PaperCut exploits. AMOS infostealer traded in C2C markets. Malvertising from Vietnam. Self-attestation. Cyber auxiliaries.

Summary

By the CyberWire staff

At a glance.

Cl0p and LockBit exploit PaperCut vulnerability in ransomware campaigns.
Infostealer traded in the C2C market.
All ads are trying to get your money, but some just take it.
CISA requests comment on software self-attestation form.
Ukraine argues that cyberattacks against civilian infrastructure should be classified as war crimes.
No genuine hacktivists on Russia's side?

Cl0p and LockBit exploit PaperCut vulnerability in ransomware campaigns.

Microsoft tweeted Wednesday that they had attributed two campaigns exploiting vulnerabilities on PaperCut printers to Cl0p and BitLock. The two vulnerabilities (CVE-2023–27350 and CVE-2023–27351) were announced in a 19 April post by PaperCut. The company urged all admins to update their firmware with the latest patch to address them. Microsoft explained that they traced the infections back to a period before the vulnerabilities were discovered on April 13th. Microsoft said, “We’re monitoring other attacks also exploiting these vulnerabilities, including intrusions leading to Lockbit deployment. More threat actors could follow suit. It’s critical for orgs to follow PaperCut’s recommendation to upgrade applications and servers: https://msft.it/6018gPn92.” BleepingComputer, who’s periodically in touch with the Cl0p operators, reports, “The Clop ransomware operation confirmed to BleepingComputer that they were behind the attacks on PaperCut servers, which they started exploiting on April 13th… In reply to our questions about the LockBit attacks, Microsoft said they had nothing further to share.”

The mWISE Call for Speakers is now open. Help security’s best get better.

Take lead in a global community of security pros. Be a speaker at mWISE.

Infostealer traded in the C2C market.

Security Week reports that researchers at threat-intelligence company Cyble have analyzed an infostealing malware tracked as “Atomic macOS Stealer,” or AMOS, for short. The malware incorporates an array of data theft capabilities. One of its authors claims on Telegram that AMOS can steal “all passwords from the Keychain, full system information, and files from the compromised computer.” The malware has been offered to the criminal-to-criminal trade by subscription on Telegram for $1,000 a month. AMOS is also allegedly capable of stealing passwords, cookies, crypto wallets, and payment information from a multitude of browsers. “The malware is delivered as a .dmg file and, when first executed, it displays a fake prompt to trick the victim into handing over their macOS system password.” This is notable, because Security Week highlights that while macOS-based malware may boast many capabilities, getting it to run on the system can prove difficult. The outlet also reports that a Trellix researcher noticed an IP address in use by the malware that could potentially be linked to Raccoon Stealer, a malware used by threat actors in Ukraine and Russia.

Add value to your lead generation strategy.

Broaden the reach of your ads, fill your funnel, and build partnerships with valuable leads. Having the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, means companies trust us to get their messages out. Feature your brand with the source that top security leaders choose. Learn more.

All ads are trying to get your money, but some just take it.

It’s not news that threat actors use clickbait advertisements to infect users’ computers with malware As Guardio reports, however, the scale at which one threat actor has been conducting these campaigns is noteworthy. “One of those campaigns, linked to a Vietnamese threat actor, has been ongoing for months now gaining more traction lately using resilient deployment techniques and is estimated to surpass 500k infections worldwide so far.”

The campaign uses FaceBook ads, distributed from business accounts, depicting free adult content (venerable clickbait) to get users to download a zip file of alleged images. The images are actually executable files that take the user to a website while “in the background the stealer will silently deploy, execute and gain persistency to periodically exfiltrate your sessions cookies, accounts, crypto-wallets and more.” The threat actor uses commercially available hard-disk manufacturers to avoid detection. Guardio reports that this campaign alone reached 500,000 deployments in three months. “With the opportunity to effortlessly distribute millions of copies a day with the power of social networks advertisement infrastructure — the damage these threat actors can do in just a few hours, without detection, is overwhelming.”

So the ad that had your attention may immediately thereafter have your cryptowallet.

CISA requests comment on software self-attestation form.

