Ready to move beyond AI? Join Fortra experts and guest Principal Analyst, Jess Burn, Forrester, as they share their predictions for the cybersecurity landscape in 2024. Watch the webinar to hear about:
• The new table stakes for security awareness
• Adopting a “best of platform” approach
• What threat intel is emerging from the shadows
Join After AI: Cyber Predictions for 2024 on Wednesday, December 6, at 10:00 a.m. Central. Register Now.
Join us for our quarterly Industry Insights Analyst Call on Tuesday, December 19th, 2023 at 2:00 PM EST. During this live and interactive event, Rick Howard and a panel of security experts will breakdown the most impactful news and events from the last 90 days, and dive into why it matters to organizations and our industry. Register now.
Commercial aircraft have reported disruption of GPS signals, interference that had the effect of meaconing, during flights in the Middle East. WIRED reports that the incidents appear to be centered on Baghdad, Cairo, and Tel Aviv. It was long unclear who might have been responsible, but attribution has now been offered. According to AvWeb, the jamming seems centered on the outskirts of Tehran, a researcher at the University of Texas Radionavigation Laboratory has concluded. The goal of the spoofing seems to be jamming, and not aircraft diversion. Industry experts quoted by Location Business News aren't surprised. Dana Goward, Resilient Navigation & Timing Foundation president, said, “Tehran has a long history of interfering with GPS signals. Also, they seem to have established a version of Loran to reduce their own reliance on navigation and timing signals from space. And in some ways it is not surprising they don't seem to be intentionally drawing aircraft off course, merely trying to deny GPS service. This is a good reminder to everyone one that receivers will react to interference in different ways.”
Concerns about Iranian attacks against programmable logic controllers (PLCs) used in infrastructure continue. The UK's National Cyber Security Center (NCSC) has endorsed the US Cybersecurity and Infrastructure Security Agency's (CISA's) warning on Iranian exploitation of Unitronics PLCs, adding a note of reassurance: "The exploitation is of limited sophistication, and is highly unlikely to cause any disruption to the routine supply of water. There is a very low potential risk, if the threat is unmitigated, to some small suppliers. As such, the NCSC is encouraging organisations using Unitronics PLCs to follow the steps outlined in CISA's cyber security advisory."
That said, the activity represents a significant threat to the industrial control system supply chain. Unitronics PLCs are widely used in a range of sectors that extend far beyond water treatment and distribution systems. The company lists these categories of applications for their PLCs: "Pumps, Water/Waste Waters, Packaging, Manufacturing, Medical, Food & Beverage, Material Processing, Oil & Gas, Power & Energy, Automotive, Building Automation, Miscellaneous, Education, Refrigeration, Printing, [and] Textiles."
We might add breweries to the list. Another attack has surfaced, also in Pennsylvania, in which a Unitronics PLC was hacked to display the same message that appeared on the Aliquippa water system's controller. SentinelOne observes, "The Full Pint Beer brewery in Pittsburgh shared images on social media on 28th November showing similar defacement of a Unitronics PLCs in use as part of their control system." If taken at face value, as the messages probably should be, the target is Israel. Why that targeting should have manifested itself so specifically in Western Pennsylvania is unclear. CyberScoop says that there are signs of other attacks on US water systems, but that so far those remain in the "single digits."
Meta, Facebook's corporate parent, released its Quarterly Adversarial Threat Report yesterday. It identified three clusters of Russian and Chinese coordinated inauthenticity, which it blocked or otherwise removed from its platforms:
"1. China: We removed 13 accounts and seven Groups in China that targeted primarily India and the Tibet region and, to a lesser extent, the United States. This small network operated fictitious personas on Facebook and X (formerly Twitter) posing as journalists, lawyers and human-rights activists. We found this activity as part of our internal investigation into suspected coordinated inauthentic behavior in the region."
"2. China: We removed 4,789 Facebook accounts in China that targeted the United States and posed as Americans across different platforms to post about US politics and US-China relations. We removed this network before it was able to gain engagement from authentic communities on our apps. We found this activity as part of our internal investigation into suspected coordinated inauthentic behavior in the region.
