Social engineering by intimidation.

Summary

By the CyberWire staff

At a glance.

Eastern European gangs overcome their reservations about anglophone criminals.
Mirth Connect vulnerable to critical flaw.
A look at a mercenary spyware strain.
“PepsiCo” used as phishbait.
Prebunking disinformation.
Russian intelligence services' cyber operations in the hybrid war.
Russian hacktivist auxiliaries pester Australia for "Russophobia."
Quantum computing and law enforcement.

Eastern European gangs overcome their reservations about anglophone criminals.

Microsoft describes “Octo Tempest,” a financially motivated threat actor that uses social engineering to compromise organizations around the world.

“In mid-2023," Microsoft researchers write. "Octo Tempest became an affiliate of ALPHV/BlackCat, a human-operated ransomware as a service (RaaS) operation, and initial victims were extorted for data theft (with no ransomware deployment) using ALPHV Collections leak site. This is notable in that, historically, Eastern European ransomware groups refused to do business with native English-speaking criminals. By June 2023, Octo Tempest started deploying ALPHV/BlackCat ransomware payloads (both Windows and Linux versions) to victims and lately has focused their deployments primarily on VMWare ESXi servers. Octo Tempest progressively broadened the scope of industries targeted for extortion, including natural resources, gaming, hospitality, consumer products, retail, managed service providers, manufacturing, law, technology, and financial services.” Among the gang's victims, the Record points out, was MGM Resorts. At the time of that attack, the group was being called Scattered Spider, 0ktapus or UNC3944

One of the more repellent features of Octo Tempest's activity is its willingness to make direct personal threats of violence to bully victims into giving up their credentials. A sample threat reads as follows (and we note that speaking English doesn't mean writing it well--the language is coarse, debased, and primitive): "if we dont get ur [redacted] login in the next 20 minutes were sending a shooter to ur house ur wife is gonna get shot if u dont fold it lmk [redacted] well send shooters to both LOL." For more on Octo Tempest, see CyberWire Pro.

CNAPP for Dummies

A clear, friendly guide to mastering the hot new category in cloud-native security that's taking the industry by storm. Wiz partnered with Wiley to create the Cloud Native Application Protection Platform (CNAPP) for Dummies eBook. This free 48-page PDF includes everything you *need* to know to secure the changing landscape of cloud-native applications and protect your cloud environment today. Get your free guide here.

Mirth Connect vulnerable to critical flaw.

SecurityWeek reports that Mirth Connect, an open-source data integration platform developed by NextGen HealthCare, is vulnerable to a flaw that could allow attackers to bypass protections for a critical-severity remote-code-execution flaw (CVE-2023-37679) that was patched in August. Researchers at Horizon3.ai discovered the new flaw, noting that it was fixed in version 4.4.1 of Mirth Connect. The researchers state, “We urge all users of Mirth Connect, especially instances that are Internet-facing, to prioritize updating to 4.4.1 ASAP.”

A look at a mercenary spyware strain.

Researchers at HYAS have published an analysis of the Predator spyware developed by Cytrox. The researchers note that Sekoia earlier this month found evidence suggesting that the spyware may have been used by the Madagascar government.

HYAS states, “We input the IOCs provided in the blog posts and found domain registration details on two of the above domains. Soutien-a-rajoelina[.]com and emergence-mada[.]com were both registered under the same name, email, and phone number. These two domains are the only ones registered by the same registrant, an individual in Madagascar. We have shared details with relevant law enforcement agencies because of the information we identified and the surrounding circumstances.”

Share industry insights in Fortra’s 2024 State of Cybersecurity Survey

As a company that runs on feedback, Fortra knows that no one understands the unique difficulties of the threat landscape quite like the teams dealing with it every day. Help us fight the good fight. Share your insights with the security community and gain perspective from your industry colleagues as you take the Fortra 2024 State of Cybersecurity Survey. Survey closes November 3, results available in January.

“PepsiCo” used as phishbait.