The US Cybersecurity and Infrastructure Security Agency (CISA) yesterday released a request for comment on a drafted self-attestation form for federal government software providers. The Secure Software Development Attestation Common Form was a combined effort between CISA and the Office of Management and Budget (OMB) and is based on the National Institute of Standards and Technology’s (NIST) Secure Software Development Framework (SSDF). FCW wrote on Tuesday that the form is intended for software vendors to prove their products are secure to the standards of federal government customers, with the government’s ultimate goal to work toward securing the supply chain. This follows a 2021 executive order on improving cybersecurity throughout the United States, and a later memo that same year from OMB requiring federal agencies to acquire self-attestation forms from vendors, with a looming September deadline. Public comment on the form will be accepted through June 26, 2023 via a comment box on the Regulations.gov website.

Ukraine argues that cyberattacks against civilian infrastructure should be classified as war crimes.

Speaking at RSAC this week, Illia Vitiuk, Ukraine's head of the Department of Cyber Information Security in the Security Service of Ukraine, urged that cyberattacks against civilian infrastructure should be treated as war crimes. “I do believe that military commanders that are in charge of special forces and special services like the [Russian] GRU or SVR who are responsible for cyber-attacks on civilian infrastructure should also be convicted as war criminals,” Infosecurity Magazine quotes him as saying. Such attacks would presumably violate one or more of the principles that underlie the laws of armed conflict: proportionality, discrimination, and military necessity.

No genuine hacktivists on Russia's side?

Vitiuk also presented the case, CyberScoop reports, that there are no genuine hacktivists working in the interest of Russia. “More than 90% of all cyber attacks targeting Ukraine are either conducted by special services or by state sponsored groups,” Vitiuk said. “I do believe that there is no so-called ‘hacktivism’ in Russia at all.” He described a brief wave of pre-war Russian arrests of cybercriminals as effectively an intimidation campaign: work for the security organs or face the consequences. The arrests of some REvil members in the weeks before the war were an example of that kind of strong arm recruitment. Noting that the prosecutions had all stalled by May, Vitiuk added, “This was an attempt to intimidate them and others to show that you need to work for us. And now you need to work against Ukraine.” Recruiting auxiliaries to work as fronts for Russian security and intelligence services would not have been particularly difficult. The ties between the organs and the underworld have been close for a long time.

The most prominent Russian hacktivist auxiliary, KillNet, which this week announced that it would henceforth act as a private military hacking corporation, a kind of Wagner Group for cyberspace, has just announced that it would be unavailable for seventy-two hours while it reorganized.

The CyberWire's continuing coverage of Russia's war against Ukraine, with special attention to the cyber phases of that war, may be found here.

Notes.

Today's issue includes events affecting Australia, China, India, Iran, Israel, the Republic of Korea, NATO/OTAN, Russia, Sweden, Syria, Ukraine, the United Kingdom, and the United States.

Dateline

Ukraine at D+428: Ready for the spring offensive. (CyberWire) Russia resumes missile strikes against civilians as Ukraine says its preparations for a spring offensive are essentially complete. Ukraine advocates prosecution of cyber war crimes, and dismisses the idea that there are any genuine Russian hacktivists.

Russia-Ukraine war at a glance: what we know on day 429 of the invasion (the Guardian) Wave of deadly Russian air strikes on cities across Ukraine; EU votes that Russian deportation of children is genocide

Russia-Ukraine war live: death toll rises in Uman and Dnipro after most intense Russian strikes in weeks (the Guardian) At least 17 people confirmed dead in wake of Russian aerial bombing of Ukrainian cities on Friday morning

Russian missile and drone attack in Ukraine kills 16 people (AP NEWS) Russia has fired more than 20 cruise missiles and two drones at Ukraine in attacks that killed at least 16 people. Most of the victims died when two cruise missiles slammed into an apartment building in central Ukraine early Friday. The attacks included the first one on Ukraine’s capital in nearly two months. The Kyiv government said Ukraine’s air force intercepted 11 missiles and two drones, and no hits on any targets in the city were reported. The strikes on the apartment building occurred in Uman, a city located around 215 kilometers (134 miles) south of Kyiv. Fourteen people died in that attack, according to the interior ministry, including two 10-year-old children and a toddler.

