rate Absolute 4 or 5 stars
Checkly Named a Cool Vendor in the 2023 Gartner Cool Vendors in Monitoring and Observability Report (PR Newswire) Checkly, the leading provider of monitoring solutions powered by a Monitoring as Code (MaC) workflow, today announced its inclusion in the 2023 Gartner Cool...
VulnCheck Expands Executive Leadership Team to Accelerate Growth and Meet Surging Demand for Vulnerability, Threat and Exploit Intelligence (Business Wire) Former [redacted], Rapid7, Finite State, and runZero leaders bring decades of experience building, scaling, and marketing world-class cybersecurity organizations and products
Niloo Razi Howe Joins NetSPI Board of Directors (PR Newswire) NetSPI, the global leader in offensive security, today announced the appointment of Niloo Razi Howe to its Board of Directors. Niloo brings an...
CrowdStrike hires Blackberry vet as channel and distribution strategy lead (CRN) Lucy Evans joined the cybersecurity vendor in September
Visa Program Combats Friendly Fraud Losses For Small Businesses Globally (Business Wire) New Changes to its Dispute Rules and Processes Gives Small Businesses More Tools to Fight Fraud and Could Save Small Businesses Over $1 Billion Globally Over the Next Five Years
Meet MadPot, a threat intelligence tool Amazon uses to protect customers from cybercrime (US About Amazon) Curbing cybercrime is no easy task, but Amazon has been quietly doing its part with exceptional results.
How AWS threat intelligence deters threat actors | Amazon Web Services (Amazon Web Services) Every day across the Amazon Web Services (AWS) cloud infrastructure, we detect and successfully thwart hundreds of cyberattacks that might otherwise be disruptive and costly. These important but mostly unseen victories are achieved with a global network of sensors and an associated set of disruption tools. Using these capabilities, we make it more difficult and […]
Noname Security’s API Security Report Reveals API Security Incidents are Escalating (GlobeNewswire News Room) Report finds 94% of security professionals are confident in their current application testing tools yet, 78% have experienced an API security incident in...
Open Sourcing Our Lateral Movement Detection Tool: LATMA (Silverfort) We have created an open-source lateral movement analyzer tool (LATMA) which identifies all suspicious movements in an environment.
Musk's X disabled feature for reporting electoral misinformation - researcher (Reuters) Elon Musk's X, formerly called Twitter, disabled a feature that let users report misinformation about elections, a research organisation said on Wednesday, throwing fresh concern about false claims spreading just before major U.S. and Australian votes.
Musk’s X Cuts Half of Election Integrity Team After Promising to Expand It (The Information) Elon Musk’s X, formerly known as Twitter, is cutting around half of the global team devoted to limiting disinformation and election fraud on the platform, including the head of the group, according to three people familiar with the situation. The cuts come less than a month after the company ...
Codasip picks Verilock for secure hardware authentication (eeNews Europe) Hardware authentication implements future-proof security functionality based on patented Entropy Extraction Device (EED) technology.
Bitwarden Adds Passkey Two-Factor Authentication to the Individual Free Account (Business Wire) Providing everyone access to passwordless 2FA extends the Bitwarden mission to deliver security for all
Bitdefender Unveils Powerful New Threat Intelligence Solution (Bitdefender) New Offering for Security Operation Centers, Managed Security Service Providers and Technology Partners Delivers Contextualized Security Intelligence to Drive Better Cybersecurity Decision Making, Product Capabilities, and Operational Efficiency
The Future of Travel Has Arrived: Entrust Emerges as Global Leader in Seamless Travel and Digital Travel Credentials (Business Wire) With several successful implementations now facilitating seamless travel and border crossing, Entrust is now a global leader in implementing Digital Travel Credentials to transform the travel experience
Aviatrix Certified Engineer (ACE) Program Launches Multicloud Network Security Specialty Training (Aviatrix) Aviatrix, the pioneer of Secure Cloud Networking, today announced the launch of its Aviatrix Certified Engineer
Tech giants ramp up cloud security under pressure from Washington (Washington Post) The moves are prompted by a hack over the summer that allowed imposters access to email accounts of U.S. government officials
IT vs. OT: Understanding the Key Differences in Cybersecurity (Cybersecurity Exchange) Explore the key differences between Information Technology (IT) & Operational Technology (OT). Learn how IT & OT differ and their significance in Cybersecurity
Nationwide Wireless Emergency Alert Test Set for Oct. 4 (US Cellular) The Federal Emergency Management Agency (FEMA), in coordination with the Federal Communications Commission (FCC), will conduct a national test of the Integrated Public Alert and Warning System (IPAWS) on Oct. 4, 2023*. This is inclusive of Wireless Emergency Alerts (WEA), and a test alert will be sent to all wireless...