INKY is tracking a phishing campaign that’s impersonating PepsiCo to deliver malware: “As usual, it all starts with a phishing email. In this case, the phishers are impersonating the PepsiCo brand, pretending to be potential clients. They are claiming to need what the recipient sells and they’re asking them to submit a quote for PepsiCo to review. What the would-be victim doesn’t know is that attached to the email is a malicious disk image, disguised as a RFQ (Request for Quote).”

Prebunking disinformation.

The US State Department is attempting to "prebunk" Russian disinformation campaigns, the New York Times reports. Operating from the premise that disinformation is easier to discredit and refute before it begins to spread through amplification in legitimate and semi-legitimate channels. The effort works by identifying disinformation operations in their earliest phases, and by exposing the fronts and agents of influence before they can begin repeating their themes. Prebunking is part refutation (addressing the false claims on their merits) and part transparency (identifying the fronts and trolls as such before they gain traction).

Russian intelligence services' cyber operations in the hybrid war.

ESET's APT Activity Report for the 2nd and 3rd quarter of 2023 matches unpatched vulnerabilities with government-sponsored offensive cyber operations. Unsurprisingly, Russian cyber activity retains its focus on Ukraine. The main Russian APT groups ESET tracks are Sandworm (operated by the GRU's Unit 74455, and also known as Voodoo Bear), Turla (associated with the FSB, and also known as Venomous Bear), Sednit (more familiarly known as Fancy Bear, and run by the GRU), and Gamaredon (an FSB operation, also known as Primitive Bear). ESET says that the greatest of these, from the Ukrainian perspective, is Gamaredon, "which significantly enhanced its data-collecting capabilities by redeveloping existing tools and deploying new ones."

Russian hacktivist auxiliaries pester Australia for "Russophobia."

Cyber Daily reports that NoName057(16), specialists in nuisance-level distributed denial-of-service (DDoS) attacks, has put Australia on notice (NoName says) for its "Russophobic"contributions to Ukraine's war effort. The hacktivist auxiliary said it had hit sites belonging to Adelaide Bank’s netbank portal, the Transperth transport agency, the Administrative Appeals Tribunal’s online portal, and the Northern Territory Department of Infrastructure, Planning and Logistics.

The hacktivists' communique deplored Australia's decision to send a military aid package worth $12 million to Ukraine. The only effect the shipment will have, NoName said, will be to give the Russians more materiel to capture. And besides, it amounts to theft from the Australian taxpayers. “We are going to Australia for destroying (sic) portals of critical infrastructure!” It's an overstatement. Only the Transperth website sustained periodic and annoying disruption. The other three targets rode out the attack without much difficulty.

The CyberWire's continuing coverage of Russia's war against Ukraine, with special attention to the cyber phases of that war, may be found here.

Join the Lacework CISO book club!

Get a copy of the classic novel, The Phoenix Project, and join quarterly interactive discussions with cybersecurity leaders. Sign up here.

Quantum computing and law enforcement.

Europol's Innovation Lab has published a report, "The Second Quantum Revolution," in which it outlines the potential implications of the new technology for law enforcement. Greater computational power promises new cryptographic challenges and new sensing opportunities. The report represents preparatory work. It urges agencies to stay aware of developments in the new field, and it summarizes its recommendations under five headings:" Observe quantum trends," "Build up knowledge and start experimenting," "Foster research and development (R&D) project," "Assess the impact of quantum technologies on fundamental rights," and "Review your organisation's transition plans." For more on Europol's advice, see CyberWire Pro.

Notes.

Today's issue includes events affecting Armenia, Australia, Brazil, China, Croatia, Greece, Guyana, Poland, Russia, Serbia, Tajikistan, Ukraine, the United Kingdom, and the United States.

Dateline: Hybrid wars in Ukraine, Russia, Israel, and Gaza.