Civilians, Including Children, Killed In Night Of 'Russian Terror,' Zelenskiy Says (RadioFreeEurope/RadioLiberty) At least five people were killed in a wave of Russia strikes on Ukrainian cities, including the capital, Kyiv, early on April 28, regional officials and the military reported, as heavy fighting continued in the devastated eastern city of Bakhmut.

Large-Scale Russian Attack on Ukraine Kills at Least 19 People (New York Times) Russia bombarded towns and cities across the country in its first major attack in more than a month.

Russian mercenary squabbles in Bakhmut as Ukraine prepares its advance (euronews) Analysts believe Russian mercenaries from Wagner and Potok are vying for power in the battle for Bakhmut as Ukraine prepares its counteroffensive. Euronews correspondent Sasha Vakulina has the latest.

Look out, Putin: Ukraine says it’s ‘ready’ to attack (POLITICO) ‘In a global sense, we’re ready,’ defense minister says.

Ukrainian Troops Repel Russian Attacks, and Hope Western Arms Turn the Tide (New York Times) Fierce fighting has yielded heavy casualties but little movement. Ukrainian forces need heavy weapons to change that, but they say it is no guarantee.

Ukraine Has Nearly All Combat Vehicles Allies Promised, NATO Says (New York Times) Gen. Christopher Cavoli, also the top commander of U.S. forces in Europe, made the comments to the House Armed Services Committee.

NATO: Ukraine allies sent 1,550 combat vehicles, ‘vast’ ammo (Military Times) NATO says alliance members and partners have delivered more than 98% of the combat vehicles promised to Ukraine to combat Russia.

Why Ukraine's Looming Offensive May Be The Most Important Clash Of The War. Period. (RadioFreeEurope/RadioLiberty) After a grinding winter in which Russian forces failed to regain battlefield momentum, both Moscow and Kyiv are girding for a new Ukrainian counteroffensive that officials have signaled is imminent. When it comes, it's likely to be a major turning point in the 14-month-old invasion.

Mariupol before and after: updated Google maps reveal destruction in Ukraine city (the Guardian) New satellite images offer a window into the aftermath of prolonged Russian shelling

Analysis: Xi's Call With Zelenskiy Sets The Stage For Greater Chinese Diplomatic Push In Europe (RadioFreeEurope/RadioLiberty) Chinese leader Xi Jinping spoke with Ukrainian President Volodymyr Zelenskiy for the first time since Russia poured troops into Ukraine 14 months ago. Is it optics to court the EU or damage control after controversial comments about former Soviet countries made by China’s ambassador to France?

Russian army commander arrested for ‘selling tank engines’ (The Telegraph) Colonel Alexander Denisov is accused of stealing seven V-92S2 engines and trading them on the black market

A glimpse of Sweden in NATO: Gotland could be a game-changer for Baltic defense (Atlantic Council) Sweden's largest military exercise in twenty-five years highlights the strategically important island of Gotland in defending NATO allies.

The West should supply Ukraine with F-16s (The Economist) Or Russian fighter jets may win control of Ukrainian skies

Putin Legalizes Deportation Of Residents Of Illegally Annexed Territories Who Refuse Russian Citizenship (RadioFreeEurope/RadioLiberty) Russian President Vladimir Putin has signed a decree that allows the deportation of residents of illegally annexed Ukrainian territories who refuse Russian citizenship.

When Russia is defeated in Ukraine, look to Chechnya (POLITICO) As far as Chechen volunteers are concerned, Ukraine is just the start of the fight against Russia.

The Week In Russia: Putin's 'Snarling Revanche' (RadioFreeEurope/RadioLiberty) Russian President Vladimir Putin decided on the large-scale invasion of Ukraine about a year before he launched it in late February 2022, and his main motives were personal, an investigative report released at a potentially crucial juncture in the devastating war concludes.

