LockBit vs. SpaceX. SVB update. Patch Tuesday. APT29 cyberespionage. Trends in cyber war. Regularizing cyber auxiliaries.

Summary

By the CyberWire staff

At a glance.

LockBit counts coup against an aerospace supply chain.
SVB's collapse and its effects on the cybersecurity sector.
Patch Tuesday notes.
SVR's APT29 used Polish state visit to the US as phishbait.
Ukraine's SSSCIP reports on trends in Russian cyber activity.
Regularizing hacktivist auxiliaries.

LockBit counts coup against an aerospace supply chain.

The LockBit ransomware gang claims to have compromised Maximum Industries, a supplier of components to SpaceX, SecurityWeek reports. The prize LockBit claims to have obtained includes some three-thousand engineering drawings, said to be "certified by SpaceX engineers." The text of LockBit's communique makes it clear that the target is SpaceX, not its supplier. The gang posted an announcement on its dark web page: "I would say we were lucky if SpaceX contractors were more talkative. But I think this material will find its buyer as soon as possible. Elon Musk we will help you sell your drawings to other manufacturers - build the ship faster and fly away. and now about the numbers: about 3,000 drawings certified by space-x engineers We will launch the auction in a week. ALL AVAILABLE DATA WILL BE PUBLISHED !" (Sic, we need hardly add.) SecurityWeek observes sensibly that ransomware gangs are known to include some whoppers in their claims, and that LockBit's announcement should be regarded with cautious skepticism. LockBit has given the victims a deadline of March 20th to pay.

Doing Threat Intel is Really Difficult - Try a Managed Intel Service

Why are you struggling with interpreting threat intel by yourself? Engage Nisos to achieve better risk insights and outcomes. Rely on the experts with a managed service that gives you the people, process, and technology to control costs while improving your defenses. Nisos leverages automation efficiency and analyst expertise that eliminates noise, identifies risks, and prioritizes your company-specific threats. We help you respond to threats faster and more effectively through assessments, monitoring, and investigations.

SVB's collapse and its effects on the cybersecurity sector.

Friday’s highly-documented crash of Silicon Valley Bank may spell doom for startups reliant on the bank for funding, as well as the greater cyber and tech startup sectors as a whole. The CyberWire over the weekend summarized the events surrounding the collapse. After a bank run by depositors that drove SVB into insolvency, the FDIC has placed the bank in receivership and is working to find buyers. This significant institution’s failure is expected to cause blowback for big tech, particularly for the startup ecosystem that surrounds it. And that includes the cybersecurity sector as well. For more on the effect of SVB's failure on the cyber sector in particular, see CyberWire Pro.

Predictive analytics to ensure your team passes the CISSP the first time.

Other CISSP certification training providers don't have a way to determine exam readiness until a practitioner passes (or fails) their certification exam. CyberVista's online CISSP course includes predictive analytics to show who is ready, who needs more time, and where to focus training. Through diagnostic exams, custom quizzes, a mock Computer Adaptive Test (CAT) Exam, and more, employers and practitioners alike feel confident in passing their CISSP the first time with CyberVista.

Patch Tuesday notes.

Microsoft issued a total of eighty patches yesterday, eight of which are classed as critical. One of these, CVE-2023-23397, is an elevation-of-privilege bug affecting Microsoft Outlook that’s currently being exploited by attackers. Russia’s APT28 (also known as Fancy Bear, an arm of the GRU) has been exploiting CVE-2023-23397 since at least April 2022 to target European “government, military, energy, and transportation organizations.” Microsoft has credited Ukraine’s CERT-UA for the discovery of the vulnerability. Another actively exploited bug, CVE-2023-24880, is a security feature bypass vulnerability impacting Windows SmartScreen.

Adobe has issued 106 patches for a variety of its products. Firefox has patched eleven security bugs with version 111.0, Naked Security reports. For more on Patch Tuesday, see CyberWire Pro.

SVR's APT29 used Polish state visit to the US as phishbait.

BlackBerry has been monitoring a campaign by Russia's SVR. "The new NOBELIUM campaign BlackBerry observed creates lures targeted at those with interest in the Ministry of Foreign Affairs of Poland’s recent visit to the U.S., and abuses the legitimate electronic system for official document exchange in the EU called LegisWrite. It partially overlaps with a previous campaign discovered by researchers in October 2022." ("Nobelium" is the name under which Microsoft and others track APT29, also known as Cozy Bear.) The campaign's objective appears to be cyberespionage, accomplished by penetration of European diplomatic organizations interested in aid to Ukraine. As BlackBerry notes, APT29's approach to gaining access to its targets involves routine phishing, but its actions on the objective, once it's in, are determined, clever, and persistent. "Its operators are known to be stealthy, extremely patient, and skilled in utilizing innovative intrusion techniques that abuse Microsoft technologies and services."

Ukraine's SSSCIP reports on trends in Russian cyber activity.