Ukraine at D+610: Combat refusals. (CyberWire) The Russian army is pushing Storm-Z units forward under threat of harsh penalties. ESET offers a look at Russia's major players in the cyber phases of the war.

Israeli troops mount second ground raid into Gaza (the Guardian) Troops attack targets in eastern Gaza City and pre-dawn bombardments reportedly kill dozens

Israel’s Laws of War (Foreign Affairs) How IDF doctrine shapes the campaign against Hamas in Gaza.

If we’re forbidden from looking history in the eye during this horrific war, we’re doomed to repeat it | Gaby Hinsliff (the Guardian) Palestinians and Israelis are bound together in suffering. Seeking to untangle this, as the UN has, should not be seen as making excuses for Hamas, says Guardian columnist Gaby Hinsliff

Israel’s 4 Bad Options in Gaza (TIME) TIME outlines the choices Israel faces in the wake of Hamas' Oct. 7 massacre, based on conversations with experts.

Kids are attending pro-Palestinian protests on Roblox (CNBC) Kids are attending Israel-Hamas war protests on Roblox, and so far, a pro-Palestinian virtual protest has been visited more than 275,000 times.

Russia-Ukraine war: List of key events, day 610 (Al Jazeera) As the war enters its 610th day, these are the main developments.

Russia-Ukraine war live: Zelenskiy claims equivalent of Russian brigade lost near Avdiivka; Putin warns of weapon smuggling from Ukraine (the Guardian) Ukraine’s president tells British PM brigade’s worth of troops lost trying to encircle embattled city; Putin demands action on weapons trafficking

Russia goes back to prisons to feed its war machine (BBC News) Russia's defence ministry has taken over from Wagner in recruiting inmates to fight in Ukraine.

Russia prison population plummets as convicts are sent to war (Washington Post) Russia has freed up to 100,000 prison inmates and sent them to fight in Ukraine, according to government statistics and rights advocates — a far greater number than was previously known.

Ukraine war: Russia executing own retreating soldiers, US says (BBC News) The White House says heavy losses and poor morale are leading to mutinies in some units.

‘What’s this all for?’: Russian deserters call on former comrades to join them (the Guardian) Men tell of escape to Armenia, guilt and remorse as growing number of soldiers flee ‘criminal war’ in Ukraine

Putin ‘forming axis of terror’ as he welcomes Hamas and Iran to Moscow (The Telegraph) Russia condemned over invite which Western observers say should cause ‘extreme concern’

DOD Announces Up to $150M in Aid for Ukraine (U.S. Department of Defense) The Defense Department announced an additional security assistance package valued at up to $150 million to help Ukraine counter Russia's unprovoked invasion.

Biden Administration Announces Additional Security Assistance for Ukraine (U.S. Department of Defense) The Defense Department announced additional security assistance to meet Ukraine’s critical security and defense needs.

Lend-Lease Act expiration will not affect current US aid to Ukraine (Atlantic Council) A Lend-Lease Act introduced by the US in spring 2022 to support Ukraine's fight against Russian aggression has now expired, but it may be worth renewing as a tool to bypass possible political obstacles to aid, writes Olivia Yanchik.

Arming Ukraine is cheap compared to the far higher price of Russian victory (Atlantic Council) Anyone concerned by the cost of supporting the Ukrainian war effort should consider the far higher price the Western world would have to pay in order to stop Putin following a Russian victory in Ukraine, writes Peter Dickinson.

In the ultimate irony, Russia's obsession with Ukraine may have weakened its power over its other neighbors (CNBC) Analysts say the war in Ukraine has created the irony that Russia has lost a degree of control, power and influence over its backyard.

Ukrainian families turn to psychics and private eyes in search for missing loved ones (The Telegraph) The war has created an unregulated cottage industry tracking down the 24,000 people who have disappeared

Ukraine’s deputy minister of digital transformation on building a military tech sector from scratch (Record) On a recent trip to Ukraine, Click Here spoke with Ukraine's Alex Bornyakov about the country's booming drone sector and the Brave1 initiative, which aims to get innovative weapons into the hands of soldiers in a matter of weeks, not months.

