Daily Briefing for 11.13.24

Attacks, Threats, and Vulnerabilities

Threat Spotlight: Evolving 'we know where you live' tactics personalize sextortion scams (Barracuda) Barracuda threat researchers have identified evolving tactics being used by cybercriminals in targeted sextortion scams.

The Problem with IoT Cloud-Connectivity and How it Exposed All OvrC Devices to Hijacking (Claroty) Team82 researched the security of the OvrC cloud platform, which is used by businesses and consumers to remotely manage IoT devices. We uncovered 10 different vulnerabilities that, when chained, allow attackers to execute code on OvrC cloud-connected devices, remotely over the cloud.

Dutch company behind Hannaford, Stop & Shop says cyber issue affecting US network (The Record) The cyberattack reportedly affected some grocery delivery orders and has had an impact on pharmacy operations. The company Ahold Delhaize recently discovered a cyberattack within its U.S. network, where it operates more than 2,000 stores.

Security Patches, Mitigations, and Software Updates

Microsoft Patch Tuesday, November 2024 Edition (KrebsOnSecurity) Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other…

Legislation, Policy, and Regulation

Biden Administration to Support Controversial UN Cyber Treaty (Bloomberg.com) The Biden administration plans to support a controversial cybercrime treaty at the United Nations this week despite concerns that it could be misused by authoritarian regimes, according to senior government officials.

Litigation, Investigation, and Law Enforcement

Here’s the indictment against two men allegedly responsible for Snowflake customer breach  (CyberScoop) Connor Moucka and John Binns were indicted in the U.S. court of Western Washington for allegedly stealing Snowflake customer data.

For a complete running list of events, please visit the Event Tracker.

Events

SANS Holiday Hack Cybersecurity Challenge 2024: Snow-maggedon (Vienna, Nov 7 - Dec 2, 2024) Whether you're a first-time player or a seasoned participant, this year’s Holiday Hack brings exciting new features you won’t want to miss! We’ve introduced a new dynamic for this year: challenges will be gradually released in sync with the story, keeping the experience fresh and immersive. See challenges release dates and new features included.

Beyond Earth Symposium (Washington, DC, USA, Nov 12 - 13, 2024) The acceleration of space innovations that will enable space migration is outpacing public policy and international law regimes. Beyond Earth Institute’s mission is to create a policy and legal framework to support the robust development of an in-space economy and the expansion of human civilization beyond Earth. At the Beyond Earth Symposium 2024, we will wrestle with the critical current issues of the day and delve into the bleeding edge issues that must be moved to the center of international debate. What we do in a post-ISS era is an urgent, immediate concern. Policies that can foster the creation of a lunar-based economy are equally important. Let’s be bold together! Join stakeholders from across the industry, government, and international sector for this third annual Beyond Earth Symposium. Momentum is building to transform policy and legal landscape to enable a space migration future. Dare to be part of this work.

SecureWorld Midwest Virtual Conference (Virtual, Nov 13, 2024) Join with cybersecurity professionals for training and information sharing through an interactive online experience. Earn 6 CPE credits learning from nationally recognized industry leaders. The agenda offers 12+ educational presentations, including panel discussions, breakout sessions, and keynotes. Connect with your peers in the Networking Lounge, enter to win prizes, and see demos and resources from top solution vendors in the Exhibitor Hall.

CYBERSAT24 (Reston, Virginia, USA, Nov 18 - 20, 2024) CyberSat Summit has been at the forefront of the satellite industry’s burgeoning cybersecurity landscape since the event’s launch in 2017. Initially run as a single annual event, it morphed into two separate events in recent years – CyberLEO and CyberSatGov. This was done in response to changing market conditions, most notably the huge growth of LEO satellites and the corresponding rise of commercial interest in space. While CyberSatGov and CyberLEO were successful independently, the continued demand for LEO architectures and the ever-increasing collaboration between government and industry meant that these conversations needed to happen under one roof. As a result, 2024 will feature a single CyberSat event in November, where for the first time in its 7-year history, we will nearly double the event’s content offerings to include two concurrent tracks – one track titled “Space Infrastructure” and the second track titled “Space Data & Technology.” The “Space Infrastructure” track will continue CyberSat’s legacy focus on the overall satellite cybersecurity ecosystem and the protection of tangible assets like ground systems and satellite components, while the new “Space Data & Technology” track will focus on emerging technologies and the protection of space’s intangible assets like data. Keynotes, and a handful of general sessions, will contain talks that apply to all attendees.

CYBERSAT24 (Reston, Virginia, USA, Nov 18 - 20, 2024) CyberSat is the only space security event that successfully unites satellite, space, cyber, and government to educate on threat vectors and to thwart next-generation attacks.