The State Service of Special Communications and Information Protection of Ukraine reviews trends in Russian cyber activity and notes the continuing close connection between cyberattacks proper and influence operations. The report's introduction argues that Russian cyber offensives are conducted by what amounts to an established community. Temporary fluctuations aside, the FSB's Gamaredon remains the most "persistent" of the Russian threat groups. Episodic lulls in Gamaredon's activity last summer seem to have been due to a lower operational tempo during reconnaissance phases of its campaigns. Gamaredon, however, is very far from being the only player, and a range of state groups and hacktivist auxiliaries have remained active throughout the war. (The GRU's Fancy Bear and the SVR's Cozy Bear, to take two other agencies, are also prominently mentioned in dispatches. Nor should their kid brother, Belarus's GhostWriter, be overlooked either.) These groups organize their operations around general goals and themes, without much evidence of direct command and coordination. "Because of formal attribution complexity, we suggest that in Q3–Q4 2022, Russian government-related adversaries focused on pursuing a common set of priorities and not actively coordinating." The most prominent hacktivist auxiliaries include XakNet (UAC-0106), the CyberArmyofRussia (UAC-0107), Zarya (UAC-0109), and, of course, KillNet (UAC-0108).

Regularizing hacktivist auxiliaries.

Ukraine has also drawn hacktivists to its cause. Newsweek's Shaun Waterman has an account of how Ukraine's government is moving to bring the IT Army in particular toward status as a properly regulated cyber reserve. The motivation for doing so would be to bring clarity to the volunteer hacktivists' status under international law, and to provide the sorts of controls over their activity that the laws of armed conflict suggest are appropriate. The closest model for the kind of reserve system Ukraine is establishing is found in Estonia. There, the Cyber Defense Unit forms part of the Estonian Defense League.

The CyberWire's continuing coverage of Russia's war against Ukraine may be found here.

Dateline

Russia-Ukraine war at a glance: what we know on day 385 of the invasion (the Guardian) US Reaper drone forced down into Black Sea after collision with Russian fighter; Russian diplomat says Moscow does not want ‘any confrontation’

Ukraine at D+384: Close combat and preparation for a long war. (CyberWire) Russia forces a US drone down in international airspace as the Duma takes steps to secure a continued supply of manpower. Ukraine's SSSCIP looks at Russia's cyber order of battle as Kyiv moves to regularize its own hacktivists.

Ukraine Says Determined To Defend Bakhmut As Russia Keeps Up Pressure On The City (RadioFreeEurope/RadioLiberty) Russia kept up the intensity of its ceaseless assault on Bakhmut and continued to target civilian objectives, causing casualties, as President Volodymyr Zelenskiy vowed to keep defending the city in the eastern region of Donetsk and inflict maximum losses to the enemy.

Ukrainian Firefighters Overwhelmed Near Bakhmut (Military.com) Ukrainian firefighters in the Donetsk region are being overwhelmed by recent Russian attacks on towns near Bakhmut. (Mar 13) AP

'Why should I fight?': How Russian soldiers are mutinying in face of 'certain death' (The Telegraph) Videos and messages from inside Putin’s army show troops deserting, fleeing and struggling to find their teams

Russia’s next civil war has already begun (The Telegraph) Factions in the military establishment are vying for position, at the expense of Putin’s invasion effort

Flood of Russians Alters Life for Countries That Took Them In (New York Times) Russians, fleeing their country and its war, have quickly reshaped the societies of nations like Georgia and Armenia.

Russian Fighter Strikes U.S. Unmanned Aircraft (U.S. Department of Defense) A Russian Su-27 aircraft struck an Air Force MQ-9 unmanned aerial vehicle's propeller, causing U.S. forces to bring the MQ-9 down into international waters of the Black Sea.

Russian Warplane Hits American Drone Over Black Sea, U.S. Says: Live Updates (New York Times) A U.S. military official said that an American Reaper drone was brought down in international waters after one of two intercepting Russian jets hit its propeller. Russia denied that the jet made contact.

Ukraine-Russia war: Pentagon summons Russian ambassador over 'reckless' drone incident (The Telegraph) The United States has summoned Russia's ambassador to Washington after a Russian Su-27 fighter jet downed a US military drone over the Black Sea, State Department spokesperson Ned Price has said.

Opening Remarks by Secretary of Defense Lloyd J. Austin III at the Tenth Ukraine Defense Contact Group (As Prepared) (U.S. Department of Defense) Secretary of Defense Lloyd J. Austin III delivered opening remarks at the tenth meeting of the Ukraine Defense Contact Group.

To help Ukraine, UK explores supplying Eurofighter Typhoons to European MiG-29 operators (Breaking Defense) UK armed forces minister James Heappey told lawmakers the UK was investigating giving Typhoons to countries that give MiGs to Ukraine, but experts said it's unclear how the MiGs could change the war and if any other countries would really want the Typhoons in the first place.

