Somebody once said, “if it ain’t broke, don’t fix it.” That somebody didn’t work in cybersecurity. And that somebody didn't work at Raytheon, Intelligence & Space. Here we break the definition of cyber defense: Hiring the sharpest minds, actively hunting threats, and designing one-of-a-kind-never-been-done-before solutions. That’s how we shake up the future and uncover new thinking to protect our customer's most vital infrastructure and our way of life.
Happy New Year, CyberWire readers! As a special thank you, we would like to offer you a free practice test from CyberVista, as well as three free months of CyberWire Pro. Visit thecyberwire.com/promo and use the code PROLEARN to redeem the offer.
Reuters describes a cyberespionage campaign carried out by the hitherto little-known threat group researchers track as "Cold River." The group is circumstantially but convincingly linked to Russian intelligence services (possibly the FSB, although that's unclear) through its Russophone operations and the location of at least one of its personnel in the northern city of Syktyvkar, capital of the Komi region. The effort involved attempted social engineering of US nuclear researchers at the Department of Energy's Brookhaven, Argonne, and Lawrence Livermore National Laboratories. The campaign peaked in August and September, as Russian President Putin's nuclear threats reached their peak. It's unknown whether the campaign enjoyed any success: Reuters says that both the Department of Energy and the FSB declined to comment.
Added, 3:30 PM ET, January 6th, 2023.
Roger Grimes, data-driven defense evangelist at cybersecurity company KnowBe4, commented on the social-engineering aspect of the campaign. “Hopefully all employees in our nation's critical infrastructure are already using phishing-resistant multifactor authentication," he said. "That will put down a large percentage of phishing attacks, but we can expect Russian phishing campaigns to keep getting more sophisticated over time. That's why all organizations should aggressively train their employees in how to recognize, stop, and report phishing attacks."
Tune in to hear CyberWire’s Chief Analyst and Senior Fellow Rick Howard’s conversation with Hash Table experts as they discuss the lessons learned about software supply chain management and a “Secure-byDesign” approach to securing software environments, dev processes, and products. Rick also has a chat with SolarWinds CISO Tim Brown. Check out the episode here.
Over the course of 2022, a security research team led by Sam Curry found vulnerabilities affecting vehicles from sixteen leading car manufacturers. The car manufacturers have since released patches for the flaws, and Curry’s team earlier this week published an extensive writeup on the vulnerabilities. The type and severity of the vulnerabilities varied by model. In some cases, an attacker could unlock the car, start the engine, report the vehicle as stolen, or track the car’s location. The affected vehicles included models manufactured by Acura, BMW, Ferrari, Ford, Genesis, Honda, Hyundai, Infiniti, Jaguar, Kia, Land Rover, Mercedes-Benz, Nissan, Porsche, Rolls Royce, and Toyota. In addition to vulnerabilities affecting individual cars, the researchers discovered API vulnerabilities that could grant an attacker access to sensitive company accounts. BleepingComputer notes that BMW and Mercedes-Benz could have been "affected by company-wide SSO (single-sign-on) vulnerabilities that [might have] enabled attackers to access internal systems.” For more on automotive vulnerabilities, see CyberWire Pro.
The CyberWire can help you fill your funnel and build partnerships with valuable leads. With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust us to get their messages out. Feature your brand with the source that top security leaders choose. Learn more.
Continuous integration and continuous delivery platform CircleCI has disclosed a security incident that began on December 21st, BleepingComputer reports. The company hasn’t released many details about the incident, but customers are asked to “rotate any and all secrets stored in CircleCI” as soon as possible. CircleCI also says that it’s confident that the risk has been eliminated, and the company is working with third-party investigators to “validate the steps and actions of our investigation.” CircleCI concluded, “While we are actively investigating this incident, we are committed to sharing more details with customers in the coming days.” For more on the CircleCI disclosure, see CyberWire Pro.
The Guardian continues to recover from the ransomware attack it disclosed on December 21st, and the news outlet expects recovery to take at least a month. ComputerWeekly shares widespread speculation that the Guardian's coverage of Russia's war in Ukraine prompted the attack: "It can also be fairly said that reporting on major international incidents such as Russia’s war on Ukraine may leave a title exposed to malicious actions by Russia-backed or aligned groups."