"3. Russia: We removed six Facebook accounts, one Page, and three Instagram accounts in Russia that targeted global English-speaking audiences. The network posted primarily in English about Russia’s invasion of Ukraine and ran fictitious “media” brands. A number of Russian embassies and diplomatic missions promoted these branded Telegram accounts on Facebook, X (formerly Twitter) and YouTube. After we removed this network, it appears to have shifted its activity to other apps entirely, including creating another media brand in recent weeks. We found this activity as a result of our internal investigation into suspected coordinated inauthentic behavior in the region."
Meta thus continues its policy of going after inauthenticity, of people posing as someone they're not, as a check on disinformation.
Is cloud security posture management (CSPM) right for your organization? Watch the webinar to learn about the four generations of CSPMs and building versus buying CSPM tools as well as use cases and real-world CSPM examples. Register today.
Microsoft has reported a new active malvertising campaign in which the Twisted Spider criminal gang (also tracked as Storm-0216, or UNC2198, and believed to be based in Russia) has been distributing the Danabot Trojan through malicious advertising. "The current Danabot campaign, first observed in November, appears to be using a private version of the info-stealing malware instead of the malware-as-a-service offering," Microsoft researchers tweeted. "Danabot collects user credentials and other info that it sends to command and control, followed by lateral movement via RDP sign-in attempts, eventually leading to a handoff to Storm-0216."
The campaign's goal is extortion. Once installed, Computing reports, Twisted Spider uses Danabot to install Cactus ransomware. The shift to a private version of Danabot is a change for Twisted Spider, which had formerly used Qakbot. Qakbot has been disrupted by law enforcement, and so the shift represents an adaptation by the gang.
Twisted Spider should not be confused with Scattered Spider, a different criminal group that has been held responsible for cyberattacks against casino operators MGM Resorts and Caesars Entertainment.
Researchers at HUMAN have discovered a new version of the ScrubCrypt malware obfuscation tool being peddled on underground forums: “ScrubCrypt’s ‘marketing’ promotes the add-on to threat actors as an easy way to obfuscate executable files by converting them into batch files. This conversion—from executable file into batch file—enables threat actors to slip attacks past many preventative measures that might otherwise identify them. Many email providers and messaging platforms have safeguards that prevent executable files from showing up as attachments in a primary (non-spam) inbox. And .bat files don’t trigger antivirus software’s detection in the same way executable files might.”
In the incident observed by HUMAN, the attackers used ScrubCrypt in an attempt to deliver the RedLine Stealer via a direct messaging platform.
Office supply retailer Staples has confirmed that it took down some of its systems in order to mitigate a cybersecurity incident, BleepingComputer reports. A spokesperson told BleepingComputer, “On November 27, Staples Inc.'s cybersecurity team identified a cybersecurity risk. We took proactive steps in an effort to mitigate the impact and protect customer data. Our prompt efforts caused temporary disruption to our backend processing and delivering capabilities, as well as our communications channels and customer service lines.”
The spokesperson added, “All of our systems are in the process of coming back online, and we expect to return to normal functionality in short order. We may experience slight delays in the interim but expect to ship all orders that have been placed.”
Ukrainska Pravda reports that a speech by President Zelenskyy was inserted into Russian television programming serving occupied Crimea. The principal message was a promise of liberation from Russian control. "All IPTV channels in occupied Crimea showed an address by Ukrainian President Volodymyr Zelenskyy, Defence Intelligence Chief Kyrylo Budanov, and Valerii Zaluzhnyi, Commander-in-Chief of the Armed Forces of Ukraine. Residents noticed this at approximately 21:30 (20:30 Kyiv time). The Russians eventually turned off the broadcast and it was replaced by a black screen." The Sun quotes the promise of liberation: "Dear Ukrainians, you all feel that the Russian presence on our land will not last forever. I know this. Ukraine will return its territory, our people. We will not leave anyone to the occupiers.” The Sun also says that a more indelicate message accompanied the brief speech: "Putin is a d*ckhead."