DeSantis, Backing Away From Ukraine, Angers G.O.P. Hawks (New York Times) The Florida governor, who joined Donald Trump in declaring that defending Ukraine from Russia was not a vital interest, drew swift condemnations from establishment Republicans.

Putin failed to freeze Europe but Russia’s energy war will continue (Atlantic Council) Vladimir Putin's plan to freeze Europe into submission during the winter season failed but there is no room for complacency as Russia still sees gas and oil exports as key weapons in its campaign to isolate and destroy Ukraine.

Russian Lawmakers Introduce Bill Raising Draft Age (The Moscow Times) Russian lawmakers introduced a bill raising the upper age limit for military conscription on Monday, drawing criticism that it may be attempting to compensate for troop losses in Ukraine by expanding eligibility for mobilization.

NOBELIUM Uses Poland's Ambassador’s Visit to the U.S. to Target EU Governments Assisting Ukraine (BlackBerry) NOBELIUM, aka APT29, is a sophisticated, Russian state-sponsored threat actor targeting Western countries. BlackBerry researchers recently observed a new campaign targeting European Union countries; specifically, its diplomatic entities and systems providing help to the government of Ukraine.

Ukraine Tracks Increased Russian Focus on Cyberespionage (Bank Info Security) As Russia's full-scale invasion of Ukraine last year stalled, Russian hacking teams increasingly shifted from causing all-out disruption to cyber espionage, data

Ukraine scrambles to draft cyber law, legalizing its volunteer hacker army (Newsweek) The Ukrainian government is seeking to incorporate its volunteer hacker brigade, the IT Army, into the nation's armed forces, despite warnings.

The harrowing war crimes in Ukraine and why they may never be prosecuted (The Telegraph) Rape as a weapon of war is common, but it typically remains undisclosed and hidden under layers of stigma and fear

Ukraine must do more to counter Russian narratives in the Global South (Atlantic Council) While Ukraine enjoys overwhelming support from the West, the Global South remains reluctant to oppose or even criticize Russia's ongoing invasion. Ukraine must do more to influence opinion in Asia, Africa, and Latin America.

Attacks, Threats, and Vulnerabilities

Ring Denies Falling Victim to Ransomware Attack (SecurityWeek) Ring says it has no indications it has fallen victim to a ransomware attack after cybergang threatens to publish supposedly stolen data.

Cryptocurrency Exchange Exposed Sensitive Customer Records Online (Website Planet) Cybersecurity Researcher, Jeremiah Fowler, has recently reported a discovery of a non password-protected database to WebsitePlanet that contained

Adobe Warns of ‘Very Limited Attacks’ Exploiting ColdFusion Zero-Day (SecurityWeek) Adobe issues urgent warning for “very limited attacks” exploiting a zero-day vulnerability in its ColdFusion web app development platform.

Microsoft SmartScreen Zero-Day Exploited to Deliver Magniber Ransomware (SecurityWeek) Cybercrime group exploiting a Microsoft SmartScreen zero-day vulnerability tracked as CVE-2023-24880 to deliver the Magniber ransomware.

Fortinet: New FortiOS bug used as zero-day to attack govt networks (BleepingComputer) Unknown attackers used zero-day exploits to abuse a new FortiOS bug patched this month in attacks targeting government and large organizations that have led to OS and file corruption and data loss.

Hackers used Fortra zero-day to steal sales data from cloud management giant Rubrik (Record) Cloud management giant Rubrik confirmed that hackers attacked the company using a vulnerability in a popular file transfer tool.

Ransomware Group Claims Theft of Valuable SpaceX Data From Contractor (SecurityWeek) The LockBit ransomware group claims to have stolen valuable SpaceX data after breaching the systems of Maximum Industries.

LockBit claims it stole SpaceX schematics, may leak them (Register) And also, Ring hit with ransomware, too? No, says Amazon

Key aerospace player Safran Group leaks sensitive data (Security Affairs) Top aviation company Safran Group left itself vulnerable to cyberattacks, likely for well over a year, underlining how vulnerable big aviation firms are to threat actors, according to research by Cybernews. Original post at https://cybernews.com/security/key-aerospace-player-leaks-sensitive-data/ The Cybernews research team recently discovered that the French-based multinational aviation company, the eighth largest aerospace supplier worldwide, was leaking […]

New threat group hacked EU healthcare agency and embassies, researchers say (Record) A new hacking group is targeting European countries and organizations in an espionage campaign that began in June 2022, according to new research.

UK Crypto Firm Loses $200m in Cyber-Attack (Infosecurity Magazine) Euler Finance suffered

UK’s largest state boarding school announces ‘sophisticated cyberattack’ (Record) The leadership of Wymondham College's parent company says the boarding school was not aware of any data breach, but some systems were affected.