Russian hackers claim takedown of WA’s Transperth transport agency with DDoS attack (Cyber Daily) The Noname057(16) hacking group has targeted four Australian websites, with varying success.

U.S. Tries New Tack on Russian Disinformation: Pre-Empting It (New York Times) The State Department’s Global Engagement Center is taking the unusual step of disclosing a covert Russian operation when it is barely off the ground.

Pro-Russia hackers target inboxes with 0-day in webmail app used by millions (Ars Technica) Previously unknown XSS in Roundcube let Winter Vivern steal government emails.

Russian Hackers Caught Exploiting Roundcube Webmail Zero-Day (SecurityWeek) Russian APT Winter Vivern exploits a zero-day in the Roundcube webmail server in attacks targeting European governments.

European govt email servers hacked using Roundcube zero-day (BleepingComputer) The Winter Vivern Russian hacking group has been exploiting a Roundcube Webmail zero-day since at least October 11 to attack European government entities and think tanks.

Attacks, Threats, and Vulnerabilities

Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction (Microsoft Security) Microsoft has been tracking activity related to the financially motivated threat actor Octo Tempest, whose evolving campaigns represent a growing concern for organizations across multiple industries.

MGM Resorts hackers 'one of the most dangerous financial criminal groups’ (Record) Octo Tempest, a hacking group also known as Scattered Spider, has been in the limelight since its attack on MGM Resorts left parts of Las Vegas paralyzed for days and cost the casino giant an estimated $100 million.

ESET APT Activity Report Q2–Q3 2023 (We Live Security) This issue of the ESET APT Activity Report features an overview of the activities of selected APT groups as analyzed by ESET Research between April and September 2023.

Significant Volt Typhoon threat requires immediate US critical infrastructure action (SC Media) U.S. critical infrastructure organizations have been urged by Mandiant Intelligence Chief Analyst John Hultquist to accelerate efforts to discover and mitigate threats by Chinese state-sponsored threat operation Volt Typhoon, which has already targeted telecommunications, logistics, water, and power sector organizations across the U.S. and in Guam, according to SecurityWeek.

Malvertising Campaign Targets Brazil's PIX Payment System with GoPIX Malware (The Hacker News) Brazil's popular PIX payment system is under attack! Cybercriminals are using a new malware, GoPIX, to target users searching for "WhatsApp web."

The Wiki-Slack Attack (eSentire) In this blog, eSentire’s Threat Response Unit (TRU) breaks down how cybercriminals can use Wikipedia pages and Slack to lure victims into executing malware and how you can protect your organizations from similar Wiki-Slack attacks.

Examining Predator Mercenary Spyware (HYAS) HYAS Labs explores the mercenary spyware “Predator,” and how to identify and defend against it with HYAS threat intelligence and Protective DNS solutions.

Kaspersky reveals 'elegant' malware resembling NSA code (CyberScoop) The Russian cybersecurity firm discovered sophisticated malware that combined cryptocurrency mining and espionage capabilities.

Critical Mirth Connect Vulnerability Could Expose Sensitive Healthcare Data (SecurityWeek) Mirth Connect versions prior to 4.4.1 are vulnerable to CVE-2023-43208, a bypass for an RCE vulnerability.

Internet companies tackle the biggest ever denial of service attack (World Economic Forum) Leading internet companies including Amazon and Google are taking steps to fight off the biggest distributed denial of service attack ever recorded.

CVE-2023-4966: Exploitation of Citrix NetScaler Information Disclosure Vulnerability (Rapid7) On October 10, 2023, Citrix published an advisory on two vulns affecting NetScaler ADC and NetScaler Gateway. The more critical of these is CVE-2023-4966.

Ghoulish spam invades email inboxes worldwide, Bitdefender Antispam Lab warns (Hot for Security) Spooky season is a fun time for kids and adults who delve into the annual celebrations by trick-or-treating, carving pumpkins or setting up haunted houses.

