Somebody once said, “if it ain’t broke, don’t fix it.” That somebody didn’t work in cybersecurity. And that somebody didn't work at Raytheon, Intelligence & Space. Here we break the definition of cyber defense: Hiring the sharpest minds, actively hunting threats, and designing one-of-a-kind-never-been-done-before solutions. That’s how we shake up the future and uncover new thinking to protect our customer's most vital infrastructure and our way of life.
Tune in to the newest episode of our Special Editions podcast to hear Brandon Karpf, our Director of New Markets, interview a very special guest - ChatGPT, an AI chatbot launched by OpenAI. Our CSO, Rick Howard, also joins in to analyze & discuss potential use cases for the cybersecurity community. Check out this one-of-a-kind interview. Listen now
A study by Kaspersky describes the criminal labor market. Think of it as a cybercriminal’s Indeed. The Kaspersky report analyzed long-term and full-time job listings on 155 dark web forums from January 2020 through June 2022. Research found a high density of posted ads in March of 2020, suspected to be so because of the pandemic and the changing nature of the labor market. Hackers and APT groups are found to be the key employers, often searching developers (who comprise 61% of the total job listings). The highest salary shown for a developer was listed as $20,000 a month, though the median pay for the listings averaged between $1,300 and $4,000 a month for most IT professionals, with the highest medians seen in reverse engineer positions. For more on the cyber underworld's labor market, see CyberWire Pro.
Why are you struggling with interpreting threat intel by yourself? Engage Nisos to achieve better risk insights and outcomes. Rely on the experts with a managed service that gives you the people, process, and technology to control costs while improving your defenses. Nisos leverages automation efficiency and analyst expertise that eliminates noise, identifies risks, and prioritizes your company-specific threats. We help you respond to threats faster and more effectively through assessments, monitoring, and investigations.
Cisco AppDynamics has published a report looking at the increase in application security risks over the past several years. The survey found that “89% of technologists report that their organization has experienced an expansion in its attack surfaces over the last two years, and 46% state that this is already presenting increasing challenges.” Most respondents believe the main reason for this increase is the rapid adoption of IoT devices, the cloud, and hybrid work. Additionally, 92% of respondents “admit that the rush to rapidly innovate and respond to the changing needs of customers and users during the pandemic has come at the expense of robust application security during software development.” For more on the survey, see CyberWire Pro.
Did you know that CyberWire Pro offers five tailored briefings to help you focus in on your area of cybersecurity speciality? With daily Privacy and Policy briefings and weekly Research, Business and Disinformation briefings, you can dive right into topics that interest you the most. PLUS, get ad-free listening of all of our public podcasts and exclusive CyberWire Pro podcasts like CSO Perspectives and extended Interview Selects. Subscribe today for only $99/year and get all of this content and more! Subscribe today. Subscribe today.
Cybersecurity firm Armorblox this morning detailed a new phishing campaign in which the hackers purport to be from DocuSign in an attempt to harvest credentials. The campaign begins with an email appearing to originate from DocuSign, with the subject line reading “Please DocuSign: Approve Document 2023-01-11.” The phishing email sender name reads “Docusign,” though the email address itself has no connection with DocuSign, nor does the domain. The phish requests the review and signature of a document. If clicked, the “VIEW COMPLETED DOCUMENT” button redirects to a malicious webpage. The page appears to be a Proofpoint login screen, though in actuality, if entered, the login credentials would be harvested. The language in the subject line of the email instills a sense of urgency in the victim. Both DocuSign and Proofpoint’s legitimacy were leveraged by the attackers to instill trust in those targeted. The accurate emulation of a DocuSign workflow also increased trust and likelihood of successful interactions for hackers. For more on this credential-harvesting campaign, see CyberWire Pro.
Researchers at DomainTools describe a fraud technique known as “pig butchering,” in which a threat actor poses as a financial advisor in order to build trust with a victim. Eventually, the scammer convinces the victim to invest in a phony cryptocurrency or another fraudulent venture. The researchers outline one of these scam campaigns based in West Africa that has targeted “several hundred financial advisors.” The attackers use LinkedIn and other professional networking services to research and contact their targets. They also advertise their services on TikTok, Instagram, and other social media platforms.