The CyberWire's continuing coverage of Russia's war against Ukraine, with special attention to the cyber phases of that war, may be found here.
Today's issue includes events affecting China, the European Union, Gaza, Iran, Israel, NATO/OTAN, Russia, Ukraine, the United Kingdom, and the United States.
Ukraine at D+645: Influence operations in a winter war. (CyberWire) Russian disinformation seeks to reach anglophone audiences, and makes some claims that would be too far-fetched to get past a science-fiction editor.
Warplanes hit targets in Gaza as Israel resumes its offensive and warns of attacks to come in south (AP News) Israel’s military blamed Hamas for breaking the cease-fire.
Israel Strikes Gaza After Truce Expires (TIME) Israeli fighter jets hit targets in the Gaza Strip minutes after a weeklong truce expired on Friday.
Does Hamas want to keep fighting Israel or start talking peace? (The Economist) A high-stakes struggle is taking place within the group
Israel-Hamas war live: dozens of Palestinians reported killed by Israeli strikes since ceasefire expired (the Guardian) Hamas-run health ministry says airstrikes have killed people since truce expired this morning and fighting resumes
Extend the Cease-Fire in Gaza—but Don’t Stop There (Foreign Affairs) Regional diplomacy and an overhaul of U.S. policy could produce lasting peace.
WSJ News Exclusive | Israel Plans to Kill Hamas Leaders Around the World After War (Wall Street Journal) The nation’s top spy agencies intend to hunt down militants living in Lebanon, Turkey and Qatar.
GPS Spoofing Signals Traced To Tehran (AVweb) A University of Texas student has traced the source of alarming GPS spoofing signals in the Middle East to the eastern outskirts of Tehran, but it would seem there is little anyone can do to stop the navigation interference. Todd Humphreys, who heads up the Radionavigation Laboratory at UT, said the grad student, Zach Clements, […]
GPS Spoofing Traced To Iran (Location Business News) Middle East GPS spoofing seems to have an epicenter...
NCSC statement following exploitation of Unitronics programmable logic controllers (NCSC) NCSC supports US advisory regarding exploitation of Unitronics programmable logic controllers used in the water sector.
Iran-Backed Cyber Av3ngers Escalates Campaigns Against U.S. Critical Infrastructure (SentinelOne) Water and wastewater treatment plants are the latest critical infrastructure to come under attack. Learn how to mitigate the risks.
Anti-Israel hacking campaign highlights danger of internet-connected devices (CyberScoop) The Iran-linked Cyber Av3ngers hacking crew has targeted water facilities in Pennsylvania and elsewhere in the United States.
Spillover from wars in the Middle East and Ukraine may spread to the Western Balkans, warns Albanian prime minister (Atlantic Council) Western Balkans countries must “work day and night to keep the conflict out of the borders of our region,” Prime Minister Edi Rama said at the Atlantic Council.
Poll finds strong support for arming Ukraine, Israel and Taiwan (Defense News) A Reagan Institute poll found high public support for arming friendly U.S. countries and high military spending as Congress negotiates a giant aid package.
The AP Interview: Ukraine's Zelenskyy says the war with Russia is in a new phase as winter looms (AP News) The Ukrainian president said he fears the Israel-Hamas war is threatening to overshadow the conflict in Ukraine.
Russia-Ukraine war live: no reason for Russia to change goals, says Lavrov (the Guardian) Russian foreign minister Sergei Lavrov says Moscow sees no signs to alter its ‘special military operation’
Putin’s War Party (Foreign Affairs) Russia’s 2024 election will validate autocracy—and permanent conflict with the West.
Putin seems to be winning the war in Ukraine—for now (The Economist) His biggest asset is Europe’s lack of strategic vision
A Containment Strategy for Ukraine (Foreign Affairs) How the West can help Kyiv endure a long war.