Pupils affected as college hit by sophisticated cyber attack (Eastern Daily Press) Wymondham College said disruption was likely to continue until the Easter holidays due to its IT system being targeted.

LA housing authority discloses data breach after ransomware attack (BleepingComputer) The Housing Authority of the City of Los Angeles (HACLA) is warning of a "data security event" after the LockBit ransomware gang targeted the organization and leaked data stolen in the attack.

Data breach hits LA housing authority after LockBit attack (SC Media) The Housing Authority of the City of Los Angeles has disclosed having been impacted by data breach following LockBit ransomware's admission of compromising its systems and leaking its data, BleepingComputer reports.

Hacker posts more D.C. Health Link data online, exposing lawmakers' personal information (CyberScoop) Congressional officials believe 21 members of Congress have seen their personal information leaked online.

Merced College Provides Notice of Data Breach to Students Following Malware Attack (JD Supra) On March 9, 2023, Merced College (“MCCD”) filed a notice of data breach with the Attorney General of California after learning that a malware attack...

BlueVoyant Research Illuminates Latest Cyber Attack Techniques and How to Defend Against Them (PR Newswire) BlueVoyant, a cybersecurity company that illuminates, validates, and remediates internal and external risks in one platform, today released the...

Emerging External Cyber Defense Trends (BlueVoyant) To shed light on the state of external cyber defense, we compiled an analysis of emerging trends that represent critical concerns for organizations of all types.

CISA Adds Three Known Exploited Vulnerabilities to Catalog | CISA (Cybersecurity and Infrastructure Security Agency CISA) CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.

March 14 CISA KEV Breakdown | Microsoft, Fortinet (Nucleus Security) In this Breakdown, Nucleus experts explore the three vulnerabilities added to the CISA KEV list on March 14, 2023.

Security Patches, Mitigations, and Software Updates

March 2023 Patch Tuesday: Updates and Analysis (CrowdStrike) Microsoft has released 80 security patches for its March 2023 Patch Tuesday rollout: 9 vulnerabilities are rated Critical, 70 Important and 1 Moderate.

Microsoft Warns of Outlook Zero-Day Exploitation, Patches 80 Security Vulns (SecurityWeek) Microsoft warns of vulnerability (CVE-2023-23397) that could lead to exploitation before an email is viewed in the Preview Pane.

Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack (The Hacker News) Microsoft's latest Patch Tuesday update for March 2023 is here with fixes for 80 security flaws, including two actively exploited vulnerabilities.

Microsoft Releases March 2023 Security Updates (Cybersecurity and Infrastructure Security Agency CISA) Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can exploit some of these vulnerabilities to take control of an affected system.

Adobe Security Bulletin (Adobe) Security updates available for Adobe ColdFusion | APSB23-25

Adobe Releases Security Updates for Multiple Products (Cybersecurity and Infrastructure Security Agency CISA) Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit these vulnerabilities to take control of an affected system.

Firefox 111 patches 11 holes, but not 1 zero-day among them… (Naked Security) In the game of cricket, 111 is an inauspicious number, but for Firefox, there doesn’t seem to be much to worry about this month.

Mozilla Releases Security Updates for Firefox 111 and Firefox ESR 102.9 (Cybersecurity and Infrastructure Security Agency CISA) Mozilla has released security updates to address vulnerabilities in Firefox 111 and Firefox ESR 102.9. An attacker could exploit some of these vulnerabilities to take control of an affected system.

SAP Security Patch Day for March 2023 (Onapsis) SAP Patch Day for March 2023 addresses twenty-one new and updated patches including six HotNews Notes and four High Priority Notes.

CISA Releases Four Industrial Control Systems Advisories | CISA (Cybersecurity and Infrastructure Security Agency CISA) CISA released four Industrial Control Systems (ICS) advisories on March 14, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

Omron CJ1M PLC (Cybersecurity and Infrastructure Security Agency CISA) 1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Omron Equipment: CJ1M PLC Vulnerabilities: Improper Access Control

Autodesk FBX SDK (Cybersecurity and Infrastructure Security Agency CISA) 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Autodesk Equipment: FBX SDK Vulnerability: Out-of-bounds Read, Use After Free, Out-of-bounds Write

GE iFIX (Cybersecurity and Infrastructure Security Agency CISA) 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: GE Digital Equipment: iFIX Vulnerability: Code Injection

AVEVA Plant SCADA and AVEVA Telemetry Server (Cybersecurity and Infrastructure Security Agency CISA) 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: AVEVA Equipment: AVEVA Plant SCADA and AVEVA Telemetry Server Vulnerability: Improper Authorization

Trends

Entrust Survey Reveals Consumers Can’t Remember Their Passwords and It’s Reshaping the Identity Landscape (Business Wire) The Future of Identity Report Finds Consumers Want More Convenience Without Sacrificing Security

Huntress Research Survey Pulls Back Curtain on Security Threats to Mid-Sized Businesses (GlobeNewswire News Room) 61% of mid-sized businesses do not have dedicated cybersecurity experts...