The scammers also set up professional-looking websites, which are often modified versions of legitimate financial advisor sites. They use bulletproof hosting providers (in this case SpeedHost247), so their sites won’t be taken down during the course of these lengthy scams. The attackers use live chat widgets on the sites to talk to their victims, then move the conversation to email or WhatsApp. The scammers generally try to avoid talking to the victim over the phone. For more on this social engineering campaign against financial advisors, see CyberWire Pro.
At least fourteen US medical centers (among them Duke University Hospital in North Carolina, Stanford Healthcare and Cedars-Sinai in California, University of Pittsburgh Medical Center, and Jefferson Health, Philadelphia, in Pennsylvania, according to the Carolina Journal) were hit by distributed denial-of-service (DDoS) attacks yesterday. The incidents are being attributed to the Russian cyber auxiliary Killnet. The American Hospital Association warned its members yesterday that, "The hacktivist group ‘KillNet’—has targeted the U.S. healthcare industry in the past and is actively targeting the health and public health sector. The group is known to launch DDoS attacks and operates multiple public channels aimed at recruitment and garnering attention from these attacks." This week's DDoS attacks seem to have been quickly contained and mitigated, which has normally been the case with earlier Killnet actions.
An alert issued by the US Department of Health and Human Services' Health Sector Cybersecurity Coordination Center (HC3) assessed the implications of the threat. "KillNet has been using publicly available DDoS scripts and IP stressers for most of its operations." These have been an offer for some time in the criminal-to-criminal underground markets. Law enforcement organizations have been able to take down some of those services and indict some of the operators, but HC3 cautions that the threat's far from over: "Despite this success, it remains unknown if (and how) this law enforcement action might impact KillNet which turned its DDoS-for-hire service into a hacktivist operation earlier this year. Furthermore, it is likely that pro-Russian ransomware groups or operators, such as those from the defunct Conti group, will heed KillNet’s call and provide support. This likely will result in entities KillNet targeted also being hit with ransomware or DDoS attacks as a means of extortion, a tactic several ransomware groups have used."
The SwiftSlicer wiper ESET researchers found in some Ukrainian systems is being associated with Russia's GRU, specifically with the Sandworm group controlled by that military intelligence service. Cyber Security Connect observes that Sandworm has a history. "In particular, the group targeted Ukraine’s power grid in 2015, which saw experts from the University of California’s Berkeley School of Law call upon the International Criminal Court in The Hague to label the attack — and other Russian cyber aggressions — a war crime."
The GRU and FSB have both recently been seen to be active in Russia's war against Ukraine. Researchers have also observed SVR activity, SecurityWeek reports. Russia's foreign intelligence service (tracked variously as Cozy Bear, the Dukes, Nobelium, Yttrium, and APT29) has used diplomatic-themed lures as phishbait, Recorded Future's Insikt Group concluded late in 2022. It's not clear who the targets are, but diplomatic bait seems particularly effective against a range of prospects, included but not limited to embassies and diplomatic staff, during periods of heightened international tension. Recorded Future follows the subgroup responsible as BlueBravo, and notes that it overlaps APT29 and Nobelium. "In October 2022 we identified BlueBravo staging GraphicalNeutrino malware within a malicious ZIP file," their report says, adding, "The staging and deployment of this ZIP file overlaps with the previously employed dropper EnvyScout, the use of which is linked to APT29 and NOBELIUM." BlueBravo is notable for its abuse of legitimate services.
In fairness, TASS presents a very different picture of the cyber phases of Russia's hybrid war. Remarks by Russia's Deputy Foreign Minister are worth quoting at length. "In 2022, Russia faced unprecedented external cyberattacks. In fact, we became the target of coordinated aggression involving intelligence agencies, transnational IT corporations and ‘hacker activists' from the collective West and its puppets.... Not only are we recording a rise in attacks, but their complexity is also growing.... Our ill-wishers seek to cause as much damage as possible, using all the possible tools to hit our country’s critical infrastructure. The government sector took the main blow in 2022. The number of such attacks doubled and even tripled in the past year. We recorded numerous attacks on the Russian Foreign Ministry’s information resources. Ukraine, which has long lost its independence, is used by its sponsors as a springboard for cyberattacks on Russia and its partners." That's one way of looking at it.