Iranian and Syrian factors shape Israeli response to Russia’s Ukraine invasion (Atlantic Council) Israel has sought to minimize its involvement in the international response to Vladimir Putin's Ukraine invasion, but deepening military cooperation between Russia and Iran may force a change in the Israeli position.

Pro-Russian hacktivism isn't real, top Ukrainian cyber official says (CyberScoop) Cyberattacks targeting Ukraine are mostly carried out by Russian intelligence agencies or state-sponsored groups, according to the official.

Fed’s Jerome Powell Tricked by Russian Pranksters Posing as Zelenskiy (Bloomberg) Federal Reserve Chairman Jerome Powell held a call with a pair of Russian pranksters posing as Ukrainian President Volodymyr Zelenskiy, according to video shown on Russian state television.

Guardsman in leak case wanted to kill a 'ton of people': US (AP NEWS) Prosecutors say the Massachusetts Air National guardsman accused of leaking highly classified military documents kept an arsenal of weapons, talked of “violence and murder” on a social media platform and an “assassination van.” They filed court papers ahead of Thursday's detention hearing for 21-year-old Jack Teixeira, and urged a federal judge to keep him jailed.

Jack Teixeira wanted to kill 'tons of people' and had Russian army pendants on bedroom wall (The Telegraph) Former reservist arrested on suspicion of leaking classified information believed in ‘culling the weak minded’, court documents say

Attacks, Threats, and Vulnerabilities

Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Institutions (The Hacker News) Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Education and Political Institutions

Ransomware Roundup - UNIZA Ransomware | FortiGuard Labs (Fortinet Blog) FortiGuardLabs examines the UNIZA ransomware, yet another variant that encrypts files on victims' machines in an attempt to extort money. Learn more in this week’s Ransomware Roundup.…

New 'Atomic macOS Stealer' Malware Offered for $1,000 Per Month (SecurityWeek) A new piece of malware named Atomic macOS Stealer (AMOS), offered for $1,000 per month, offers a wide range of data theft capabilities.

Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p Ransomware (The Hacker News) Microsoft has confirmed that hackers linked to Cl0p and LockBit ransomware families are actively exploiting PaperCut servers.

Microsoft: Clop and LockBit ransomware behind PaperCut server hacks (BleepingComputer) Microsoft has attributed recent attacks on PaperCut servers to the Clop and LockBit ransomware operations, which used the vulnerabilities to steal corporate data.

Hackers use PaperCut printer vulnerability to spread Clop ransomware (Record) Hackers linked to the Clop ransomware operation are exploiting two recently-disclosed vulnerabilities in print management software PaperCut to steal corporate data from victims.

“Malverposting” — With Over 500K Estimated Infections, Facebook Ads Fuel This Evolving Stealer… (Guardio) Malverposting, the use of promoted social media posts and tweets to propagate malicious software and other security threats — is on the rise. One of those campaigns, linked to a Vietnamese threat actor, has been ongoing for months now gaining more traction lately using resilient deployment techniques and is estimated to surpass 500k infections worldwide so far.

Many Public Salesforce Sites are Leaking Private Data (KrebsOnSecurity) A shocking number of organizations -- including banks and healthcare providers -- are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misconfiguration in Salesforce Community that allows…

Abusing Misconfigured Salesforce Communities for Recon and Data Theft (Varonis) Our research team has discovered numerous publicly accessible Salesforce Communities that are misconfigured and expose sensitive information.

Hackers steal emails, private messages from hookup websites (TechCrunch) Unknown hackers have breached two hookup websites, stealing private messages, email addresses, and other personal data.

Hardenhuish School in Chippenham hit by cyber attack (BBC News) Hardenhuish School in Chippenham says disruption is ongoing after hackers broke in to their network.

UK school hit by ransomware attack (Computing) Hardenhuish School in Wiltshire says it hopes at least some systems will be back online next week

Security Patches, Mitigations, and Software Updates

CISA Releases One Industrial Control Systems Medical Advisory | CISA (Cybersecurity and Infrastructure Security Agency CISA) CISA released one Industrial Control Systems Medical (ICS) medical advisory on April 27, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

Trends

DataTribe Insights Q1 2023: Let's Ask ChatGPT What to Do About SVB (DataTribe) In this issue of Insights, we reflect on the first quarter of 2023, which was not boring, as there were notable surprises, but in the end, the quarter ended largely as expected.