DirectDefense Reports the Top Threats from 2022 and What’s Trending for 2023 (DirectDefense) Read highlights from the first-ever security operations threat report by DirectDefense.

Data Loss Prevention and Data Security Survey Report | CSA (Cloud Security Alliance) In partnership with Netskope, CSA developed a survey about data loss prevention and data security in the cloud, including DLP strategies and challenges.

Marketplace

Samsung Next Invests In Mitiga, Brings Total Funding to $45M (PR Newswire) Mitiga, the cloud and SaaS incident response leader, today announced the completion of its Series A Round, bringing total funding to $45...

Optiv More Than Doubles Federal Presence With ClearShark Acquisition (Dark Reading) Convergence of two leading cybersecurity companies creates federal sector powerhouse.

A-Labs Reaffirms $20 million PIPE Investment in HUB at $10 per share (PR Newswire) HUB Cyber Security Ltd (Nasdaq: HUBC), a developer of Confidential Computing cybersecurity solutions and services ("HUB" or the "Company"),...

Keyfactor Joins the Connectivity Standards Alliance (Business Wire) The IoT Security Leader Will Fuel Digital Trust in Matter-Certified IoT Devices, Enabling Faster, More Secure Go to Market Product Strategies for Customers

Silicon Valley Bank collapse poses challenge for cybersecurity defenders, firms (Washington Post) The cyber impact of the Silicon Valley Bank collapse

IT Leaders Reassess Vendor Risks After Silicon Valley Bank Collapse (Wall Street Journal) CIOs say they are checking in with suppliers and have brushed up on contingency plans. ‘If you receive the warning from the universe, take it on board.’

New SVB CEO: Startup Debt Facilities ‘Will be Honored,’ Says ‘A Lot of People’ Interested in Bank Assets (The Information) The government-appointed CEO of the Silicon Valley ‘bridge bank’ asked venture capitalists on Tuesday morning to keep deposits at the bank and return them to the institution. He also said clients with existing debt facilities will be honored. “I’m not asking you to do this as an act of charity,” ...

Apollo Asks VCs to Back Its Bid For Silicon Valley Bank Assets (The Information) Private equity giant Apollo Global Management has asked major venture capital firms to help finance a bid for the assets of Silicon Valley Bank, according to a person with knowledge of the discussion. Earlier, The Information reported that several firms, including General Catalyst, Andreessen ...

The collapse of Silicon Valley Bank foreshadows a bigger reckoning for the tech industry (Business Insider) "They will learn nothing from this": Tech-industry leaders remain staggeringly oblivious to the true lessons of Silicon Valley Bank's collapse.

Where the Venture Community Goes From Here (The Information) March 9, 2023, will be remembered as a sad day in Silicon Valley’s history. We have been through crises before—the Japan Inc. fears of the 1980s; the dot-com bubble during which my firm, General Catalyst, was founded; the global financial crisis of the late 2000s; the Covid-19 crisis we’re still ...

Opinion | How Bad Was the Silicon Valley Bank Bailout? (New York Times) It may not have been necessary, but it won’t do much harm, either.

Crypto Reg Affairs: Bank Collapses Raise Questions Over Crypto-Banking Relationships (Elliptic Connect) The failure of three US banks within a matter of days has raised questions around how the crypto industry will continue to secure much-needed banking relationships. Read more.

In Their Own Words: What Silicon Valley Bank Meant To The Valley (Crunchbase News) We spoke to some Silicon Valley investors on the impact of SVB and what its downfall means for them personally and professionally.

Lawmakers Split on Tighter Rules After Silicon Valley Bank Failure (Wall Street Journal) Democrats want to look at tightening regulations on midsize banks, while Republicans are criticizing Democratic spending as a root cause of the bank’s weakness.

WSJ News Exclusive | Justice Department, SEC Investigating Silicon Valley Bank’s Collapse (Wall Street Journal) The probes include examining executives’ share sales before bank’s failure.

‘Old-School’ Signature Bank Collapsed After Its Big Crypto Leap (Bloomberg) The lender survived blowups with cabbies, “bad landlords” and Trump — only to fall after trying a side gig.

KnowBe4 Recognized as a Microsoft Security Excellence Awards Finalist for Diversity in Security (KnowBe4) KnowBe4 Recognized as a Microsoft Security Excellence Awards Finalist for Diversity in Security

Zero Trust Pioneer John Kindervag Joins Traceable AI as an Advisor (PR Newswire) Traceable AI, the industry's leading API security company, today announced that John Kindervag, known for creating the Zero Trust Model for...

