A final farewell to Black Hat. Australian census still on hold. China muscles Vietnam in cyberspace. Russia makes ugly noises at Ukraine. Democratic Party hack got bigger. An object lesson in the dangers of backdoors.

Las Vegas: the latest from Black Hat (with the occasional glance over at DefCon, and a side look at BSides...)

Black Hat USA 2016 (The CyberWire) The retrospectives on Black Hat and its associated conferences agree on one thing—there’s reason for great concern about the security of the Internet and those who use it. Now, at a security industry conference, this is hardly what the lawyers would call “an admission against interest.” It’s in the nature of the sector to be unusually aware of and sensitive to threats, and a high level of fear-uncertainty-and-dread has long provided the community with its background noise as well as much of its signal. Bear this in mind as you consider reports from Las Vegas

Keynote: The Hidden Architecture of Our Time (The CyberWire) The opening keynote speaker was Dan Kaminsky, co-founder and Chief Scientist of White Ops, also famous as one of the seven “key shareholders” of the Internet’s Domain Name System, charged with responsibility for restoring it in the event of disruption. His keynote had the informative subtitle “Why this Internet Worked, How We Could Lose it, and the Role Hackers Play”

Observations on the evolution of the threat (nice supply chain you got; shame if it got broke…) (The CyberWire) On the threat side, we asked experts how the danger to businesses and other organizations has changed over the last few years. Steven Grossman, Bay Dynamics’ Vice President of Program Management, told us we’re seeing more credential-based threats

A role for threat intelligence (The CyberWire) How does a cyber intelligence company see the threat landscape changing? In keeping with Black Hat’s announced theme of “speed,” A.J. Shipley, vice president of product management at LookingGlass Cyber Solutions, told us that they’re seeing a striking increase in the rate at which the adversary changes tactics. They’ve also seen a marked increase in the sheer number and size of the breach packages they’re finding

Cyber security as an exercise in risk management (The CyberWIre) It’s worth beginning with some perspective we received from Ntrepid's Chief Scientist Lance Cottrell, especially given the attention paid at the conference to flashy demonstrations of vulnerabilities, like car hacking

Venture capital and early stage security start-ups (The CyberWIre) Jeff Moss, Black Hat’s founder, characterized this year's conference as being about speed (last year's was about complexity). Speed plays into the sector in many ways: speed to market, speed to produce products, and speed to counter threats. Speed, Moss noted, matters to boards and C-suites, and speed should matter to companies as they try to sell into the current market

What industry sees in industry trends (The CyberWIre) Ntrepid’s Lance Cottrell thought, “A lot of the problems are taking place in the basic blocking and tackling. Companies bring us in to help with the browser, but we also see them having a lot of problems with keeping track of other systems, where's the perimeter, having that perimeter dissolve on them"

Transitioning technology from the laboratory to the market (The CyberWIre) Start-ups often begin in an effort to transition a technology or a service into the market by way of a new business. We talked with Champion Technology, who’s had the experience of taking their Darklight product from its development inside a US Department of Energy National Laboratory and moving it to market

Building software for resilience (and why security teams need a good bedside manner) (The CyberWIre) The difficulty of building security into the application development process has become notorious in the industry. We spoke with the Denim Group’s John Dickson (Principal) and Dan Cornell (Chief Technology Officer) about how their company addresses this challenge

Want secure code? Give devs the right tools (CSO) With the appropriate tools and environments, developers can take the first step forward in safeguarding app security

Securing the architecture as the perimeter vanishes (The CyberWIre) It’s become a commonplace in the industry that the perimeter is vanishing (if indeed it hasn’t already done so, with the possible exception of a few tightly controlled and secured enclaves). Bring-your-own-device (BYOD), pervasive mobile computing on increasingly powerful devices, and the swift movement of data and services to the cloud have all contributed to this trend. How does an enterprise approach security in this new world?