Mandiant has found that Turla, a familiar threat actor associated with Russia's FSB, is piggybacking offensive cyber operations on some old commodity malware. Turla is using Andromeda malware distributed through infected USB drives to selectively install the Kopiluwak reconnaissance utility and the QuietCanary backdoor in Ukrainian targets. Re-registration of old, expired ANDROMEDA domains has proven particularly useful. As Wired points out, Andromeda is a commonplace banking Trojan criminals use for credential theft. The researchers conclude, "As older ANDROMEDA malware continues to spread from compromised USB devices, these re-registered domains pose a risk as new threat actors can take control and deliver new malware to victims. This novel technique of claiming expired domains used by widely distributed, financially motivated malware can enable follow-on compromises at a wide array of entities. Further, older malware and infrastructure may be more likely to be overlooked by defenders triaging a wide variety of alerts."
The campaign represents the first time Mandiant has seen Turla in operation against Ukrainian targets during the present war. The group seems to be using earlier battlespace preparation to pick targets of strategic interest to Russia, but Turla also seems to be acting in haste, and with the necessary disregard for operations security haste normally exacts in trade for quick results.
The Hill reports that US Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly yesterday warned that, while Russia clearly miscalculated its decision to go to war in Ukraine, and that its cyber operations have fallen short of expectations, these shouldn't be grounds for complacency. “It looks like it’s not going to end anytime soon. We need to continue to be vigilant, keep our shields up, and ensure that we are putting all those controls in place,” she said during a panel discussion at the Consumer Electronics Show in Las Vegas.
The CyberWire's continuing coverage of the unfolding crisis in Ukraine may be found here.
The US Cybersecurity and Infrastructure Security Agency (CISA) yesterday released three industrial control system (ICS) advisories. They affect Hitachi systems: Hitachi Energy UNEM, Hitachi Energy FOXMAN-UN, and Hitachi Energy Lumada Asset Performance Management.
Today's issue includes events affecting Australia, Canada, China, France, Germany, Indonesia, Iran, Japan, New Zealand, Russia, Türkiye, Ukraine, the United Kingdom, and the United States.
Ukraine at D+315: Not much of a cease-fire. (CyberWire) Russia's Christmas cease-fire ends almost as soon as it begins.
Russia-Ukraine war: air raid sirens reported despite Russia calling ceasefire; Germany to send 40 armoured personnel carriers – live (the Guardian) Ceasefire to observe Orthodox Christmas begins but Ukraine leader calls it a ‘trick’; Germany to send equipment including Patriot anti-aircraft missile system
Putin orders weekend truce in Ukraine; Kyiv won't take part (AP NEWS) Russian President Vladimir Putin on Thursday ordered his armed forces to observe a unilateral 36-hour cease-fire in Ukraine this weekend for the Orthodox Christmas holiday, the first such sweeping truce move in the nearly 11-month-old war .
Temporary Russian cease-fire in Ukraine begins amid uncertainty and suspicion (Los Angeles Times) Moscow has ordered its forces to observe a 36-hour holiday cease-fire in Ukraine, but Kyiv has scoffed at the move, and its viability is in doubt.
Russia-Ukraine war live: Putin’s ceasefire proposal shows he is ‘trying to find oxygen’, says Biden (MSN) The Russian president has called for ceasefire to take place from noon 6 January to midnight 7 January for Orthodox Christmas
Ukraine Clashes Continue Despite Russia’s Cease-Fire Calls (Wall Street Journal) Russian President Vladimir Putin had proposed a 36-hour truce to mark Russian Orthodox Christmas, but Kyiv dismissed it as a ploy.
Russia 'breaks own ceasefire' (The Telegraph) Russia appeared to break its own ceasefire after witnesses heard shelling in the city of Bakhmut hours after the pause to fighting was announced.
Zelensky: Putin's Christmas ceasefire is a 'cover' for Russia to stop Ukraine's advances (The Telegraph) The Ukrainian president said the Kremlin would use the temporary truce to bring in more backup troops and equipment
Russia envoy: U.S. extends Ukraine war by sending arms, rejecting ceasefire (Newsweek) "All the actions by the Administration indicate a lack of any desire for a political settlement," Russian Ambassador Anatoly Antonov said.
Ukraine's next major offensive: Here's when and where Kyiv could hit (euronews) Military experts say Ukraine could try and cut Russian forces off from Crimea by striking around the Berdiansk region before spring.