You are the Weakest Link: Assessing Vulnerabilities and Solutions for Cybersecurity in Agriculture (Avertium) This report examines vulnerabilities in agriculture and discusses solutions for a sector that is unaccustomed to tech-related concerns.

Fresh Phish: The Case of the PepsiCo Procurement Ploy (INKY) When a company generating more than $86 billion in net revenue reaches out to do business with you, chances are they’ll have your full attention.

CISA Adds One Known Exploited Vulnerability to Catalog | CISA (Cybersecurity and Infrastructure Security Agency CISA) CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-5631 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

Security Patches, Mitigations, and Software Updates

VMware Releases Security Advisory for vCenter Server | CISA (Cybersecurity and Infrastructure Security Agency CISA) VMware released a security advisory for a vulnerability (CVE-2023-34048) affecting the VMware vCenter Server and (CVE-2023-34056) affecting [VMware Cloud Foundation]. A remote cyber actor could exploit these vulnerabilities to obtain information or take control of an affected system.

Trends

7th Annual Hacker Powered Security Report (HackerOne) Insights from our customers & the world's top hackers—emerging threats, vulnerability rankings, & fighting cybercrime on a budget

Marketplace

AI Security Firm Cranium Raises $25 Million (SecurityWeek) AI cybersecurity firm Cranium has raised $25 million in Series A funding, which brings the total investment in the company to $32 million.

‘Musk destroyed all that’: Twitter’s business is flailing after a year of Elon (the Guardian) Advertisers are spending less, regulators are circling, staff is at less than 50% of what it used to be and user numbers are down

Google Announces Bug Bounty Program and Other Initiatives to Secure AI (SecurityWeek) Google announces a bug bounty program and other initiatives for increasing the safety and security of artificial intelligence (AI)

Hackers Surpass $300 Million in All-Time Earnings on the HackerOne Platform (HackerOne) New Revenue Opportunities Provided by Pentesting and Secure Code Review Expand Total Payouts

Hackers Earn $350k on Second Day at Pwn2Own Toronto 2023 (SecurityWeek) Smart speakers, printers, routers, NAS devices, and mobile phones were hacked on the second day at Pwn2Own Toronto 2023.

Singapore Police Force honors Group-IB for cooperation in combating cyber threats (Group-IB) Group-IB, a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime, has received prestigious recognition from the Singapore Police Force (SPF) for its contributions to the continued battle against cyber threats for the second consecutive year.

Products, Services, and Solutions

Malwarebytes Announces Consumer Identity Theft Protection Solution to Defend Against Online Fraud and Theft (PR Newswire) Malwarebytes, a global leader in real-time cyber protection, today launched an essential new consumer solution, Identity Theft Protection. The...

Technologies, Techniques, and Standards

Logging Made Easy | CISA (Cybersecurity and Infrastructure Security Agency CISA) CISA’s newest tool is an open-source logging and protective monitoring solution serving all organizations. Secure your Windows-based equipment today with Logging Made Easy.

Design and Innovation

Frontier risk and preparedness (OpenAI) To support the safety of highly-capable AI systems, we are developing our approach to catastrophic risk preparedness, including building a Preparedness team and launching a challenge.

The social engineering of the self: How AI chatbots manipulate our thinking (Computing) On Wednesday, ahead of the UK's upcoming AI Safety Summit, teams of students and specialists came together in a concerted effort to trick, get around, confuse or otherwise defeat the guardrails around Llama 2, Meta's open source AI model.

Mysterious bylines appeared on a USA Today site. Did these writers exist? (Washington Post) Staff writers at Reviewed suspect that management published stories written by AI under the names of non-existent writers. Parent company Gannett denies it.

Legislation, Policy, and Regulation

Rishi Sunak lays out vision for new global AI safety bodies (POLITICO) British PM defended seeking Chinese buy-in for a bevvy of new AI governance initiatives he is set to launch next week.