53% Have Found Something Incriminating When Snooping on Others’ Devices (Secure Data Recovery) We surveyed Americans about experiences with snooping to better understand when and why people snoop and in which types of relationships it is most common.

Marketplace

Aadya Raises $5 Million for SMB-Focused Security Platform (SecurityWeek) Cybersecurity firm Aadya has raised $5 million in Series A funding for its all-in-one platform tailored for small and mid-sized businesses.

Lookout sells off consumer security business to go all-in on enterprise (TechRadar) F-Secure expands US foothold with purchase of Lookout mobile security business

Cybersecurity Firms Cut Staff as Fears About Economy, Funding Mount (Wall Street Journal) The wave of layoffs started this summer and has spanned departments, including workers in technical roles.

Kelly Bissell Joins Avertium as Board Advisor (Avertium) Microsoft Corporate Vice President adds Microsoft Security expertise to Cyber Fusion Company.

Druva Appoints Mike Houghton as Global Partner and Alliance Lead (Druva) With a strong track record in strengthening partner ecosystems, Houghton is set to play a key role in driving accelerated growth

Photos: RSA Conference 2023 (Help Net Security) RSA Conference 2023 took place at the Moscone Center in San Francisco. Here's a photo gallery from the event.

RSA Conference 2023 – Announcements Summary (Day 3) (SecurityWeek) Summary of announcements made at the 2023 RSA Conference, on day 3 of the cybersecurity event.

Products, Services, and Solutions

Optiv Convenes Industry-Leading Partner Ecosystem (Optiv) Cybersecurity Leader Refreshes Partner Program and helps clients rationalize and implement innovative security solutions that accelerate business outcomes.

Connect with fraud experts worldwide in the new Sifters customer community (Sift Blog) Our new Sifters customer community brings together trust and safety experts using Sift to share knowledge, get product help, and network.

Laminar Named AWS Security Competency Partner, Receives Amazon RDS Ready Product Designation for its Data Security Posture Management (DSPM) Solution (Laminar) Laminar is the first pure play DSPM to receive AWS Security Competency Partner status in the Data Protection category and is the first to enable sensitive data discovery, classification, and protection in Amazon RDS.

Nok Nok Partners With Carahsoft to Provide Phishing-Resistant MFA Solutions to Federal, State and Local Government Agencies (Carahsoft) Partnership Enables Federal Agencies to Meet Regulations for Phishing-Resistant MFA, Expanding Nok Nok’s Presence in the Government Sector

INE Awarded 4 Global InfoSec Awards at RSAC (GlobeNewswire News Room) INE Recognized as Cybersecurity Leader in Enterprise Training...

BlackBerry revamps AI-based Cylance cybersecurity portfolio (IT Brief New Zealand) From the largest multi-nationals to the smallest mom and pop businesses, and every organisation in-between, no one is immune to cyber threats.

High Wire to Provide Overwatch OT/IoT Security™ Agentless, Zero Trust, Cybersecurity Solution for Major U.S. Health System (GlobeNewswire News Room) High Wire Networks, Inc. (OTCQB: HWNI), a leading global provider of managed cybersecurity and...

Technologies, Techniques, and Standards

How an undercover content moderator polices the metaverse (MIT Technology Review) “We can be the first line of defense.”

US Army to tailor long-range jammer for Europe, Indo-Pacific theaters (C4ISRNet) TLS-EAB might not be well-suited for the Family of Medium Tactical Vehicles in the Indo-Pacific. But in Europe, the trucks might be the best option.

Design and Innovation

NSA Cybersecurity Director Says ‘Buckle Up’ for Generative AI (WIRED) The security issues raised by ChatGPT and similar tech are just beginning to emerge, but Rob Joyce says it’s time to prepare for what comes next.