Expect more strikes 'deeper and deeper' into Russia, Ukraine’s spy chief tells ABC News (ABC News) There will likely be further strikes into Russian territory, Ukraine's military intelligence head, Kyrylo Budanov, told ABC News in an interview from Kyiv.
Ukraine-Russia war latest: Russians 'using bodies as shields' on the battlefield (The Telegraph) Russians are using bodies as "shields" on the battlefield, the chief of the military intelligence of Ukraine has said.
Ukraine-Russia war latest: Russians 'using bodies as shields' on the battlefield (The Telegraph) Russians are using bodies as "shields" on the battlefield, the chief of the military intelligence of Ukraine has said.
Reports Of Shelling As Uneasy Kremlin-Called Cease-Fire Takes Effect In Ukraine (RadioFreeEurope/RadioLiberty) A Kremlin-declared truce in fighting in Ukraine for Orthodox Christmas took effect on January 6, but it was unclear whether either side would abide by what Kyiv and some Western governments -- including the United States -- called a ploy by Russia to regroup after weeks of setbacks.
Russia-Ukraine War: Putin Orders Brief Unilateral Cease-Fire; Ukraine Calls It ‘Hypocrisy’ (New York Times) President Vladimir V. Putin told Russian forces to observe a 36-hour Christmas truce, but Ukraine dismissed it as hypocrisy.
Kyiv dismisses Putin's call for 36-hour ceasefire in Ukraine as 'hypocrisy' (CNN) Russian President Vladimir Putin has ordered his defense minister to implement a temporary ceasefire in Ukraine for 36 hours this week to allow Orthodox Christians to attend Christmas services, according to a Kremlin statement Thursday. But the proposal was swiftly dismissed as "hypocrisy" by Ukrainian officials.
Ukraine live briefing: Putin orders 36-hour unilateral cease-fire in Ukraine for Orthodox Christmas (Washington Post) Russian President Vladimir Putin ordered his invading forces to implement a unilateral cease-fire for Orthodox Christmas beginning at noon Friday “along the entire line of contact between the parties in Ukraine” and continuing through Saturday, according to a Kremlin statement.
Why U.S. HIMARS Rockets Are Key to Ukraine's War Success (Time) The rockets have provided Ukraine with greater long range capabilities in responding to Russian aggression.
US and Germany agree to send infantry fighting vehicles to Ukraine (the Guardian) Joe Biden and Olaf Scholz indicate shift in position on supplying heavier weapons to Kyiv to help in war against Russia
Here's how Ukraine could use the Bradley Fighting Vehicles it's getting from the US, experts say (Task & Purpose) The Ukrainians would be able to use Bradley Fighting Vehicles in coordination with dismounted infantry.
Germany Targeted by Putin in War on Ukraine (Kyiv Post) While most European states assist Ukraine, Berlin's reluctance to give Ukraine tanks and weaponry is a consequence of Russia's decades-long subversive...
Putin is preparing for a long war (Atlantic Council) Vladimir Putin used his traditional New Year address on December 31 to mobilize the Russian public for a long war in Ukraine while warning that the West is intent on "destroying Russia," writes Alexander Motyl.
For Putin and Xi, 2023 Could Mark the True ‘End of History’ (World Politics Review) A true “end of history” moment may come as the flaws in Xi Jinping’s China and Putin’s Russia end the democracy vs. autocracy debate.
Iran and Russia Are Closer Than Ever Before (Foreign Policy) They’ve found common ground on the battlefield in Ukraine, but not everyone in Tehran is happy about it.
Lessons for the Next War (Foreign Policy) Twelve experts weigh in on how to prevent, deter, and—if necessary—fight the next conflict.
Ukraine’s growing veteran community will shape the country’s future (Atlantic Council) Ukraine's rapidly expanding veteran community can make a major contribution to the country's post-war future but will require a range of support measures in order to reintegrate into civilian life successfully.
Congress just passed a big change to war crimes law. Here’s what it means for Ukraine and beyond. (Atlantic Council) Now, the US can prosecute war crimes whenever the alleged perpetrator is on US soil, regardless of the perpetrator's nationality or where the crime was committed.
Notorious Russian Spies Piggybacked on Other Hackers' USB Infections (WIRED) The infamous, FSB-connected Turla group took over other hackers' servers, exploiting their USB drive malware for targeted espionage.