How Putin is reshaping Russia to keep his war-machine running (The Economist) He is creating a class of wealthy bureaucrats, who are the war’s biggest supporters
Putin’s pro-war majority: Most Russians still support Ukraine invasion (Atlantic Council) Putin’s pro-war majority: almost two years on, most Russians still support the Ukraine invasion and have reconciled themselves to the reality of a long war, writes Peter Dickinson.
Alternate Reality: How Russian Society Learned to Stop Worrying About the War (Carnegie Endowment for International Peace) Many Russians equate their country with the political regime that rules it, and believe it is their duty to support the state’s actions. This belief and the limited impact the war in Ukraine has had on the day-to-day lives of most Russians go some way to explaining continuing high levels of support for the war among Russians.
Russian War Report: Pro-Kremlin surrogates accuse the US of using ‘climate weapons’ in Crimea (Atlantic Council) Following a severe storm in the Black Sea heavily impacted Crimea, pro-Kremlin sources circulated a conspiracy suggesting the US used a weather weapon.
Western leaders must choose: Arm Ukraine or enable Putin's genocide (Atlantic Council) Western leaders must decide whether they are finally prepared to arm Ukraine adequately or face the consequences of a Russian victory which would lead to genocide in the heart of Europe, writes Taras Kuzio.
We can outlast Russia in Ukraine, Lord Cameron tells Nato (The Telegraph) Foreign Secretary urges Western allies to collectively increase weapons production in order to help Kyiv towards victory
Ukraine's new long-range rocket delivery from US pushed to next year (Reuters) Ukraine will need to wait until next year before it receives its first big shipment of rocket-propelled bombs the U.S. has adapted to strike at a nearly 100-mile (160km) range, according to the Pentagon and people familiar with the timing.
Democrats consider new immigration rules to secure fresh Ukraine funding (The Telegraph) Senate Republicans make border control demands a potential condition of their support for Joe Biden's $106bn military aid request
War has spread to a sixth domain: the private sector (Financial Times) The conflict in Ukraine highlights the need for governments and private companies to collaborate on national security
Unprivileged Belligerency in a Deterritorialized Cyber Battlefield? Some Lessons Learned from the Russia-Ukraine Conflict (SpringerLink) Despite the fact that heightened geopolitical tensions brought about by the Russia-Ukraine Conflict may spur a stalemate in the UN’s consensus-based efforts to advance international law and norms in cyberspace, the conflict has given rise to a number of...
Putin Humiliated by Ukrainian Hackers Who Take Over Russian TV Broadcasts in Crimea, Insult President: Reports (MSN) Ukrainian President Volodymyr Zelensky made a surprise appearance overnight on Russian television screens across annexed Crimea.
How Ukraine defeated Russia’s cyber warriors (Australian Financial Review) Kyiv imported tens of thousands of modems after malware took down its satellite communications network. Western tech companies helped thwart other attacks too.
Russian region launches chatbot to report ‘extremist’ neighbors (Region) Named “The Agent is Writing,” the chatbot is available on Telegram. It was created by the anti-terrorism commission in Primorsky Krai, located in Russia's far east.
EU should go on the cyber offensive in defence reform - Charles Michel (Euronews) The European Union needs a bespoke "cyber force" to beef up its defensive capabilities, according to European Council chief Charles Michel. #EuropeNews
NATO to update artificial intelligence strategy amid new threats (Defense News) “We will need AI to defend ourselves,” a NATO official said.
Putin has been accused of starving civilians as a warfare tactic. Will the ICC agree? (Atlantic Council) New evidence about Russia’s actions in Ukraine offers the ICC an opportunity to prosecute starvation as a war crime or crime against humanity affecting Ukrainians and other global victims.
Disruptive new wave of ransomware hits critical infrastructure (Axios) A wave of ransomware attacks targeting critical infrastructure in recent weeks is a stark reminder that the ransomware problem will continue to get worse before it slows down — despite the U.S. government's best efforts.