The CyberWire's continuing coverage of Russia's war against Ukraine may be found here.
Today's issue includes events affecting Bahrain, China, France, Germany, Israel, the Republic of Korea, Morocco, Russia, Ukraine, the United Arab Emirates, the United Kingdom, and the United States.
And Creating Connections is up: Log4Shell lessons: Software is less vulnerable – but threats remain. Read the whole thing.
Ukraine at D+341: Killnet hits US hospitals. (CyberWire) Cyber operations continue in the hybrid war, but again without obvious signs of coordination with kinetic action at the tactical or operational levels.
Russia-Ukraine war live: Ukraine to receive up to 140 tanks in ‘first wave’, says Kuleba (the Guardian) Ukrainian foreign minister says first deliveries to come from coalition of 12 countries
Russia-Ukraine war: List of key events, day 342 (Al Jazeera) As the Russia-Ukraine war enters its 342nd day, we take a look at the main developments.
'The situation is stably f----d': Russians close in on gateway to Bakhmut (The Telegraph) The lifeline in this small town is the 'point of invincibility' - a ground-floor room with electricity, heat and phone signal
Ukraine-Russia war latest: Waves of Russian troops 'crushed' in fresh assault on strategic eastern town (The Telegraph) Waves of Russian troops are being "crushed" during a fresh assault on a strategically important town in eastern Ukraine.
Russia Freed Prisoners to Fight Its War. Here’s How Some Fared. (New York Times) Tens of thousands of inmates have joined a mercenary group fighting with the Kremlin’s decimated forces in Ukraine. Some of them are returning to civilian life with military training and, in many cases, battlefield traumas.
Rebuilding in a warzone: no time for grand visions in Ukraine (the Guardian) As people try to reconstruct their lives, the focus is on critical projects vital to the country’s survival
Why Crimea Is Not a Bridge Too Far (Foreign Policy) Withholding support for Ukraine in reclaiming the territory risks undermining gains made thus far.
Biden seemingly rejects request to send U.S. F-16s to Ukraine (POLITICO) But the administration has yet to hold high-level discussions about arming Kyiv with the jets, a U.S. official said later.
Biden rules out sending F-16s to Ukraine but Macron may still commit French fighter jets (The Telegraph) French President does not rule out delivering warplanes if the move is ‘not escalatory’ and ‘not likely to touch Russian soil’
Gates: A lot of US military aid to Ukraine ‘could have been done sooner’ (The Hill) Former Defense Secretary Robert Gates said on Sunday that a lot of the U.S.’s military aid to Ukraine “could have been done sooner.” “I think the only thing I would have sai…
NATO chief urges Seoul to send military support to Ukraine (AP NEWS) NATO Secretary-General Jens Stoltenberg on Monday called for South Korea to provide direct military support to Ukraine, saying Kyiv is in urgent need of weapons to fight off the prolonged Russian invasion.
South Korea Could Sweep Up Europe’s Tank Market (Foreign Policy) Germany’s self-inflicted wound has left defense partners looking for alternatives.
Russia becomes target of West’s coordinated aggression in cyberspace — MFA (TASS) In 2022, Russia faced unprecedented external cyberattacks
Russian foreign ministry claims to be the target of ‘coordinated' cyber aggression (The Record from Recorded Future News) Russia’s deputy foreign minister claimed this weekend that the country has been the target of “coordinated aggression” in cyberspace.
BlueBravo Uses Ambassador Lure to Deploy GraphicalNeutrino Malware (Recorded Future Insikt Group) BlueBravo is a threat group tracked by Recorded Future’s Insikt Group that overlaps with the Russian advanced persistent threat (APT) activity tracked as APT29 and NOBELIUM. APT29 and NOBELIUM operations have been previously attributed to Russia’s Foreign Intelligence Service (SVR), an organization responsible for foreign espionage, active measures, and electronic surveillance.