Mobile security (where FUD may not be as fake as we’d like to believe) (The CyberWIre) With more enterprises buying fully into mobile computing, security for mobile devices bulks increasingly large in the concerns CISOs face. (And don’t even get them started on the Pokémon GO issues.) We spoke with OptioLabs’ Chief Technology Officer Brian Glancy and Hamilton Turner, Senior Director of Research and Engineering, about their approach to securing mobile devices

A role for testing (The CyberWIre) NSS Labs started in Europe, and then came to US as a security research and testing company. “Our mission is to provide transparency to the buyers so they know what they're getting,” Chief Executive Officer Vikram Phatak told us. “Think of it as Consumer Reports for enterprise cyber security"

Bluetooth Hack Leaves Many Smart Locks, IoT Devices Vulnerable (Threatpost) Sławomir Jasek with research firm SecuRing is sounding an alarm over the growing number of Bluetooth devices used for keyless entry and mobile point-of-sales systems that are vulnerable to man-in-the-middle attacks

The Future Of ATM Hacking (Dark Reading) Research released at Black Hat USA last week shows that one of our best defenses for the future of payment card and ATM security isn't infallible. Here's why

An ATM hack and a PIN-pad hack show chip cards aren’t impervious to fraud (Ars Technica) The good news? Hacks are limited for now. The bad news? Hackers will get better

Booz Allen Hamilton’s Kaizen (and their hacker’s Dojo) (The CyberWIre) This year's Kaizen, a capture-the-flag event sponsored by Booz Allen Hamilton, has a winner: congratulations to Aaron Lint, Vice President of Research, Arxan, who placed first. He told us he learns something new every time he plays

Security advice for security conferences (and for other events with a bullseye on them). (The CyberWIre) Finally, it’s worth considering some of the security advice peoples offered at Black Hat. It will serve as a good starting point for next year’s event, or indeed for any other event likely to attract the ministrations of hackers (Olympics, World Cups, other Black Hats, etc.)

Special Edition: Black Hat — Cyber Security Trends and Investment (The CyberWIre) The 2016 Black Hat conference is underway in Las Vegas this week, and in this special report from the show floor we'll hear from industry leaders about industry trends, and from venture capital funders about what they need to see before saying yes, and why it's harder to get startup funding than it used to be

Special Edition: Black Hat, Part 2 — Trends and Insights from Industry Leaders (The CyberWIre) The 2016 Black Hat conference is in the books, and we wrap up our coverage with more insights from industry leaders

Lessons from a digital mercenary: Beware the ‘October Surprise' (Christian Science Monitor Passcode) Cybersecurity expert Chris Rock researched ways to overthrow a government using only his computer for a talk at the DEF CON hacker conference in Las Vegas – and he says there are some lessons for the US elections

Cyber Attacks, Threats, and Vulnerabilities

Hack of Democrats’ Accounts Was Wider Than Believed, Officials Say (New York Times) A Russian cyberattack that targeted Democratic politicians was bigger than it first appeared and breached the private email accounts of more than 100 party officials and groups, officials with knowledge of the case said Wednesday

Australia Stops Online Collection of Census Data After Cyberattacks (New York Times) Australia has halted online collection of national census data after a website where citizens could upload information was subjected to repeated cyberattacks

Spyware Deluge Hits Vietnam Sites Amid South China Sea Spat (Bloomberg Markets) The spyware used in cyber attacks on Vietnam’s major airports and national carrier last month is now suspected of having bombarded many more official sites, amid tensions with China over territory in the disputed South China Sea

China 1937CN Team hackers attack airports in Vietnam (Cyber Defense Magazine) The group of hackers known as China 1937CN Team compromised the announcement screen systems at many major airports in Vietnam

How Researchers Exposed Iranian Cyberattacks Against Hundreds of Activists (Motherboard) Late last year, a group of hackers likely linked to the Iranian government reorganized the infrastructure supporting their cyberattacks. The hackers built it so their malware, which was infecting Iranian human rights activists and dissidents at home and abroad, would contact different servers under their control