Turla: A Galaxy of Opportunity | Mandiant (Mandiant) A suspected Turla Team operation distributing a reconnaissance utility and malware to victims in Ukraine.
CISA director: US needs to be vigilant, ‘keep our shields up’ against Russia (The Hill) The U.S. needs to remain vigilant in efforts to protect against potential Russian cyberattacks as the war with Ukraine presses on, Cybersecurity and Infrastructure Security Agency (CISA…
Hillicon Valley — US official warns of potential Russian cyberattacks (The Hill) A top cyber official warned the U.S. against possible Russian cyber threats as the war in Ukraine drags on. Meanwhile, Twitter reportedly suffered a breach this week when more than 200 millio…
It's time to focus on information warfare's hard questions (CyberScoop) Our collective obsession with information operations are distracting from more fundamental questions about online influence.
Leak reveals Roman Abramovich’s billion-dollar trusts transferred before Russia sanctions (the Guardian) Exclusive: Files raise questions about whether oligarch’s children were made beneficiaries to protect fortune from possible asset freezes
Exclusive-Russian Hackers Targeted U.S. Nuclear Scientists (Reuters via US News) A Russian hacking team known as Cold River targeted three nuclear research laboratories in the United States this past summer, according to internet records reviewed by Reuters and five cyber security experts.
CircleCI security alert: Rotate any secrets stored in CircleCI (CircleCI) Read CircleCI’s security alerts from January 4 and January 5, 2023.
CircleCI warns of security breach — rotate your secrets! (BleepingComputer) CircleCI, a software development service has disclosed a security incident and is urging users to rotate their secrets. The CI/CD platform touts having a user base comprising more than one million engineers who rely on the service for "speed and reliability" of their builds.
CircleCI Urges Customers to Rotate Secrets Following Security Incident (The Hacker News) CircleCI is asking its customers to rotate their secrets as a precautionary measure following a security incident.
Slack Says Hackers Stole Private Source Code Repositories (SecurityWeek) Slack says hackers have stolen private source code repositories, but customers are not affected.
Slack's private GitHub code repositories stolen over holidays (BleepingComputer) Slack suffered a security incident over the holidays affecting some of its private GitHub code repositories.
Hackers use CAPTCHA bypass to make 20K GitHub accounts in a month (BleepingComputer) South African threat actors known as 'Automated Libra' has been improving its techniques to make a profit by using cloud platform resources for cryptocurrency mining.
Rackspace: Customer email data accessed in ransomware attack (BleepingComputer) Rackspace revealed on Thursday that attackers behind last month's incident accessed some of its customers' Personal Storage Table (PST) files which can contain a wide range of information, including emails, calendar data, contacts, and tasks.
Rackspace blames ransomware woes on zero-day attack (Register) Play gang blamed, ProxyNotShell cleared and hosted Exchange doomed
Blind Eagle Hackers Return with Refined Tools and Sophisticated Infection Chain (The Hacker News) Financially motivated threat actor Blind Eagle has resurfaced with new tools and infection chain targeting organizations in Colombia and Ecuador.
Rust Hyper - Potential DoS Vulnerability (JFrog) The JFrog Security Research team is constantly looking for new and previously unknown vulnerabilities and security issues in popular open-source projects to help improve their security posture and defend the wider software supply chain. As part of this effort, we recently discovered and disclosed multiple vulnerabilities in popular Rust projects such as Axum, Salvo and …
200 Million Twitter Users' Data Is for Sale on the Dark Web for $2 (Gizmodo) An ongoing data disaster at Twitter just got a whole lot worse.
Twitter Security Headaches Mount With User Data Leak Claim (Bloomberg) Database posted on hacking forum is alleged to contain email addresses and handles for more than 230 million Twitter users.
Second cabinet minister says Twitter account hacked (the Guardian) Northern Ireland secretary Chris Heaton-Harris apologises after account posts ‘deeply unpleasant stuff’
Cybersecurity Experts Warn Twitter Breach Will Have Lasting Ramifications (Forbes) Delete any emails that look like they're from Twitter to avoid phishing scams.
What we know about the LastPass breach (so far) (Cybersecurity Dive) The blast radius from a breach at LastPass grew from bad to worse during a four-month period. Most of the data held by the password manager is now compromised.
SpyNote Strikes Again: Android Spyware Targeting Financial Institutions (The Hacker News) A new feature-rich version of SpyNote Android spyware has been detected targeting financial institutions, including HSBC UK, Deutsche Bank.