Russia-Linked APT29 Uses New Malware in Embassy Attacks (SecurityWeek) Russia-linked cyberespionage group APT29 has been observed using embassy-themed lures and the GraphicalNeutrino malware in recent attacks.
Pro-Russian Hacktivist Group ‘KillNet’ Threat to HPH Sector (Health Sector Cybersecurity Coordination Center) The hacktivist group ‘KillNet’—has targeted the U.S. healthcare industry in the past and is actively targeting the health and public health sector. The group is known to launch DDoS attacks and operates multiple public channels aimed at recruitment and garnering attention from these attacks.
HC3 TLP Clear Analyst Note: Pro-Russian Hacktivist Group Threat to HPH Sector (American Hospital Association) The hacktivist group ‘KillNet’—has targeted the U.S. healthcare industry in the past and is actively targeting the health and public health sector.
HHS, AHA Warn of Surge in Russian DDoS Attacks on Hospitals (Gov Info Security) Government authorities and industry groups are warning the healthcare sector of ongoing denial of service attacks on hospitals and other medical entities by Russian
Russian hackers allegedly take down Duke University Hospital’s website (Carolina Journal -) Russian hackers were allegedly behind a cyberattack that took down 14 hospital systems websites across the country Monday, including Duke University Hospital in Durham.
The Evolution of DDoS: Return of the Hacktivist (FSISAC) A joint report by FS-ISAC and Akamai to educate our community on the new and evolving threat of DDoS, the business risks it poses, and best practices on mitigation for the sector to better combat these attacks
Ukrainian organisations getting hit by destructive new SwiftSlicer malware (CyberSecurity Connect) Experts at security company ESET spotted the malware - which they are dubbing SwiftSlicer - in operation on January 25, and it is believed to have been deployed by the Sandworm hacking group.
Hackers Use New SwiftSlicer Wiper To Destroy Windows Domains (TechJuice) Researchers have found a new data-wiping malware used by hackers to destroy Windows domains. Security researchers have named it SwiftSlicer,
Ships Are Flying False Flags to Dodge Sanctions (Foreign Policy) Illegal Russian tankers are a maritime nightmare.
The Dangerous Consequences of Threat Actors Abusing Microsoft’s “Verified Publisher” Status (Proofpoint) New Malicious Campaign Abuses Microsoft’s “verified publisher” status to successfully proliferate malicious OAuth apps, targets UK-based users
Serious Security: The Samba logon bug caused by outdated crypto (Naked Security) Enjoy our Serious Security deep dive into this real-world example of why cryptographic agility is important!
Phony, malicious Bitwarden ads slip past Google's watch (PCWorld) Google hosted ads that sent users to a fake Bitwarden login site
Breaking the Impersonation: Armorblox Stops DocuSign Attack (Armorblox) This blog examines a credential phishing attack that impersonated the brand DocuSign in an attempt to steal victims' login credentials. The email attack bypassed Microsoft Office 365 Email Security and Proofpoint and had the potential to land in the inboxes of over 10,000 end users.
Disclosing a New Vulnerability in JWT Secret Poisoning (CVE-2022-23529) (Unit 42) We discovered a new high-severity vulnerability (CVE-2022-23529) in the popular JsonWebToken open source project.
CyRC Vulnerability Advisory: CVE-2023-23846 Denial-of-Service Vulnerability in Open5GS GTP Library (Synopsys Application Security Blog) Learn about CVE-2022-23846, a denial-of-service-vulnerability affecting GTP libraries found in Open5GS.
Following the Scent of TrickGate: 6-Year-Old Packer Used to Deploy the Most Wanted Malware (Check Point Research) Research by: Arie Olshtein Executive summary Introduction Cyber criminals increasingly rely on packers to carry out their malicious activities. The packer, also referred to as “Crypter” and “FUD” on hacking forums, makes it harder for antivirus programs to detect the malicious code. By using a packer, malicious actors can spread their malware more easily with […]
Most Criminal Cryptocurrency Funnels Through Just 5 Exchanges (WIRED) The crypto money-laundering market is tighter than at any time in the past decade, and the few big players are moving a “shocking” amount of currency.