QuSecure Expands Experience of Executive Leadership Team as Post-Quantum Cybersecurity Market Rapidly Accelerates (Business Wire) Former Northrup Grumman, Raytheon and National Security Agency Executive Aaron Moore Named Executive Vice President and Head of Engineering

SecurityScorecard Appoints Former U.S. Congressman John Katko as Senior Advisor (SecurityScorecard) Capitol Hill cybersecurity leader joins the company’s Cybersecurity Advisory Board to drive further adoption of security ratings in the public...

Products, Services, and Solutions

Camozzi Group and Radiflow Announce Collaboration on Industrial Systems Cybersecurity (StartupHub.ai) Camozzi Group, a leading provider of Industrial Automation solutions, and Radiflow, part of Sabanci Holding and a global player in Industrial Cybersecurity and Operational Technology (OT), have announced a collaboration agreement to implement cybersecurity technologies across Camozzi’s production sites. The collaboration between Camozzi Group and Radiflow aims to strengthen the resilience and security of industrial […]

New Partnership Brings Forter’s Fraud Prevention Solution to Wix Merchants (Business Wire) Forter, the Trust Platform for digital commerce, today announced its partnership with Wix.com Ltd. (Nasdaq: WIX), a leading global SaaS platform to create, manage, and grow an online presence. The partnership delivers Forter’s accurate, real-time decisions to Wix merchants in certain countries — increasing their approval rates, reducing fraud and delivering superior customer experience.

Datadobi and Climb Channel Solutions Launch StorageMAP File System Assessment Service (Datadobi) StorageMAP File System Assessment Service: providing needed insight into Customers’ Rapidly Growing Unstructured Data Storage Estate.

Zetron Awarded Cybersecurity Services Contract for Kansas Counties (PRWeb) Zetron, a global leader in integrated mission critical communications technology, announced today that the North Central Regional Planning Commission (NCRPC)

Vaultree Launches Software Development Kit, Making Scalable Data-In-Use Encryption Generally Available to All Enterprises (Business Wire) This first-of-its-kind Fully Functional Data-In-Use Encryption toolkit will transform enterprise security

NordVPN makes its Meshnet private tunnel free for everyone (BleepingComputer) NordVPN's Meshnet private tunnel feature for Windows, macOS, and Linux is now free for everyone, even users who do not have a subscription to NordVPN.

Motorola Solutions releases new Avigilon security suite to improve enterprise security (Help Net Security) The new Avigilon security suite from Motorola Solutions makes enterprise-grade physical security accessible to businesses of any size.

ThreatHunter.ai Launches Comprehensive FIVE EYES Solution to Revolutionize Cybersecurity (ACCESSWIRE News Room) ThreatHunter.ai is proud to announce the launch of its comprehensive FIVE EYES cybersecurity solution, designed to provide complete coverage and protection against all manner of threats BREA, CA / ACCESSWIRE / March 14, 2023 / Leading cybersecurity firm ThreatHunter.ai has announced the launch of its comprehensive FIVE EYES solution, a cutting-edge approach to cybersecurity that provides unparalleled protection to organizations. FIVE EYES

Zscaler Extends CNAPP Capabilities with Integrated Data Loss Prevention and Threat Intelligence from the World’s Largest Security Cloud (GlobeNewswire News Room) Integration Provides Precise Understanding of Cloud Risk by Correlating Sensitive Data Discovery and Security Signals Across an Array of Security Products...

RANE Launches New Cyber Intelligence Solution (GlobeNewswire News Room) Unique, strategic cyber intelligence provides value across operating teams...

CyberGRX Integrates with ServiceNow to Streamline Third-Party Cyber Risk Programs (Business Wire) Customers will now have access to CyberGRX’s extensive third-party risk datasets

Palo Alto Networks Leads the Industry to AI-Powered SASE (Palo Alto Networks) News Summary Palo Alto Networks today announced new capabilities to boost its single-vendor SASE solution enabling organizations to automate their increasingly complex IT and network operations...

Google Selects Fastly Oblivious HTTP Relay for Privacy Sandbox Initiative to Enhance Online Privacy for Billions of Chrome Users (Business Wire) Fastly, Inc. (NYSE: FSLY), the world’s fastest global edge cloud platform, today announced it has entered into an agreement with Google LLC (NASDAQ: GOOGL) to operate an Oblivious HTTP Relay (OHTTP Relay) as part of FLEDGE, the Privacy Sandbox initiative to improve privacy while continuing to support tailored advertising.

OneWelcome Identity Platform Expansion in new USA Zone (Thales) Thales brings OneWelcome Identity Platform to new United States zone. European leader in CIAM, enables secure and frictionless digital journeys for their customers.

NeoSystems Recognized as Industry-Leading Managed Service Provider by CRN (NeoSystems LLC) NeoSystems Recognized as Industry-Leading Managed Service Provider by CRN

Axis' Atmos SSE Platform Named Best Security Service at 19th Annual 2023 Globee® Cybersecurity Awards (PR Newswire) Axis announced today that its Atmos Security Service Edge (SSE) platform has been named Best Security Service at 19th Annual 2023 Globee®...