Adversarial Threat Report, Third Quarter 2023 (Meta) Our public threat reporting began over six years ago when we first shared our findings about coordinated inauthentic behavior (CIB) by a Russian covert influence operation.
Meta Takes Action Against Multiple Foreign Influence Campaigns (SecurityWeek) Meta removed three foreign influence operations from the Facebook platform during Q3, 2023. Two were Chinese in origin, and one was Russian, the company says.
HUMAN Satori Threat Intelligence Alert: Account Takeover Attacks Use ScrubCrypt to Deploy RedLine Stealer Malware (HUMAN) HUMAN's Satori Threat Intelligence Team uncovers a new build of ScrubCrypt used in account takeover attacks. Learn how this obfuscation tool is deployed to deploy RedLine Stealer malware. Find out how HUMAN stopped the attack and protects customers from such threats.
Microsoft warns of new ransomware campaign by Twisted Spider group (Computing) According to a series of posts on X by Microsoft Threat Intelligence, Russia-based ransomware actor Storm-0216 (aka Twisted Spider, UNC2198) is deploying Danabot, an advanced banking Trojan, to deploy Cactus ransomware.
North Texas water utility the latest suspected industrial ransomware target (Cybersecurity Dive) Federal authorities are investigating multiple attacks against water and wastewater treatment facilities in the U.S. following an Iran-linked attack in Pennsylvania.
Staples confirms cyberattack behind service outages, delivery issues (BleepingComputer) American office supply retailer Staples took down some of its systems earlier this week after a cyberattack to contain the breach's impact and protect customer data.
Thanksgiving hack on North Carolina city caused leak of employee data (Record) A city in North Carolina is warning government employees that data from its systems may have been accessed in a pre-Thanksgiving holiday incident.
Data for over 1 million Michiganders, Corewell Health patients compromised after massive Welltok cyber attack (WWJ News) Roughly 1 million Michiganders were impacted after a cyber security breaches was discovered at Welltok Inc., a healthcare software-as-a-service company contracted by Corewell Health.
Apple fixes two new iOS zero-days in emergency updates (BleepingComputer) Apple released emergency security updates to fix two zero-day vulnerabilities exploited in attacks and impacting iPhone, iPad, and Mac devices, reaching 20 zero-days patched since the start of the year.
Apple Patches WebKit Flaws Exploited on Older iPhones (SecurityWeek) Apple’s security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1.
Critical Zyxel NAS vulnerabilities patched, update quickly! (Help Net Security) Zyxel has patched six vulnerabilities affecting its network attached storage (NAS) devices, including several (OS) command injection flaws.
Major Security Flaws in Zyxel Firewalls, Access Points, NAS Devices (SecurityWeek) Zyxel patches at least 15 security flaws that expose users to authentication bypass, command injection and denial-of-service attacks.
CISA Releases Four Industrial Control Systems Advisories (Cybersecurity and Infrastructure Security Agency | CISA) CISA released four Industrial Control Systems (ICS) advisories on November 30, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-334-01 Delta Electronics DOPSoft ICSA-23-334-02 Yokogawa STARDOM ICSA-23-334-03 PTC KEPServerEx ICSA-23-334-04 Mitsubishi Electric FA Engineering Software Products
Global Threat Intelligence Report (Mimecast) Because email is the channel through which most cyber threats launch, Mimecast sees many new threats before they become widely known.
Irish cybersecurity start-up Cytidel raises €1.3m in funding round (The Irish Times) Cyber risk management platform helps organisations predict threats
Clear Ridge Defense Awarded Prime Contract to Support CYBERCOM’s J7 Cyber Adversary Tactics Office (Business Wire) Clear Ridge Defense CRD recently announced their award of a prime contract to support U.S. Cyber Command's Exercise and Training Directorate J7, Cyber Adversary Tactics Office CATO. The contract’s total value if all options are awarded could total approximately $25 million.
Broadcom to eliminate jobs of 1,267 VMware employees based in Palo Alto (Silicon Valley Business Journal) The job cuts are directly connected to Broadcom's completed acquisition of VMware.