FEMA and FCC Plan Nationwide Emergency Alert Test for Oct. 4, 2023 (FEMA) FEMA, in coordination with the Federal Communications Commission (FCC), will conduct a nationwide test of the Emergency Alert System (EAS) and Wireless Emergency Alerts (WEA) this fall.
Space Force contracts for new ‘zero-trust’ data protection (Defense One) It’s hard to upgrade infrastructure, especially if it's related to space.
Secure Code Warrior to Host 3rd Annual Devlympics Competition (Business Wire) Held during Cybersecurity Awareness Month, global tournament enables DevOps community to test their skills against vulnerabilities
UK government disbands independent AI and data ethics advisory board (Computing) Decision comes ahead of global AI safety sumit being held in the UK in November
New Zealand Bolsters Cybersecurity in US Defense Exercise (The Defense Post) The New Zealand Defence Force has tested its cybersecurity capabilities and cyber threat preparedness in a US-led exercise.
Report on the Surveillance Program Operated Pursuant to Section 702 of the Foreign Intelligence Surveillance Act (U.S. Privacy and Civil Liberties Oversight Board) The Privacy and Civil Liberties Oversight Board’s July 2014 Report on the Surveillance Program Operated Pursuant to Section 702 of the Foreign Intelligence Surveillance Act (hereinafter “2014 PCLOB Report”) is a comprehensive public report that for the first time provided an unclassified description of the intricacies of this complex program.
Split privacy board urges big changes to Section 702 surveillance law (Washington Post) The fight over an expiring program gets messier, with a key panel divided 3-2 over how to curb abuses
Democrats fear cyberattacks as government shutdown looms (Nextgov.com) Lawmakers are expressing concerns that the shutdown could radically hinder the work of the Cybersecurity and Infrastructure Security Agency in responding to major ransomware incidents and other digital intrusions.
CISA and FEMA Open the Application Process for the Tribal Cybersecurity Grant Program (Cybersecurity and Infrastructure Security Agency) Today, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Emergency Management Agency (FEMA) announced the opening the application process for $18.2 million available through the Tribal Cybersecurity Grant Program (TCGP) to help tribal governments address cybersecurity risks and threats.
NSTAC report details abuse of domestic infrastructure findings and recommendations (Center for Cybersecurity Policy and Law) We've seen a growing number of foreign actors using U.S. commercial network infrastructure to launch cyber-attacks and a new report from the National Security Telecommunications Advisory Committee (NSTAC) details findings and recommendations to deal with the abuse of domestic infrastructure (ADI).
RICO class-action data privacy lawsuit filed against H&R Block, Google, Meta (Record) The suit alleges the three companies’ joint conduct with tracking pixels should be considered a pattern of racketeering on a “massive scale.”
Crypto Regulatory Affairs: arrests made in Hong Kong after JPEX exchange warning (Elliptic) Police in Hong Kong have arrested six individuals following regulatory warnings about an alleged rogue crypto exchange.
Chase U.K. to Block Crypto Payments Citing Fraud, Scams (Coindesk) Starting Oct. 16, the bank will decline customer attempts to make payments related to crypto assets via debit card or outgoing bank transfers.
A 23-year-old was arrested for gun possession. It led the FBI to a global Satanic cult (the Guardian) Angel Almeida’s alarming social media posts led authorities to 764, a group that abuses minors and circulates violent videos
Public bodies expose victims' details to domestic abusers (Computing) Poor procedures and training have been blamed for human errors in matters of life and death.
Domestic abuse victims put at risk after data breaches revealed their locations to alleged abusers (Sky News) In one case a family had to be immediately moved to emergency accommodation - with the breaches having taken place at organisations including a law firm, a police service and local councils.