Rishi Sunak announces AI Safety Institute, outlines vision for global initiatives (Computing) Rishi Sunak has unveiled ambitious plans to establish a new AI Safety Institute and initiate a global expert panel on AI in a bid to foster international collaboration and ensure the safe development of AI technology.

The dangers of AI cannot be ignored (The Telegraph) We do not yet fully understand what AI is capable of. Rishi Sunak should be praised for drawing attention to these risks

The UK’s Controversial Online Safety Act Is Now Law (WIRED) The UK government says its Online Safety Act will protect people, particularly children, on the internet. Critics say it’s ineffective against dangerous misinformation and may be a threat to privacy.

UK government accused of ‘vandalism’ over abolishing biometrics safeguards (Record) The British government’s plans to remove safeguards around biometrics and public space surveillance were described on Thursday as “shocking” and “tantamount to vandalism” by an outgoing commissioner.

Inside the Biden administration’s transition to a post-quantum world (Washington Post) Checking in with the White House on future federal quantum standards

Health Care Hacks Are Proliferating. The White House Is Still Figuring Out What To Do (The Messenger) A meeting between government leaders and health-care professionals highlighted how many hacking risks the life-saving industry faces.

CISA, HHS Release Cybersecurity Healthcare Toolkit (SecurityWeek) CISA and the HHS have released resources for healthcare and public health organizations to improve their security.

Crypto Regulatory Affairs: FinCEN deems mixing transactions to be a Primary Money Laundering Concern (Elliptic) The move is significant as this entire class of transactions is now officially deemed by the US government to represent a heightened financial crime risk.

Litigation, Investigation, and Law Enforcement

The Second Quantum Revolution: The impact of quantum computing and quantum technologies on law enforcement (Europol Innovation Lab) Quantum computing and quantum technologies have the potential to significantly impact law enforcement activities. These key emerging technologies can help us become even more effective in our fight against organised crime and terrorism to come up with innovative ways of doing so

Brazilian authorities shut down major illegal filesharing site in Brazil (IFPI) Prominent illegal filesharing forum, FileWarez, shut down following co-ordinated action by record company bodies and local authorities 25th October, 2023 – IFPI, the organisation that represents the recorded music industry worldwide, alongside its Brazilian national group Pro-Musica, have welcomed the successful action against FileWarez.tv – one of the most prominent illegal file sharing sites in […]

Maine Mass Shooting Disinformation Floods Social Media as Suspect Remains at Large (WIRED) In the hours following the worst mass shooting in Maine’s history, disinformation about the suspected gunman flooded social media with false claims that he had been arrested.

SBF Agrees ‘Safeguarding’ Funds Includes Not Embezzling (Bloomberg) SBF to testify before jury on Friday. Bankman-Fried explains FTX communication protocols. Prosecutors press SBF on discussions with lawyers. SBF can’t recall details of handling of customer accounts. Judge: SBF has ‘interesting way’ of answering questions.

Michigan’s sign-stealing operation is a college football scandal to savor (Washington Post) A few years ago, I sat down with a former NCAA enforcement officer to compare notes now that their career in Indianapolis was over.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Newly Noted Events

2023 CyberMaryland Conference (Hyattsville, Maryland, USA, Dec 6 - 7, 2023) For over 10 years The CyberMaryland Annual Conference, presented by the Federal Business Council (FBC), has brought together the leading Cybersecurity and IT professionals in the state of Maryland across academia, government, and industry to promote the community of cybersecurity. This networking and educational event is an incredible opportunity to connect with the best and brightest professionals as well as up and coming newbies and the latest in industry products and services. This exclusive event connects cybersecurity on all levels to ensure the cyber-safety of today and educate the cybersecurity professionals of tomorrow. Additionally, Maryland is a notable hub of natural leadership in the cybersecurity field. This unique community of people share in the same passion - to strengthen the cyber security industry through unity, improved security awareness while helping Marylanders lead safer digital lives.