Seraphic Security Takes Home Two 2023 Globee Cybersecurity Awards (Business Wire) Award recognizes company’s innovation in Browser Isolation, Cybersecurity Industry Solution categories

Tanium XEM Platform Brings Home the Gold in the 19th Annual 2023 Globee® Cybersecurity Awards (Business Wire) Converged endpoint management innovator wins again for vulnerability assessment, remediation, and management capabilities

Technologies, Techniques, and Standards

Dangers from Hacks Stretch Beyond Broken Computer Systems (Wall Street Journal) When hackers strike, responding to the damage becomes an all-encompassing affair. Business leaders who communicate poorly about an incident, including about steps to recovery, alienate customers and stakeholders, executives who have experienced cyberattacks say.

NSA Releases Recommendations for Maturing Identity, Credential, and Access Management in Zero Trust (National Security Agency/Central Security Service) The National Security Agency (NSA) released the “Advancing Zero Trust Maturity throughout the User Pillar” Cybersecurity Information Sheet (CSI) today to help system operators’ mature identity,

The NSA has advice for protecting the smallest elements in the nation’s critical infrastructure (Federal News Network) You could think of integrated circuits (chips), as the smallest building blocks in the nation's critical infrastructure. Recently, the National Security Agency (NSA) issued detailed guidance on…

CISA Trials Ransomware Warning System for Critical Infrastructure Orgs (Dark Reading) An agency team will identify vulnerabilities being exploited by ransomware groups and alert organizations ahead of attacks, CISA says.

CISA Establishes Ransomware Vulnerability Warning Pilot Program (Cybersecurity and Infrastructure Security Agency CISA)

OpenSSH Privilege Separation and Sandbox - Attack Surface Analysis (JFrog) An in-depth analysis of OpenSSH's attack surface and security measures. Read our research findings and analysis >

We can't wait for SBOMs to be demanded by regulation (Help Net Security) Don't wait for regulation and enact policies that act as if strict demands on SBOMs exist. You have to plan carefully for the future.

Design and Innovation

GPT-4 has arrived. It will blow ChatGPT out of the water. (Washington Post) The long-awaited tool, which can describe images in words, marks a huge leap forward for AI power — and another major shift for ethical norms

OpenAI’s GPT-4 exhibits “human-level performance” on professional benchmarks (Ars Technica) Multimodal AI model can process images and text, pass bar exams.

Concentric AI Announces Industry’s First Support for Optimized Large Language Models Delivering Unmatched Data Security Posture Management (Business Wire) Company’s Adaptive Manifold Compression Models Optimize Data Intensive Large Language Models to Accurately Discover All Sensitive Data Models with Context Quickly and Efficiently

Research and Development

New algorithm may change the future of secure communication (Help Net Security) Researchers have made a significant breakthrough in secure communication by developing an algorithm that conceals sensitive information.

Academia

SU axe student-led inquiry into data breach (Varsity Online) The SU’s board of trustees has blocked the student-led inquiry into concerns over a data breach and replaced it with an external investigation, amid student concerns about a ‘culture of secrecy and cover-up

Legislation, Policy, and Regulation

UK's National Cyber Security Centre reviewing TikTok risks, minister says (Reuters) Britain's National Cyber Security Centre is reviewing whether Chinese-owned video app TikTok should be banned from government phones, security minister Tom Tugendhat said on Tuesday.

UK creates new National Protective Security Agency (Register) A threat that needs two orgs to tackle it: the 'Integrated Security Fund' and the 'National Protective Security Agency'

UK quietly shifts China policy as trust between countries erodes (the Guardian) British stance edges closer to the US, but many MPs want government to go further and designate China as a threat

BBC given £20m war chest to counter disinformation (PR Week) BBC given £20m war chest to counter disinformation. From PR Week

Presidential advisory council recommends cyber mandates for critical infrastructure (CyberScoop) The National Infrastructure Advisory Council also stresses the need for cybersecurity mandates on tech vendors serving the industrial sector.

Key Takeaways from the US National Cybersecurity Strategy (Baker Hostetler) The Biden Administration’s much-awaited National Cybersecurity Strategy calls for fundamental change to “the underlying dynamics of the digital ecosystem” and seeks to rebalance responsibility for cybersecurity defense between the federal government and the private sector.

Litigation, Investigation, and Law Enforcement

Police shut down dark web crypto laundering service linked to FTX hack (TechCrunch) The FBI and other International, law enforcement agencies took down a crypto laundering service linked to the FTX hack and ransomware gangs.

Proposed class action lawsuit filed over Lehigh Valley Health Network data breach (Yahoo News) Mar. 14—The Lehigh Valley Health Network knew that hospital systems nationwide are prone to cybercriminal attacks, but it still failed to take sufficient measures to protect its patients' information, according to a proposed class action lawsuit. The lawsuit appears to be the first to seek damages on behalf of patients impacted by a data breach at LVHN's Lackawanna County-based Delta Medix ...