Senior former Taliban leader reconciles with jihadist group (Threat Matrix) The Taliban continues to attempt to mend the rifts with a faction that broke away after the controversy surrounding the death of Mullah Omar and the naming of his successor. On Aug. 8, the Taliban announced that Mullah Baz Mohammad, who served as a deputy to Mullah Mohammad Rasul, and his followers have rejoined the Taliban

Why So Many Foreign Fighters Flock to ISIS (Defense One) A look at the factors that motivate people to leave home and join faraway wars

Mental Illness and Terrorism (Small Wars Journal) The recent attack at an Orlando night club has provoked both intrigue and confusion. Given the lack of an obvious operational connection to the Islamic State and the shooter’s rather rudimentary religious knowledge and history of mental instability, some voices have rightfully questioned the appropriateness of the label ‘terrorism’ to something that rather resembles mass school shootings

Secure Boot snafu: Microsoft leaks backdoor key, firmware flung wide open (Ars Technica) Microsoft quiet as researchers spot debug mode flaw that bypasses OS checks

Microsoft Mistakenly Leaks Secure Boot Key (Threatpost) Opponents of the government’s constant talk about intentional backdoors and exceptional access finally may have their case study as to why it’s such a bad idea

Linux bug leaves USA Today, other top sites vulnerable to serious hijacking attacks (Ars Technica) "Off-path" attack means hackers can be anywhere with no man-in-the-middle needed

Use the internet? This Linux flaw could open you up to attack (CSO) A flaw in the Transmission Control Protocol (TCP) used by Linux since late 2012 poses a serious threat to internet users, whether or not they use Linux directly

A New Wireless Hack Can Unlock 100 Million Volkswagens (Wired) In 2013, when University of Birmingham computer scientist Flavio Garcia and a team of researchers were preparing to reveal a vulnerability that allowed them to start the ignition of millions of Volkswagen cars and drive them off without a key, they were hit with a lawsuit that delayed the publication of their research for two years. But that experience doesn’t seem to have deterred Garcia and his colleagues from probing more of VW’s flaws: Now, a year after that hack was finally publicized, Garcia and a new team of researchers are back with another paper that shows how Volkswagen left not only its ignition vulnerable but the keyless entry system that unlocks the vehicle’s doors, too. And this time, they say, the flaw applies to practically every car Volkswagen has sold since 1995

Samsung both denies and admits mobile payment vulnerability (CSO) Samsung said that reports of a vulnerability in Samsung Pay mobile payments were "simply not true" -- but also admitted that token skimming was, in fact, possible but difficult enough that the potential risk was acceptable

Road Warriors: Beware of ‘Video Jacking’ (KrebsOnSecurity) A little-known feature of many modern smartphones is their ability to duplicate video on the device’s screen so that it also shows up on a much larger display — like a TV. However, new research shows that this feature may quietly expose users to a simple and cheap new form of digital eavesdropping

Instagram Accounts Hacked to Promote Adult Dating Spam (Infosecurity Magazine) Cybersecurity firm Symantec has unearthed a new scam campaign targeting Instagram users

Ransomware Copycats Predecessors, Adds Disposable Emails to the Mix (Tripwire) A new ransomware mimics many its predecessors but then shakes things up by incorporating disposable emails into its decryption process

Researchers Hide Malware Inside Digitally Signed Files Without Breaking Hashes (Softpedia) New technique makes malware detection almost impossible

Over 300 new cyber threats pop up on underground markets each week (Help Net Security) Approximately 305 new cyber threats are added each week on cybercrime markets and forums, mostly located on dark nets and the deep web

Government Data Woes: 2016 Compromised Records Surpass Total for Last Three Years Combined (IBM Security Intelligence) We are only a little over halfway through 2016, and yet according to the latest IBM X-Force data, 200 million government records worldwide were already compromised by July 31 of this year. That’s nearly 60 million more than all the records compromised from 2013 through 2015 — combined

Rio Games Escalating Cyber Risk To Mobile Users (Dark Reading) Intensified social media activities during sporting events increase threats from cybercriminals to 55%, new report from Allot finds