Over 50 arrested after mobs ransacked Philadelphia stores. Dozens of liquor outlets are shut down (AP News) Dozens of people face criminal charges after authorities said groups of thieves working together smashed their way into stores in several areas of Philadelphia and fled with merchandise.
For a complete running list of events, please visit the Event Tracker.
Trellix Public Sector Cybersecurity Summit (Washington, DC, USA, Oct 12, 2023) Join top technology leaders from across the public sector at the Trellix Public Sector Cybersecurity Summit as they discuss emerging topics in cybersecurity like ransomware, zero trust, global security and XDR. Throughout the summit, you’ll have the opportunity to engage in conversations about how the arrival of AI will intersect with public sector cybersecurity, evolving partnerships to strengthen threat intelligence, how to navigate, take action on and go beyond new cybersecurity policy directives, and much more. 2023 Cybersecurity Summit attendees are eligible to receive continuing professional education (CPE) credits. Attendees can earn a maximum of 4 CPE credits in information technology.
Netskope SASE Week 2023—Where Security & Network Professionals Go! (Virtual, Sep 26 - 28, 2023) Join Netskope and your colleagues for a masterclass in SASE. Hear executives, industry experts, partners and special guests talk about the art of juggling network transformation and evolving security threats, how to track budgets and manage increasing complexity.
Innovate Cybersecurity Summit (Scottsdale, Arizona, USA, Oct 1 - 3, 2023) Innovate Cybersecurity Summit is a highly anticipated summit that brings together Cybersecurity Executives and CISOs from all corners of the country to the tranquil Arizona desert, assembling a national community of professionals for three days of exclusive, invite-only discussion and learning. Attendees can expect a world-class experience with access to insightful CISO panels and education sessions that explore best practices and real-world challenges, unparalleled networking opportunities, and unique engagement with the industry’s latest cybersecurity technology solutions and vendors. A must-attend event for CISOs and leading Cybersecurity Practitioners looking to stay ahead of the game!
RH-ISAC Cyber Intelligence Summit (Dallas, Texas, USA, Oct 2 - 4, 2023) The Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC) has announced the agenda for the upcoming RH-ISAC Cyber Intelligence Summit. The conference, scheduled to take place on October 2-4 in Dallas, Texas, brings together industry leaders, cybersecurity practitioners, and thought influencers for a three-day event that explores the latest trends, challenges, and solutions in the ever-evolving landscape of cyber intelligence. The member-driven agenda features a diverse array of sessions, workshops, and presentations designed to empower participants with actionable insights to safeguard their organizations against modern cyber threats.
2023 RH-ISAC Cyber Intelligence Summit (Dallas, Texas, USA, Oct 2 - 4, 2023) The RH-ISAC is proud to bring you the 2023 RH-ISAC Cyber Intelligence Summit this October 2-4, 2023. This will be our second year at the Hilton Dallas/Plano Granite Park in Plano, Texas. Join us for a Welcome Reception on October 2, followed by a two-day conference on October 3-4 that brings together top cybersecurity leaders and teams representing the most prominent organizations in retailers, restaurants, hotels, gaming casinos, food retailers, consumer products, and other consumer-facing companies. Called the “Crown jewel of RH-ISAC offerings,” the annual event brings together members from the strategic, operational, and tactical levels to participate in interactive, practitioner-led case studies showcasing what works – and sometimes what does not work – in addressing the threats and challenges of the retail and hospitality industries. The RH-ISAC Summit features an RH-ISAC member-driven agenda including sessions delivered by prominent thought leaders, and experts from the provider community. This event inlcludes collaborative workshops, cybersecurity exercises, and exceptional networking opportunities. This is the “can’t miss” event for cybersecurity professionals from the retail and hospitality industries. We look forward to seeing you in October 2023.
Uniting Women in Cyber 2023 (Arlington, Virginia, USA, Oct 3, 2023) Uniting Women in Cyber (UWIC) 2023 convenes a powerful and diverse network of cyber leaders and experts to discuss emerging trends and actionable strategies. Join discussions and highly interactive breakout sessions about emerging global trends and technologies, as well as the importance of cybersecurity for the sustainable success of nations, organizations, and communities.