To Continue Innovating, OpenAI Should Return to Its Nonprofit Roots (The Information) There’s much speculation about the reasons for the abrupt removal and subsequent return of Sam Altman as the CEO of OpenAI. Irrespective of who leads the company going forward, OpenAI faces a fundamental challenge in reconciling its mission with its choice of corporate structure and business ...
OpenAI CEO Sam Altman went on an 18-month, $85 million real-estate shopping spree — including a previously unknown Hawaii estate (Business Insider) OpenAI CEO Sam Altman has snapped up multimillion-dollar properties in San Francisco, Napa, and Hawaii — all managed by his discreet family office.
Menlo Security Strengthens Executive Leadership Team with Chief Marketing Officer and Chief Financial Officer Appointments (Business Wire) Both Pejman Roshan, the company’s new CMO, and Naresh Bansal, CFO, bring decades of experience in SaaS, AI and Security as the company sets its sights on the next level of growth and product innovation
David A. Hoffman Joins Paladin Capital Group as Strategic Advisor (Paladin Capital Group) Paladin Capital Group, the multi-stage investor specializing in cyber and advanced technology, is delighted to announce that Duke University Professor David A. Hoffman will join the firm as a Strategic Advisor.
Exabeam Enhances Compliance Portfolio with Completion of IRAP Assessment in Australia (Business Wire) Exabeam, a global leader in cybersecurity that delivers AI-driven security operations, today announced the successful completion of an Information Security Registered Assessors Program (IRAP) assessment at the Protected level for the Exabeam Security Operations Platform.
Morphisec Fortifies Capabilities with Next-gen Risk-Based Vulnerability Prioritization for Exposure Management (Morphisec) Vulnerability-based breach events persist, despite ample mitigation investment. Learn how risk-based vulnerability prioritization improves remediation efforts.
Palo Alto Networks Unveils New Rugged Firewall for Industrial Environments (SecurityWeek) Palo Alto Networks has launched a new rugged firewall for industrial environments and announced several OT security improvements.
Tangem Sets New Standards for Crypto Hardware Wallet Integrity: Introducing Firmware Attestation, Audited by Riscure (Financial Post) ZUG, Switzerland, Nov. 30, 2023 (GLOBE NEWSWIRE) — Tangem AG, a leading crypto hardware wallet manufacturer, is thrilled to announce an in-depth software…
Trulioo Partners With Public for Its UK Launch (Business Wire) Trulioo Person Match Delivers Industry-Leading Match Rates, Highest Assurance to Ensure Investment Platform’s Worldwide Compliance
Partners Support Cyber Defence During NATO's Premier Cyberspace Exercise (NATO SHAPE) SHAPE’s Deputy Chief of Staff Partnerships Directorate, Rear Admiral Gunnstein Bruåsdal, visited NATO partners participating in exercise Cyber Coalition 2023 from Nov. 27 to Dec. 1 in Tallinn, Estonia.
New Yorkers feel betrayed as police radio dispatches end: ‘You’d hear about nine shootings a day’ (the Guardian) The NYPD has communicated via public channels for nearly a century. Now the system is being encrypted
A novel hybrid feature selection and ensemble-based machine learning approach for botnet detection - Scientific Reports (Nature) Scientific Reports - A novel hybrid feature selection and ensemble-based machine learning approach for botnet detection
Europe agrees on rules to protect smart devices from cyber threats (Reuters) EU countries and EU lawmakers on Thursday agreed to rules to protect laptops, fridges, mobile apps and smart devices connected to the internet from cyber threats following a spate of such attacks and ransom demands in recent years around the world.
Advancing an Affirmative Vision for Cyberspace at the Inaugural Global Conference on Cyber Capacity Building - United States Department of State (United States Department of State) Ambassador at Large for Cyberspace and Digital Policy Nathaniel C. Fick participated in the inaugural Global Conference on Cyber Capacity Building (GC3B) from November 29 to 30, 2023 in Accra, Ghana, alongside other U.S. government officials including Chief Digital Development Officer for the U.S. Agency for International Development Chris Burns. In remarks at the conference, […]
A high school’s deepfake porn scandal is pushing US lawmakers into action (MIT Technology Review) Legislators are responding quickly after teens used AI to create nonconsensual sexually explicit images of more than 30 girls.