Bluebottle Continues Bank Heist Assault With Signed Malware (Dark Reading) The financially motivated threat group, also known as OPERA1ER, demonstrated an evolution in tactics in its compromise of three Francophone financial institutions in Africa, likely adding to its $11 million to-date haul.
Kreditkarten-Daten in Gefahr: Sicherheitsforscher warnen vor neuem WhatsApp-Betrug (CHIP 365) Sicherheitsforscher warnen vor einer neuen Betrugsmasche bei WhatsApp. Wer hier nicht aufpasst, gibt sensible Daten wie die der Kreditkarte an Dritte weiter.
16 Car Makers and Their Vehicles Hacked via Telematics, APIs, Infrastructure (SecurityWeek) Multiple vulnerabilities identified in vehicles from 16 manufacturers allowed researchers to control car functions, shut down engines, and obtain sensitive information.
Ferrari, BMW, Rolls Royce, Porsche and more fix vulnerabilities giving car takeover capabilities (The Record by Recorded Future) Several of the biggest car brands have fixed dozens of vulnerabilities, some of which would have allowed for the full takeover of vehicles.
Maternal & Family Health Services Issues Notice of Cybersecurity Incident (PR Newswire) Maternal & Family Health Services ("MFHS"), a private non-profit health and human services organization serving Northeastern Pennsylvania,...
Cyberattack on LA’s housing agency may come with a ‘pinky’ promise (Daily News) Expert says in the cyberattack on L.A.’s housing agency, don’t agree to a ransom even if the attackers insist.
UK schools' confidential data leaked on the dark web (Computing) Threat group Vice Society is allegedly the leak of data from 14 schools
Ransomware Attack Disrupts Classes for Massachusetts School System (GovTech) Swansea Public Schools Superintendent John J. Robidoux announced school closures following a ransomware attack against the network. The attack follows a similar cyber incident impacting Bristol Community College.
Ayrshire council probes possible data breach in school photo (Daily Record) Ayrshire Live can reveal that the local authority has launched a probe after a complaint was raised following the alleged publication of a vulnerable child’s picture on a school social media platform.
Hitachi Energy UNEM (CISA) 1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: UNEM Vulnerabilities: Inadequate Encryption Strength, Use of Hard-coded Cryptographic Key, Cleartext Transmission of Sensitive Information. 2.
Hitachi Energy FOXMAN-UN (CISA) 1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: FOXMAN-UN Vulnerabilities: Inadequate Encryption Strength, Use of Default Cryptographic Key, Use of Hard-coded Cryptographic Key, Cleartext Transmission of Sensitive Information. 2.
Hitachi Energy Lumada Asset Performance Management (CISA) 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: Lumada Asset Performance Management (APM) Vulnerabilities: Classic Buffer Overflow, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause a denial-of-service condition or unauthorized remote arbitrary code execution.
Fortinet and Zoho Urge Customers to Patch Enterprise Software Vulnerabilities (The Hacker News) Fortinet has identified a high-severity flaw in multiple versions of FortiADC. Zoho also warns of an SQLi vulnerability affecting Access Manager Plus,
Security Outlook 2023: Cyber Warfare Expands Threats (eSecurityPlanet) Wiperware, ransomware, critical infrastructure and the software supply chain head a long list of threats, but there's hope for cybersecurity.
Hackers went after personally identifiable information the most, study says (SC Media) A recently released study that analyzed the top 100 breaches from July 2021 to July 2022 showed that hackers are going after personally identifiable information 42.7% of the time.
Predictions 2023: Big Tech's Coming Security Shopping Spree (SecurityWeek) The SecurityWeek editorial team looks into the 2023 crystal ball and sees a surge in security acquisitions led by big-tech, a major ICS malware attack and a VC-backed startup ecosystem in a state of turmoil.
Netskope Raises $401M Via Convertible Notes (CRN) Netskope raises $401 milllion in financing.
WSJ News Exclusive | ChatGPT Creator in Investor Talks at $29 Billion Valuation (Wall Street Journal) A tender offer at that valuation would make OpenAI one of the most valuable startups in the U.S., bucking a tech retrenchment.
Trend Micro Announces New Subsidiary for 5G Cybersecurity (PR Newswire) Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global cybersecurity leader, has established CTOne, a new Trend Micro subsidiary focused on...