Facebook’s favorite hacker is back – with an ironic security hole (Naked Security) Laxman Muthiyah is a serial Facebook bounty hunter who has featured on Naked Security before

Are online travel sites providing biased information? (CBS News) A cyber war has erupted in recent weeks between major online travel agencies such as Expedia (EXPE) and Priceline.com (PCLN) and hotel chains over how some discounts are being offered to consumers

Dangers of 'Pokemon Go': Motorways, cliffs, snakes and land mines (CNN) If you're looking to catch Pokemon in Thailand, don't get your hopes up

No Pokémon for British Spies, as Pokéstops Vanish From MI5 and MI6 Buildings (Motherboard) British spies hoping to apply their skills to pokémon training may be out of luck: Players report that pokéstops and pokémon gyms have vanished from London’s MI5 and MI6 headquarters

Security Patches, Mitigations, and Software Updates

Juniper Hotfixes Shut Down IPv6 DDoS Vulnerability (Threatpost) Juniper Networks announced the availability of hotfixes for a serious vulnerability in the handling of IPv6 packets that is says could leave its Junos OS and JUNOSe routers open to a denial of service (DoS) attack. The hotfixes come more than two months after the vulnerabilities were publicly disclosed

vBulletin Patches Serious Flaw in Forum Software (Threatpost) A serious vulnerability has been patched in forum software made by vBulletin that could allow attackers to scan servers hosting the package and possibly execute arbitrary code

Vulnerability Spotlight: MS Edge/Windows PDF Library Arbitrary Code Execution Vulnerability Identified and Patched (Talos) Vulnerability discovered by Aleksandar Nikolic of Cisco Talos

Microsoft rushes to fix issue that unlocks devices protected by Secure Boot (Graham Cluley) Two security advisories released but still no fix

Google To Roll Out New Security Alerts On Gmail (Dark Reading) Gmail users to get alerts for suspicious email senders as well as sketchy links in messages

Chrome starts retiring Flash in favor of HTML5 (Ars Technica) Non-visible Flash content blocked in September; Flash fully deprecated by December

Cyber Trends

6 shocking gaps in your data security strategy (CSO) Despite billions of dollars invested in cybersecurity, businesses lose critical data daily. We’ve secured our organizations like fortresses, building layers of walls around networks, applications, storage containers, identity, and devices. But when an unhappy employee moves high-value designs onto a USB drive or sends important email attachment outside the “secure” network, those walls crumble the moment we need them the most

Marketplace

Copperhead OS: The startup that wants to solve Android’s woeful security (Ars Technica) A multi-billion-dollar megacorp, Google, apparently needs help to secure its OS

Google isn’t safe from Yahoo’s fate (TechCrunch) Yahoo has been beaten up in the press for so long that it’s hard to remember how untouchable the company once appeared

Found an iOS zero-day? This firm will pay you $300,000 more than Apple (Tripwire: the State of Security) It’s just a week since Apple announced its first-ever bug bounty for researchers who find vulnerabilities in its widely-used software and hardware, in the hope that it can provide better security and privacy to its millions of customers

Security startup confessions: How to tackle outsourcing (Help Net Security) My name is Kai Roer and I am a co-founder of a European security startup, and these are my confessions. I hope you will learn from my struggles, and appreciate the choices startups make when security matters. I will share experiences from my own startups (my first was in 1994), and things I have learned by watching and advising numerous other startups around the world

Products, Services, and Solutions

Just What the Doctor Ordered: Trend Micro Takes the Hassle Out of Security for New CyberAid Program (Trend Micro: Simply Security) When it comes to healthcare security, media attention is usually focused on the mega breaches – think Anthem, Premera and, most recently, Banner Health. But there is a long tail of smaller organizations who also need help. That’s where the Health Information Trust Alliance (HITRUST) has expanded its focus. Its latest initiative, CyberAid, is designed specifically to help smaller healthcare organizations protect themselves from ransomware, data breaches and other major threats

No One Can Stop Ad Blocking. Not Even Facebook (Wired) Facebook has a new way of getting your eyes on its ads.