No Blocking, No Issue: The Curious Ecosystem of Financial Advisor Impersonation Scams (DomainTools) Pig butchering activity has been observed in Southeast Asia, but in our latest blog post, we’ll examine a cluster of similar activity operating out of West Africa using financial impersonation
Critical OpenEMR vulnerabilities may allow attackers to access patients' health records (Help Net Security) Three critical vulnerabilities in OpenEMR can be chained to achieve RCE on a server running the open-source electronic health record system.
Third-party data breach round-up: mscripts, Diligent, Mailchimp (Healthcare IT News) Recent attacks on healthcare provider business associates, including prescription and hosting platforms, expose more PII and PHI. Newly compromised email lists may be used for phishing attacks.
TSA issues security directive to airports, carriers after 'no-fly' list leak (The Record from Recorded Future News) TSA issued a security directive to all U.S. airports and air carriers demanding tougher cybersecurity rules after the leak of the no-fly list.
The Untold Story of a Crippling Ransomware Attack (WIRED) More than two years ago, criminals crippled the systems of London’s Hackney Council. It's still fighting to recover.
IT specialists search and recruitment on the dark web (Securelist) We have analyzed more than 800 IT job ads and resumes on the dark web. Here is what the dark web job market looks like.
Cybercrime job ads on the dark web pay up to $20k per month (BleepingComputer) Cybercrime groups are increasingly running their operations as a business, promoting jobs on the dark web that offer developers and hackers competitive monthly salaries, paid time off, and paid sick leaves.
Report on hackers' salaries shows poor wages for developers (Register) Salary report shows OKish pay, plus the possibility of getting ripped off and the whole prison thing
Cybercrime groups offer six-figure salaries, bonuses, paid time off to attract talent on dark web (CyberScoop) Despite the obvious risks, jobs with hacking groups can be alluring for those who need the money or want to do the work.
Ransomware attack on Indianapolis Housing Agency leaks sensitive info on 200,000 residents (The Record from Recorded Future News) The Indianapolis Housing Agency is notifying more than 200,000 people that their information was leaked during an October ransomware attack.
Exabeam Survey Finds Organizations Prioritize Prevention Over Detection While Breaches Continue to Rise (Exabeam) Research also shows the inability to prevent bad things from happening as the worst part of a security job with more than a third of respondents unsure they could tell their boards that no adversaries are inside
New Report Finds Increase in DDoS Attacks Targeting the Financial Services Industry (PR Newswire) FS-ISAC, the member-driven, not-for-profit organization that advances cybersecurity and resilience in the global financial system, and Akamai...
Kroll Cyber Data Breach Outlook - 2023 (Kroll) Kroll's Data Breach Outlook ranks the most-breached industries of the year. In 2022, health care overtook finance as the most-breached industry, accounting for 22% of the breaches handled by Kroll, compared to 16% in 2021; a 38% increase year over year (YoY). Finance dropped to second place with 19% of the cases in 2022, a 3% drop from 2021 where it accounted for 22% of breach cases.
150+ Million Americans Victims of Credit Card Fraud Up from 127 Million a Year Ago, According to New Security.org Annual Research (GlobeNewswire News Room) Security.org (https://www.security.org) annual research out today finds more than 150 million Americans...
Saviynt Raises $205M; Founder Rejoins as CEO, Appoints Seasoned President to Accelerate its Leadership in Identity Management (Business Wire) Saviynt, a leading provider of intelligent identity and access governance solutions, today announced that it has closed $205 million in growth financi
Trulioo Launches New Global Identity Verification Platform (Trulioo) Trulioo released its new industry-defining global identity platform, showcasing the company’s expertise and innovation in helping businesses worldwide.
Booz Allen's acquisition pace is slower than it expected (Washington Technology) Integration is the firm's current focus now that the EverWatch purchase has closed, as is hiring.