WSJ News Exclusive | Crypto Lender Genesis Considers Bankruptcy, Lays Off 30% of Staff (Wall Street Journal) The firm suffered steep losses from loans it supplied to the now-defunct trading firm Alameda Research and crypto hedge fund Three Arrows Capital.
Musk Lays Off Twitter Engineers Working on Advertising, As Ad Revenue Shrinks (The Information) Twitter laid off about 40 data scientists and engineers working on advertising late Wednesday night in what amounted to at least the third round of cuts since mid-December, according to a person with direct knowledge of the layoffs. The layoffs targeted areas that Twitter’s leadership considers ...
SentinelOne Recognized Under XDR, ITDR, EDR, and EPP Categories in 2022 Gartner® Hype Cycle™ Report (Business Wire) SentinelOne (NYSE: S), an autonomous cybersecurity platform company, today announced it was recognized in the December 2022 Gartner Hype Cycle for End
Morrison Foerster Elects 18 Partners (Morrison Foerster) Morrison Foerster is pleased to announce the election of 18 lawyers to the firm’s partnership, effective January 1, 2023. The class of 2023 includes lawyers from 11 practice groups across seven offices in the United States, Europe, and Asia.
WhatsApp Launches Tool to Fight Internet Censorship (WIRED) Amid internet shutdowns in Iran, the encrypted messaging app is introducing proxy connections that can help people get online.
LogRhythm Enhances Security Analytics with Expanded Security Operations Capabilities (LogRhythm) New platform features and integrations enable analysts to quickly detect and remediate threats LogRhythm, the company empowering security teams to navigate the ever-changing threat landscape with confidence, today announced a series of expanded capabilities and integrations for its security operations…
D-Wave and Davidson Technologies Enter Multi-Year Reseller Agreement (Business Wire) D-Wave Quantum Inc. and Davidson Technologies, Inc. announced that the companies have entered into a multi-year reseller agreement.
Egnyte Announces New Offering Providing Early-Stage Life Science Startups a Year of Egnyte’s Platform at No Cost | Egnyte (Egnyte) Egnyte, the secure platform for content collaboration and governance, recently announced it will be providing early-stage life sciences innovators complimentary access to their award-winning Egnyte for Life Sciences platform.
Chiron Investigations Unveils Revolutionary Cryptocurrency Recovery System (Yahoo) Chiron Investigations Unveils Revolutionary Cryptocurrency Recovery System
Why Is Wickr Shutting Down? Wickr App History, Foundation, And More - News (Fresherslive) Why Is Wickr Shutting Down - Wickr is an American software company in New York City. The corporation is primarily known for its same-named instant messaging program. In this article, we will explain Why Is Wickr Shutting Down. Therefore, kindly follow this article till the end to find out Why Is Wickr Shutting Down.
NIST Develops Cybersecurity Profile for Satellite Ground Operations (Executive Gov) Looking for the latest Government Contracting News? Read about NIST Develops Cybersecurity Profile for Satellite Ground Operations.
Cloud email services bolster encryption against hackers (TechRepublic) Google, Microsoft & Proton launched new encryption products to confront the 50% increase in ransomware, phishing & other email-vector attacks.
Real vulnerability management goes beyond NIST’s Cybersecurity Framework (GCN) Rather than solely relying on the typical defensive playbook, state and local government agencies must develop a proactive and risk-based approach to cybersecurity.
2023 Offensive Security Resolutions from Bishop Fox (Bishop Fox) Get familiar with Bishop Fox's most important offensive security resolutions for 2023 and level up our hacking skills in the coming year.
Space Race: Defenses Emerge as Satellite-Focused Cyberattacks Ramp Up (Dark Reading) Amid escalating cyber activity, two separate cybersecurity frameworks are targeting the satellite arena, highlighting the ease in attacking the infrastructure and the difficulty in defending it.
NATO tests AI’s ability to protect critical infrastructure against cyberattacks (CSO Online) Cybersecurity experts experiment with autonomous intelligence to secure and defend against increasing cyberthreats posed to critical infrastructure.
What’s next for quantum computing (MIT Technology Review) Companies are moving away from setting qubit records in favor of practical hardware and long-term goals.
How higher ed institutions can streamline security operations (EdScoop) Winston-Salem State University CIO and Tanium on how higher-ed institutions can rethink their security approach to keep up with today’s rapidly changing technology.