Request for Comment on Secure Software Self-Attestation Common Form | CISA (Cybersecurity and Infrastructure Security Agency CISA) On April 27, 2023, CISA in accordance with EO14028 and the Office of Management and Budget’s (OMB) guide in OMB M-22-18, released through regulations.gov a 60-day Request for Comment to solicit public feedback on a self-attestation form to be used by software producers.

OMB, CISA set to release common form for software self-attestation (FCW) Federal CISO Chris DeRusha said the new standardized approach to collecting self-attestation forms from third-party software providers could be released as early as this week.

I Cloned Myself With AI. She Fooled My Bank and My Family. (Wall Street Journal) Our columnist replaced herself with AI voice and video to see how humanlike the tech can be. The results were eerie.

A chatbot that asks questions could help you spot when it makes no sense (MIT Technology Review) Engaging our critical thinking is one way to stop getting fooled by lying AI.

RSA Conference's 'Most Innovative Startup' Does ... You Guessed It: AI (Virtualization Review) Like most things these days, the security-focused RSA Conference 2023 prominently featured AI, the topic of many sessions and announcements and the specialty of multiple award winners.

Tenable Makes Generative AI Security Tools Available to the Research Community (Dark Reading) Tenable®, the Exposure Management company, today published a new report outlining the use of generative AI to build new security research tools.

Tenable opens playground for generative AI cyber tools (Computer Weekly) A set of generative AI cyber tools designed to help security researchers in reverse engineering, debugging and other areas of work have been made available for the community to experiment with.

Legislation, Policy, and Regulation

The perilous path to a new cybercrime treaty (Washington Post) A U.N. panel is working on a cybercrime treaty. Here’s what it could look like.

First draft of controversial UN Cybercrime Treaty slated for June (Record) The first draft of the UN Cybercrime Treaty will be released in June after years of debate and concern over what the document might cover.

China has widened its already sweeping counter-espionage law. Experts say foreign businesses should be worried (CNN) China has broadened the scope of its already sweeping counter-espionage law in a move that analysts warn could create further legal risks or uncertainty for foreign companies, journalists and academics.

Army to raise dedicated cyber operations wings in all commands, with an eye on China | India News - Times of India (The Times of India) India News: With China’s potent cyber-warfare and cyber-espionage capabilities posing a clear and present danger, the Indian Army will now raise dedicated special

Business groups balk at tougher cyber rules for directors (InnovationAus.com) Australia’s business and employer groups have rejected proposals that would see them face tougher rules and more responsibility for cyber incidents, but are open to a new Cyber Security Act if it consolidates existing regulations. The groups argue existing obligations on directors already recognise cyber risks while new prescriptive cyber regulations like an enforceable code for businesses would create a compliance burden. The call against additional regulation comes despite Australia's most high profile cyber incidents occurring in the private sector in the last year.

(ISC)2 Urges Countries to Strengthen Collaboration on Cybersecurity Regulation (Infosecurity Magazine) A new report examines global approaches to cyber legislation across six jurisdictions

Global Approaches to Cyber Policy, Legislation and Regulation Report ((ISC)2) (ISC)² sponsored a policy guide with the Royal United Services Institute (RUSI) to raise awareness of the world’s leading cybersecurity policies that will impact the future of the global cybersecurity workforce.

DHS pushes Congress to formally establish Cyber Safety Review Board (Record) DHS Undersecretary Rob Silvers said at the RSA Conference that the CSRB should have subpoena power and dedicated funding, as proposed in draft legislation.

CISA’s Eric Goldstein on Bridging Public-Private Cyber Gaps (Wall Street Journal) A senior official at the U.S. Cybersecurity and Infrastructure Security Agency discusses the challenges of working with the government and industry.

Lawmakers Introduce Bill to Keep AI from Going Nuclear (Nextgov.com) This week, lawmakers reignited the legislative charge into investigating and regulating how automated and artificial intelligence systems will be implemented in crucial operations.

The Case for Realistic Action to Regulate Artificial Intelligence (The Information) The overnight success of ChatGPT and GPT-4 marks a clear turning point for artificial intelligence. It also marks an inflection point for public discourse about the risks and benefits of AI for our society. Practitioners, policymakers and pundits alike have voiced loud concerns, ranging from ...