Investigation into Congress health data breach could take weeks (Courthouse News Service) A hacker who gained access to the District of Columbia’s health insurance portal may have collected the personal information of several members of Congress and their families.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Newly Noted Events

Solving Actionable Intelligence Through a Diverse Ecosystem (Virtual, Mar 16, 2023) How do we solve a “last mile” challenge concerning information sharing and threat intelligence without using an ineffective “one-size-fits-all” approach to an end user’s use case? Join Cyber Threat Alliance (CTA) President and CEO Michael Daniel and Fortinet Chief Security Strategist and Vice President of Global Threat Intelligence Derek Manky to learn how CTA’s diverse, ecosystem-first approach is the answer to building an effective digital ecosystem.

Protecting Your Enterprise From Today's Cybercriminals (Virtual, Mar 30, 2023) Threat actors are constantly devising new methods and tactics to bypass existing security tools. Enterprises need to stay ever vigilant of cybersecurity attacks and employ people, process, and technology to keep it protected from cyber criminals. Your enterprise needs to evaluate AI powered security offerings that dynamically assess the threat landscape and automatically identify and mitigate any threats as soon as they are found.

InfoSec CompTIA CySA+ Boot Camp (San Francisco, California, USA, Apr 19 - 23, 2023) Learn how to use behavioral analytics to prevent, detect and combat cyber threats! This boot camp provides the most comprehensive approach to earning CompTIA’s intermediate-level Cybersecurity Analyst (CySA+) certification. Infosec’s authorized CompTIA CySA+ Boot Camp is a comprehensive five-day training that teaches you the knowledge and skills required to configure and use the latest industry-standard threat detection tools. You’ll learn how to perform data analysis to identify vulnerabilities and expose cyber threats — with the ultimate goal of helping organizations protect and secure their applications and systems. You’ll leave with the knowledge required to pass your CySA+ exam and the behavioral analytics skills needed to provide increased visibility into cyber threats.

Friends Summit on the Water (Annapolis, Maryland, USA, May 4, 2023) Suits & Spooks / Safe House Global presents a Friends Summit on Intelligence and Future Threats at the Annapolis Maritime Museum. We'll feature 10 20-minute talks by our speakers and five 5-minute lightning rounds that our attendees may nominate and vote for. Topics to include ChatGPT as a force multiplier for offensive cyber operations, counter-drone technology, cognitive warfare from Russia and China, and more. Attendance is free for full-time government and military employees.

Events

Certified CMMC Professional (CCP) 2.0 Exam Prep (Virtual, Mar 13 - 17, 2023) This 5-day CCP course covers the foundational required curriculum along with CMMC Level 2 scoping and the full 110 practices. Edwards Cyber AB approved CCP 2.0 courses enable participants to sit for the CCP exam – making you a valuable resource to a consultancy providing CMMC preparation, C3PAO providing certified assessor support, or organization interested in having in-house CMMC trained resources. Edwards all-star lineup of Provisional Instructors (PIs) includes several of the CMMC industry’s most respected consultants along with Edwards’ internal SMEs to deliver their action packed bootcamps. Learn more and register now.

Security & Policing (Farnborough, England, UK, Mar 14 - 16, 2023) Security & Policing, the official Government global security event, returns to the Farnborough International Exhibition and Conference Centre between 14-16 March 2023. Hosted by the Home Office’s Joint Security & Resilience Centre (JSaRC), Security & Policing offers a world‐class opportunity to meet and discuss the latest advances in delivering national security and resilience with leading UK suppliers, UK and overseas Government officials and senior decision makers across the law enforcement and security sectors. There is no general admittance to Security & Policing and all visitors and exhibitors are subject to Home Office approval.

GISEC Global (Dubai, UAE, Mar 14 - 16, 2023) With the ever-changing global landscape, it is increasingly essential to strengthen cybersecurity across industries. GISEC Global offers a platform for key industry leaders and names to come together in order to stay ahead of potential threats, discover innovative strategies and remain secure from major disruptions.

SINET– Silicon Valley 2023 (Mountain View, California, USA, Mar 16, 2023) SINET – Silicon Valley provides a venue where entrepreneurs can meet and interact directly with leaders of government, business and the investment community in an open, collaborative environment focused on identifying solutions to Cybersecurity challenges.

Solving Actionable Intelligence Through a Diverse Ecosystem (Virtual, Mar 16, 2023) How do we solve a “last mile” challenge concerning information sharing and threat intelligence without using an ineffective “one-size-fits-all” approach to an end user’s use case? Join Cyber Threat Alliance (CTA) President and CEO Michael Daniel and Fortinet Chief Security Strategist and Vice President of Global Threat Intelligence Derek Manky to learn how CTA’s diverse, ecosystem-first approach is the answer to building an effective digital ecosystem.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.