Swimlane Announces Record Year with 123% New ARR Growth (Business Wire) 14 New Fortune 500 Companies Choose Swimlane as Sole Source for Security Automation
Aqua Security Named as Leader and Outperformer in GigaOm Radar Report for Container Security (Aqua) Aqua Security today announced that it ranked as an Outperformer and Leader in innovation in the GigaOm Radar for Container Security.
Versa Networks Awarded Top Intel® Network Builders Winners’ Circle 2022 Award (Business Wire) Versa Networks, the recognized leader of single-vendor Unified Secure Access Service Edge (SASE), today announced it was awarded the highest level of
Simone Biles, Cybersecurity And Foster Care: Why The Best Collaborations Are Often Unexpected (Forbes) If your business is looking for a next-level collaboration, think outside the box to make it happen — take Simone Biles and Axonius, for example.
Trinity Cyber Appoints Frank Koehl to Lead Product Development (Trinity Cyber) Trinity Cyber Appoints Frank Koehl to Lead Product Development
RMC Appoints Retired Four-Star Navy Admiral James Foggo III as Board Chair (PR Newswire) RMC, the leader in Mission Assurance, Risk Management and Industrial Cybersecurity solutions, today announced the appointment of Admiral James...
Mimecast Names David Helfer as Chief Revenue Officer (GlobeNewswire News Room) Global Sales Executive Joins Email and Collaboration Security Company to Build on Momentum...
Radware Introduces New Cybersecurity Partner Program (GlobeNewswire News Room) Enhances partner experience and increases financial incentives...
Guardz Launches to Secure and Insure Small Businesses from Rising Cybersecurity Threats (PR Newswire) Guardz, the cybersecurity company building a safer digital world for small businesses, today launched from stealth to secure and insure small...
Cloudflare to Offer Comprehensive Email Security & Data Protection Tools to Protect Enterprises from Phishing Attacks (CIOReview) Cloudflare to Offer Comprehensive Email Security & Data Protection Tools to Protect Enterprises from Phishing Attacks By CIOReview - The CIO can deploy advanced Zero Trust email security tools such as Remote Browser Isolation and Data Loss Prevention with any...
Aqua Security Named as Leader and Outperformer in GigaOm Radar Report for Container Security (GlobeNewswire News Room) Earning the highest rank in innovation, the report validates Aqua’s leadership in cloud native security and CNAPPs...
Cerberus Sentinel Announces Strategic Partnership with Kivu Consulting (GlobeNewswire News Room) Global cybersecurity services firm broadens team in incident response, digital forensics, and ransomware negotiation...
Varonis Announces Proactive Incident Response for SaaS Customers (GlobeNewswire News Room) World-class cybersecurity team will proactively monitor customer data and respond to threats
GroupSense Launches New, Individualized VIP Monitoring Service (GroupSense) In our latest service offering, your VIPs and executives will be protected from cyber threats.
As Malicious Open Source Packages Proliferate, Checkmarx Announces Supply Chain Threat Intelligence for Faster, Easier Identification of Potential Threats (PR Newswire) Checkmarx, the global leader in developer-centric application security solutions, announced today the immediate availability of Supply Chain...
Dremio and Privacera Announce Latest Integration Introducing Advanced Data Security Governance Capabilities on Data Lakehouses (PR Newswire) Dremio, the easy and open data lakehouse, and Privacera, the only open-standards based data security governance leader founded by the creators...
TripleBlind Collaborates with Mayo Clinic Platform To De-Identify Patient Data, Strengthen Privacy, and Improve Global Health Care Outcomes (GlobeNewswire News Room) TripleBlind, the leader in automated, real-time data de-identification, today announced an expanded...
SentinelOne and KPMG Announce Alliance to Accelerate Cyber Investigations and Response (Business Wire) SentinelOne (NYSE: S), an autonomous cybersecurity platform company, today announced an alliance with KPMG LLP, the audit, tax and advisory firm, to a
Confluent Enables Enterprises to Build a Secure Shared Services Platform for Data Streaming to Maximize Cost Efficiency (Confluent) The first fully managed Apache Kafka® service with OAuth helps businesses automate identity management, reducing the operational burden of scaling workloads
Menlo Security Cloud Security Platform receives FedRAMP® Authorization (Menlo Security) Menlo Security announced that the Menlo Security Cloud Security Platform has received Authorization to Operate at the moderate level under FedRAMP.