University of Denver Recognized for Excellence in Cyber Defense (University of Denver) Many of us have experienced the uneasiness of checking an account balance and discovering a list of unauthorized charges or the dread induced by a Google alert announcing a list of compromised passwords.
ChatGPT banned in NYC schools over learning impact concerns (BleepingComputer) The NYC Department of Education has banned the use of ChatGPT by students and teachers in New York City schools as there are serious concerns about its use hampering learning and leading to misinformation.
Japan, US finalising memorandum of understanding on cyber security - Nikkei (Yahoo) Japan and the United States are finalising a memorandum of understanding on cyber security, Japan's Nikkei newspaper reported on Thursday. Japan's trade minister, Yasutoshi Nishimura, is likely to meet U.S. Secretary of Homeland Security Alejandro Mayorkas on Friday in Washington D.C. to reach an agreement, the Nikkei added.
Pentagon brings Five Eyes into zero trust and JADC2 summit (Inside Defense) During its second summit to advance zero-trust initiatives, the Joint Staff (J-6) included the intelligence alliance Five Eyes, bringing the U.K., Australia, Canada and New Zealand into conversations on command and control.
The Biden national cyber strategy is unlike any before it (Washington Post) For the first time, regulation is on the menu of a national cybersecurity strategy.
Foreign Meddling in US Elections Affects Allies’ Trust, Study Finds (Defense One) When respondents were told that American democracy wasn’t working reliably, they lost faith in the U.S. commitment to partnerships.
U.S. national cyber strategy to stress Biden push on regulation (Washington Post) The White House wants expanded requirements for private companies that operate in critical infrastructure sectors
US cybersecurity director: The tech ecosystem has ‘become really unsafe’ (Yahoo Finance) Cybersecurity and Infrastructure Security Director Jen Easterly says companies need to work more diligently to ensure the software they put out into the world can't be targeted by hackers.
'Twitter court' and other solutions could bring accountability to social media (UPI) One of Elon Musk's stated reasons for purchasing Twitter was to use it to defend the right to free speech. The ability to defend that right, or to abuse it, lies in a specific piece of legislation passed in 1996.
New Year, New State Privacy Laws: California and Virgina Laws Are Now Effective and More Requirements Are on Tap in 2023 (Wiley) 2023 already is a landmark year for privacy regulation. As of January 1, 2023, two new privacy laws are now in effect: (1) the California Privacy Rights Act (CPRA), which amends the California Consumer Privacy Act (CCPA), and (2) the Virginia Consumer Data Protection Act (VCDPA).
France announces Vincent Strubel as new top cybersecurity official (The Record by Recorded Future) The French government on Thursday named Vincent Strubel the new chief of its national cybersecurity agency.
Ministry, Police increase security in cyberspace ahead of election - ANTARA News (Antara News) Cyberspace security was one of the aspects that the government -- in this case the Communication and Informatics Ministry -- intended to prioritize, as the ...
The United States and Türkiye Take Joint Action to Disrupt ISIS Financing (United States Department of State) The United States and Türkiye have disrupted ISIS’s ability to finance its operations by designating four individuals and two entities of an ISIS financial facilitation network. The United States designated members of the network pursuant to counterterrorism authorities that target terrorist groups and their supporters. Concurrently, Turkish authorities have implemented an asset freeze against members […]
LastPass data breach led to $53K in Bitcoin stolen, lawsuit alleges (Cointelegraph) A class action lawsuit has been filed against password security firm LastPass following last year’s data breach.
LastPass hit with class-action lawsuit over hack (Fox Business) Password manager LastPass has been slapped with a class-action lawsuit from a former customer who claims a hacker stole $53,000 from him as a result of a data breach
Exclusive: FTX's former top lawyer aided U.S. authorities in Bankman-Fried case (Reuters) FTX's former top lawyer Daniel Friedberg has cooperated with U.S. prosecutors as they investigate the crypto firm's collapse, a source familiar with the matter said, adding pressure on founder Sam Bankman-Fried who was arrested on criminal fraud charges last month.
Influencers outshine traditional media on coverage of FTX implosion (Washington Post) A group of online creators has skyrocketed to fame by covering every aspect of the meltdown, but some optimize for attention over accuracy
SEC Pursues $45M Scam Based in Fake Blockchain Technology (CoinDesk) The U.S. securities agency is going after the people behind what it says was a massive fraud stealing from tens of thousands of investors.