FBI Director: US Cyber Agents, Intel Analysts Outnumbered By Chinese Hackers (International Business Times) The FBI warned of China's "unparalleled" cybersecurity threat during a Congress hearing Thursday as lawmakers push for a TikTok ban.

US Navy’s top cyber adviser on why the service ‘fell behind’ and how it’s catching up (Record) Chris Cleary’s tenure as the Department of the Navy’s principal cyber advisor (PCA) got off to an awkward start.

Pentagon reviewing how it vets for security clearances (The Hill) The Pentagon is looking into how it vets individuals for security clearances after an alleged leaker of hundreds of pages of secret U.S. documents gained authorized access despite past issues. “Th…

Litigation, Investigation, and Law Enforcement

Safeguarding Customer Records and Information at Branch Offices (US SEC) The Division of Examinations (EXAMS) is issuing this risk alert* to highlight the importance of establishing written policies and procedures for safeguarding customer records and information at branch offices.1

SEC Sends Warning on Protecting Client Info at Branch Offices (Advisor Hub) While many brokerage and advisory firms have strict protections in place for customer information stored at their headquarters, safeguards are weaker at local branch offices, the Securities and Exchange Commission said in a risk alert on Wednesday.

Breach Roundup: Ukrainian Police Detain a PII Vendor (Bank Info Security) Every week, Information Security Media Group rounds up cybersecurity incidents and breaches around the world. In the days between April 21 and April 27, the

Data Breach Lawsuits Tied to Tracking Pixel Use On the Rise In Healthcare (Health IT Security) Since August 2022, more than 50 lawsuits have been filed against health systems related to their use of tracking pixels, BakerHostetler observed.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

Future Compute (Cambridge, and virtual, Massachussetts, USA, Apr 30 - May 1, 2023) Embrace emerging technologies to compete with compute. Future Compute offers CTOs and IT Leadership the emerging technology and strategy insight required to outpace change and ensure their digital infrastructure aligns to and exceeds business goals.

TechNetCyber (Baltimore, Maryland, USA, May 2 - 4, 2023) The harnessing of the right cyber power is more important than ever in a domain deluged by persistent attacks and simultaneous sophisticated campaigns that threaten global political, economic and security interests. A flagship event, AFCEA’s TechNet Cyber serves as a center of gravity for a whole-of-government effort to bring together the policy, strategic architecture, operations and C2— along with the joint capabilities—needed to meet the global security challenges and successfully operate in a digital environment. Join us in Baltimore and be a part of the conversation led by U.S. Cyber Command, DISA, the DoD CIO, and numerous industry and academia partners to deliver solutions for this enduring, no-fail mission.

SecureWorld Kansas City (Kansas City, Kansas, USA, May 3, 2023) Join your regional cybersecurity community for high-quality, affordable training and collaboration. Earn 6-12 CPE credits through 15+ educational elements learning from local and nationally recognized industry leaders. Attend featured keynotes, panel discussions, breakout sessions, and solution vendor displays—all while networking with peers in InfoSec.

Friends Summit on the Water (Annapolis, Maryland, USA, May 4, 2023) Suits & Spooks / Safe House Global presents a Friends Summit on Intelligence and Future Threats at the Annapolis Maritime Museum. We'll feature 10 20-minute talks by our speakers and five 5-minute lightning rounds that our attendees may nominate and vote for. Topics to include ChatGPT as a force multiplier for offensive cyber operations, counter-drone technology, cognitive warfare from Russia and China, and more. Attendance is free for full-time government and military employees.

Third-Party and Supply Chain Cyber Security Summit (Barcelona, Spain, May 4 - 5, 2023) Learn the latest case studies on the end to end cyber security implementation practices when working with third parties to ensure a truly resilient and secure supply chain network at the Third Party & Supply Chain Cyber Security Summit. How much of your data security is really under your control? What is your risk management approach towards your suppliers? How to secure your network and protect your sensitive data? Led by the TOP Information Security professionals from leading companies the discussion will give you an opportunity to see the issue from the perspective of different industries & angles and identify the complex solution to be implemented.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.