Varonis Announces Proactive Incident Response for SaaS Customers (Varonis) World-class cybersecurity team will proactively monitor customer data and respond to threats
VertexGraph delivers Zero Trust Network Access 2.0 (ZTNA 2.0) remote file access to AEC firms (GlobeNewswire News Room) VertexGraph brings much-needed innovation to Architecture, Engineering, and Construction (AEC) firms to solve some of the toughest collaboration challenges...
Redaction: how to properly hide sensitive text on a PDF document (Panda Security Mediacenter) You can use redaction to hide part of the text on a PDF document so that it can not be read. Here is how to redaction works.
NSA expands grant for compliance curriculum (University of North Georgia) The NSA has provided additional funding for its grant supporting UNG's creation and marketing of graduate and undergraduate certificates in compliance and ethics, including a total of 100 tuition waivers.
ChatGPT Is Making Universities Rethink Plagiarism (WIRED) Students and professors can’t decide whether the AI chatbot is a research tool—or a cheating engine.
The Abraham Accords expand with cybersecurity collaboration (Washington Post) U.S., allies in Middle East and North Africa broaden collaboration on cyberdefense
US stops provision of licences for export to China's Huawei (CRN Australia) Could mean total ban on American tech for the Chinese telco gear vendor.
CISA establishes new office to ‘operationalize’ supply chain security (Federal News Network) CISA’s new office is looking to move beyond guidance and policies to help agencies move out on security their IT supply chains.
US Surgeon General says 13-year-olds are too young to be on social media (ABC News) Meta, Twitter and other social media platforms currently allow 13-year-olds to join.
US Surgeon General says 13-year-olds are too young to be on social media (Good Morning America) Meta, Twitter and other social media platforms currently allow 13-year-olds to join.
MI5 breached law with five-year data retention (Computing) MI5 workers improperly held people's intercepted data for nearly five years, an independent tribunal concluded on Monday, criticising the spy agency for its "serious failings."
Wealthy Russian undertook $90 mln hack-and-trade scheme, U.S. says at trial (Reuters) A wealthy Russian businessman with ties to the Kremlin made tens of millions of dollars trading on secret financial information obtained by hackers about multiple companies before it was public, a U.S. prosecutor said Monday at the start of his trial.
FTC orders Chegg to improve 'lax security' (EdScoop) The Federal Trade Commission has given edtech company Chegg 90 days to improve its data security practices.
How the Silk Road Affair Changed Law Enforcement (Security Intelligence) Shutting down The Silk Road set the stage for future action against darknet marketplaces forever. Here's how the saga unfolded.
The media is blowing Biden’s documents ‘scandal’ out of proportion | Margaret Sullivan (the Guardian) The news media has greeted the supposed scandal of Biden’s mishandling of classified documents with breathless glee
For a complete running list of events, please visit the Event Tracker.
Virtual See Jane Salon - Closing the Cyber Gender Gap (Virtual, Jan 31, 2023) Women make up only 24% of the cybersecurity workforce, despite the fact that women make up 51% of our global population. With over 600,000 cybersecurity jobs currently sitting open it’s now more important than ever to start building a more diverse pipeline of workers, so that women and girls everywhere can see themselves in cyber. Join the Institute in partnership with Craig Newmark Philanthropies as we hear from leading organizations within the Cyber Civil Defense Initiative like Girl Scouts of Greater New York, Black Girls Hack, Aspen Digital, National Cybersecurity Alliance and more who are working to create opportunities for women and girls to pursue careers in cybersecurity.
Reframe WIT 2023 (Stretford, England, UK, Mar 30 - 31, 2023) March 2023 sees Reframe Women in Tech return on a bigger scale than ever before. This will be the third time our inspiring and inclusive not-for-profit event has taken place, and we’re proud to see the impact it has had across the community and the technology industry. This year, we’ve got even more to share and as a result, the event will take place across two days, featuring keynote speeches, panels and workshops designed and curated to leave you feeling energised and motivated. Expert leaders, fresh first-time speakers and everyone inbetween will contribute learnings, demonstrate powerful vulnerability and inspire us all. These two days of community and collaboration are built to empower you towards success.