For a complete running list of events, please visit the Event Tracker.
World Digital Sovereignty Summit (Barcelona, Spain, Apr 20 - 21, 2023) The world is facing a tremendous step in digitalisation. On the one hand, this could bring countless advantages to all industries, like faster delivery, higher quality production, extreme cost cutting, and optimal market penetration. On the other hand, businesses face production stops by malware, loss of competition by data theft, and loss of investor trust due to leaked data. This summit will show ways out of this dilemma using sustainable, diverse, and clever strategies to build resilience and continuity. Specialists and managers come together to exchange know-how, explain innovative strategies, and learn about existing solutions.
Certified CMMC Professional (CCP) 2.0 Exam Prep (Virtual, Jan 9 - 13, 2023) This 5-day CCP course covers the foundational required curriculum along with CMMC Level 2 scoping and the full 110 practices. Edwards Cyber AB approved CCP 2.0 courses enable participants to sit for the CCP exam – making you a valuable resource to a consultancy providing CMMC preparation, C3PAO providing certified assessor support, or organization interested in having in-house CMMC trained resources. Edwards all-star lineup of Provisional Instructors (PIs) includes several of the CMMC industry’s most respected consultants along with Edwards’ internal SMEs to deliver their action packed bootcamps. Learn more and register now.
Convene: Security Training and Awareness Conference (Clearwater, Florida, USA, Jan 10 - 11, 2023) The National Cybersecurity Alliance is gathering training and awareness professsionals together to connect, share, and convene. Connect with the training and awareness community. Convene was created for this close-knit group, which has few opportunities to connect in person at an event designed just for them. Learn best practices. Thought leaders and industry executives will share their recent successes, failures and insights from recent campaigns and programs. Build camaraderie. Immersive gatherings with like-minded professionals breed innovation, sharing and human connection.
Insider Threat Program Development - Management Training Course (Laurel, Maryland, USA, Jan 30 - 31, 2023) The training course will be taught at the Johns Hopkins University Applied Physics Laboratory, in Laurel, Maryland. This highly sought after and very comprehensive 2 day training course will ensure the Insider Threat Program (ITP) Manager/ Senior Official (Insider Threat Analyst, FSO, CSO, CISO, Etc.), and others who support the ITP (Human Resources, IT, Network Security, Etc.), have the Core Knowledge, Blueprint, Resources needed for developing, managing, enhancing an ITP / ITP Working Group. Our student satisfaction levels are in the exceptional range. Over 900+ individuals have attended this training course and received ITP Manager Certificates.
CybertechGlobal Tel Aviv (Tel Aviv, Israel, Jan 30 - Feb 1, 2023) Cyber is all around us—it is one of the most trending topics in the tech and business arenas. It is a whole-encompassing industry that is not only about threats, but also covers the scope of digitalization and opportunities in the realm of innovation. From Tel Aviv and Rome, to Tokyo, Singapore, Panama, and more, Cybertech is the cyber industry’s foremost B2B networking platform conducting industry-related events all around the globe. Our conferences and exhibitions serve as the go-to place to make business happen and learn all about the latest technological innovations, challenges, and solutions to combating threats within the global cyber arena. Cybertech events feature top executives, government officials, leading decision-makers from a wide range of sectors including critical infrastructure, insurance, retail, health and government, defense, R&D, manufacturing, automotive, and more! Multinational corporations, startups, private and corporate investors, venture capital firms, experts, and clients—come and meet all the key players from the cyber industry and be immersed in everything there is to offer. Cyber. We live it. Breathe it. All at the forefront of global innovation.
Certified CMMC Professional (CCP) 2.0 Exam Prep (Virtual, Feb 6 - 10, 2023) This 5-day CCP course covers the foundational required curriculum along with CMMC Level 2 scoping and the full 110 practices. Edwards Cyber AB approved CCP 2.0 courses enable participants to sit for the CCP exam – making you a valuable resource to a consultancy providing CMMC preparation, C3PAO providing certified assessor support, or organization interested in having in-house CMMC trained resources. Edwards all-star lineup of Provisional Instructors (PIs) includes several of the CMMC industry’s most respected consultants along with Edwards’ internal SMEs to deliver their action packed bootcamps. Learn more and register now.