SANS San Diego 2024 (San Diego (and virtual), California, USA, Feb 12 - 17, 2024) At SANS San Diego 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS Security East New Orleans 2024 (New Orleans, and virtual, Louisiana, USA, Feb 19 - 24, 2024) At SANS Security East New Orleans 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS Las Vegas 2024 (Las Vegas (and virtual), Nevada, USA, Mar 4 - 9, 2024) At SANS Las Vegas 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS Dallas 2024 (Dallas (and virtual), Texas, USA, Mar 11 - 16, 2024) At SANS Dallas 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS Stay Sharp: March 2024 (Virtual, Mar 18 - 20, 2024) At SANS Stay Sharp: March 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS Orlando 2024 (Orlando (or virtual), Florida, USA, Mar 24 - 29, 2024) At SANS Orlando 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS Santa Clara (Santa Clara (and virtual), California, USA, Apr 8 - 13, 2024) At SANS Santa Clara 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS New York City Spring 2024 (New York (or virtual), New York, USA, Apr 8 - 13, 2024) At SANS New York City Spring 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS Pen Test Austin 2024 (Austin (and virtual), Texas, USA, Apr 22 - 27, 2024) At SANS Pen Test Austin 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS Baltimore Spring 2024 (Baltimore (and virtual), Maryland, USA, Apr 28 - May 3, 2024) At SANS Baltimore Spring 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS Security West San Diego 2024 (San Diego (and virtual), California, USA, May 9 - 14, 2024) At SANS Security West San Diego 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

SANS Leadership & Cloud Security – Crystal City 2024 (Arlington (and virtual), Virginia, USA, May 20 - 24, 2024) At SANS Leadership & Cloud Security – Crystal City 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!

Events

Join us for the 2023 Gone Phishing Tournament. (Virtual, Oct 9 - 27, 2023) The annual Gone Phishing TournamentTM allows you to benchmark your organization's phishing resilience against true global standards. It's not just an exciting event but also a proven way to build a robust cyber-aware culture within your organization.

(ISC)² Security Congress 2023 (Nashville (and virtual), Tennessee, USA, Oct 25 - 27, 2023) This year’s (ISC)² Security Congress theme, Lead with Confidence, champions the growth and vitality of cybersecurity professionals in every phase of their career through engaged learning that builds the competence and confidence to lead. The 13th annual (ISC)² Security Congress 2023 will bring together cybersecurity professionals from around the world for industry-leading education, compelling keynotes, exclusive networking, inside-track career resources, exhibitor showcases and much more, delivered all under one roof at the stunning Gaylord Opryland resort. From expert advice to industry insights, hear from the profession’s most knowledgeable speakers and participate in conversations about the hottest topics in cybersecurity.

2023 Cyversity Annual Conference - Power Up (Orlando, Florida, USA, Oct 29 - 31, 2023) Join us at the 2023 Cyversity Annual Conference - Power Up, October 29-31, 2023, at the Renaissance Orlando at SeaWorld. This conference is perfect for cybersecurity professionals at all levels, whether you're a beginner or a seasoned expert in the field. You’ll experience insightful keynotes, thought-provoking panel discussions, and interactive workshops delivered by the brightest minds in the industry. You'll have the opportunity to connect with like-minded professionals, share your experiences and ideas, and learn about the latest trends and techniques in cybersecurity.

Hardwear.io Security Trainings and Conference (The Hague, Netherlands, Oct 30 - Nov 3, 2023) Learn from leading hardware security researchers & professionals and discuss the latest & most innovative research on attacking and and defending hardware. Connect with industry peers. Join us for a bigger, bolder, and better hardwear.io.

2023 Virtual CMMC Summit (Virtual, Nov 1, 2023) For those just embarking on CMMC to those who are compliance experts, PreVeil’s Virtual CMMC Summit will provide you with the opportunity to learn from CMMC experts.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.