Insider Threat Program Development - Management Training Course (Laurel, Maryland, USA, Jan 30 - 31, 2023) The training course will be taught at the Johns Hopkins University Applied Physics Laboratory, in Laurel, Maryland. This highly sought after and very comprehensive 2 day training course will ensure the Insider Threat Program (ITP) Manager/ Senior Official (Insider Threat Analyst, FSO, CSO, CISO, Etc.), and others who support the ITP (Human Resources, IT, Network Security, Etc.), have the Core Knowledge, Blueprint, Resources needed for developing, managing, enhancing an ITP / ITP Working Group. Our student satisfaction levels are in the exceptional range. Over 900+ individuals have attended this training course and received ITP Manager Certificates.
CybertechGlobal Tel Aviv (Tel Aviv, Israel, Jan 30 - Feb 1, 2023) Cyber is all around us—it is one of the most trending topics in the tech and business arenas. It is a whole-encompassing industry that is not only about threats, but also covers the scope of digitalization and opportunities in the realm of innovation. From Tel Aviv and Rome, to Tokyo, Singapore, Panama, and more, Cybertech is the cyber industry’s foremost B2B networking platform conducting industry-related events all around the globe. Our conferences and exhibitions serve as the go-to place to make business happen and learn all about the latest technological innovations, challenges, and solutions to combating threats within the global cyber arena. Cybertech events feature top executives, government officials, leading decision-makers from a wide range of sectors including critical infrastructure, insurance, retail, health and government, defense, R&D, manufacturing, automotive, and more! Multinational corporations, startups, private and corporate investors, venture capital firms, experts, and clients—come and meet all the key players from the cyber industry and be immersed in everything there is to offer. Cyber. We live it. Breathe it. All at the forefront of global innovation.
Virtual See Jane Salon - Closing the Cyber Gender Gap (Virtual, Jan 31, 2023) Women make up only 24% of the cybersecurity workforce, despite the fact that women make up 51% of our global population. With over 600,000 cybersecurity jobs currently sitting open it’s now more important than ever to start building a more diverse pipeline of workers, so that women and girls everywhere can see themselves in cyber. Join the Institute in partnership with Craig Newmark Philanthropies as we hear from leading organizations within the Cyber Civil Defense Initiative like Girl Scouts of Greater New York, Black Girls Hack, Aspen Digital, National Cybersecurity Alliance and more who are working to create opportunities for women and girls to pursue careers in cybersecurity.
Certified CMMC Professional (CCP) 2.0 Exam Prep (Virtual, Feb 6 - 10, 2023) This 5-day CCP course covers the foundational required curriculum along with CMMC Level 2 scoping and the full 110 practices. Edwards Cyber AB approved CCP 2.0 courses enable participants to sit for the CCP exam – making you a valuable resource to a consultancy providing CMMC preparation, C3PAO providing certified assessor support, or organization interested in having in-house CMMC trained resources. Edwards all-star lineup of Provisional Instructors (PIs) includes several of the CMMC industry’s most respected consultants along with Edwards’ internal SMEs to deliver their action packed bootcamps. Learn more and register now.
Chicago Cybersecurity Conference (Chicago, and virtual, Illinois, USA, Feb 8, 2023) FutureCon Events brings high-level Cyber Security Training discovering cutting-edge security approaches, managing risk in the ever-changing threat of the cybersecurity workforce. Join us as we talk with a panel of C-level executives who have effectively mitigated the risk of Cyber Attacks. Educating C-suite executives and CISOs (chief information security officers) on the global cybercrime epidemic, and how to build Cyber Resilient organizations. Gain the latest knowledge you need to enable applications while keeping your computing environment secure from advanced Cyber Threats. Demo the newest technology, and interact with the world’s security leaders and gain other pressing topics of interest to the information security community. The FutureCon community will keep you updated on the future of the Cyberworld and allow you to interact with your peers and the world’s security leaders.