Wyden to block Senate vote on new NSA, Cyber Command lead (POLITICO) The senator is pledging to stop a vote on Lt. Gen. Timothy Haugh to lead the agencies until the NSA releases details on potential surveillance of Americans.
US Justice Department urged to investigate after foreign hackers breach Pennsylvania water supply (Fox News) Members of Congress have called on the U.S. Justice Department to investigate a cyberattack by on a Pennsylvania water utility. The hacking group is believed to be from Iran.
Meta Sues FTC on Privacy Move in Challenge to In-House Court (Bloomberg) Suit says agency proceedings violate constitutional rights. FTC sought to amend privacy pact over alleged broken promises.
Montana Judge Says TikTok Ban Likely Violates First Amendment (Wall Street Journal) The social-media app sued after the state passed a law banning TikTok to protect residents’ privacy.
Legal challenge launched against NHS-Palantir data deal (Computing) Campaigners have launched legal action in a bid to halt a contentious data sharing deal between the NHS and US tech company Palantir citing concerns over patient privacy.
About 4 million New Yorkers impacted by medical company's data breach, New York Attorney General Letitia James says (CBS News) The breach has affected Northwell Health and Crouse Health.
For a complete running list of events, please visit the Event Tracker.
AWS re:Invent 2023 (Las Vegas and Virtual, Nevada, USA, Nov 27 - Dec 1, 2023) Come together with cloud enthusiasts from around the world to hear the latest cloud industry innovations, meet with AWS experts, have fun, and build connections. You’ll gain skills and expertise that would take weeks or months to learn at home.
SANS Austin Fall 2023 (Austin, Texas, USA, Nov 27 - Dec 2, 2023) At SANS Austin Fall 2023, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Insider Threat Program Development - Management Training Course (Washington, DC, USA, Dec 4 - 5, 2023) The training course will be taught on December 4-5, 2023. This highly sought after and very comprehensive 2 day training course will ensure that the Insider Threat Program (ITP) Manager and others who support the ITP (Insider Threat Analyst, FSO, CSO, CISO, Human Resources, CIO - IT, Network Security, Counterintelligence Investigators, Behavioral Science Professionals, Legal Etc.), have the Core Knowledge, Blueprint, Resources needed for developing, managing, enhancing an ITP / ITP Working Group. This training will also provide students with an in depth view of how to obtain visibility of potential or malicious employee actions on computer systems and networks, using Insider Threat Detection software. Our student satisfaction levels are in the exceptional range. Over 900+ individuals have attended this training course and received ITP Manager Certificates.
SANS Phoenix-Tempe 2023 (Phoenix, Arizona, USA, Dec 4 - 9, 2023) At SANS Phoenix-Tempe 2023, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Russia’s Cyber War Against Ukraine: Lessons and Policy Challenges (Virtual, Dec 5, 2023) Ukraine has become a crucible for a new breed of warfare—one fought not only with traditional battlefield weapons but also with lines of code and keystrokes. The country has faced for almost a decade an unrelenting wave of cyberattacks, with this invisible front blurring the line between state and nonstate actors, and introducing hackers, volunteers, and private companies to the fight. Ukraine’s experience has implications that go beyond national security to include the future of international cyber policy, the role of technology giants in warfare, and the rights and responsibilities of civilians in a conflict. This event will discuss the various questions of cyber warfare that Russia’s war on Ukraine has brought to the fore: How has the conflict influenced Ukrainian cyber policy and where is it headed? What role do citizens and other nonstate actors play in developing digital resilience? How can legal and policy challenges relevant to “cyber troops” be addressed? How should international humanitarian law treat evolving cyber warfare?