FlockFlock: File access enforcement for macOS (Help Net Security) The more serious you are about information security, the more you realize it’s difficult to be sure a system isn’t compromised. While malware authors don’t target the Mac platform as much as Windows, it doesn’t mean you should be complacent about its security

Technologies, Techniques, and Standards

Here's The Business Side Of Thwarting A Cyberattack (Dark Reading) Ponemon Group study data illustrates the balancing act of running a business while trying to stay secure

Got Ransomware? Negotiate (F-Secure) ICYMI: we recently published a customer service study of various crypto-ransomware families. Communication being a crucial element of ransomware schemes, we decided to put it to a comparative test

Design and Innovation

What The TSA Teaches Us About IP Protection (Dark Reading) Data loss prevention solutions are no longer effective. Today's security teams have to keep context and human data in mind, as the TSA does

How the EFF was pushed to rethink its Secure Messaging Scorecard (Help Net Security) As good as the idea behind Electronic Frontier Foundation’s Secure Messaging Scorecard is, its initial version left much to be desired

Facebook feed change that predicts what’s informative could reprioritize news (TechCrunch) News outlets may get back some of their mojo stolen by a June Facebook feed algorithm change that preferred friends over publishers. Today Facebook will start predicting stories that are informative and highlighting them to people if they’re “related to their interests, if they engage people in broader discussions, and if they contain news”

Academia

Blog: Giving Back, One Cyber Scholarship at a Time (SIGNAL) Cyber firm CEO creates award to honor his parents, aid students

Governor McAuliffe Announces $1 Million in Cybersecurity Scholarships (Virginia.gov) The Cybersecurity Public Service Scholarship Program is now accepting applications from students in Virginia

Legislation, Policy, and Regulation

Putin discusses Crimea security after alleged Ukrainian incursions (Reuters) Russian President Vladimir Putin has held a meeting with his Security Council to discuss additional security measures for Crimea after the clashes on the contested peninsula, the Kremlin said on Thursday

Is Ukraine Just About to Blow? (Daily Beast) Countless omens signal a new war on its way, from troop movements to Russia’s ‘August Curse.’ But this time they may be more smoke than fire

Pentagon Releases New Procedures for Intelligence Collection (Lawfare) Today, the Department of Defense released revised procedures—along with an accompanying fact sheet—governing the conduct of its intelligence activities. DoD Manual 5240.01, ensures that Defense Department policy complies with DoD Directive 5240.01 and Executive Order 12333, which authorize Defense components to collect, retain, and disseminate information concerning U.S. persons and conduct other activities “in accordance with the Constitution and laws of the United States”

How the Government Is Waging Crypto War 2.0 (Motherboard) On December 2, 2015, Syed Rizwan Farook and Tashfeen Malik entered the Inland Regional Center in San Bernardino, California and opened fire on the attendees of a holiday party underway inside. After four minutes of shooting, the married couple fled the scene and left 19 dead in their wake. At the time, it was the deadliest act of terrorism in the United States since 9/11

U.S. Intelligence to Help Companies Avert Supply-Chain Hacking (Bloomberg Technology) U.S. intelligence officials are planning to provide information including classified threat reports to companies about the risks of hacking and other crimes tied to the supplies and services they buy

Army wants more remote capabilities for defensive cyber (C4ISRNET) When it comes to the Army’s defensive cyber operations, getting to a more global remote capability is important. Russell Fenton, an Army training and doctrine command capability manager in the defensive cyberspace operations branch, said at the TechNet Augusta conference that “to provide the quick reaction security enhancement reinforcement at the time of need, global cyberspace defenders must have the ability to maneuver remotely or on site"

Is COIN driving atrophy in Army network operations? (C4ISRNET) A key theme at TechNet Augusta, held Aug. 2-4 in Georgia, was that the Department of Defense Information Networks are an integral warfighting platform for all DoD operations. With that, adversaries have taken notice and tried to exploit vulnerabilities within the DoDIN to disrupt operations. But after 15 years of a counterinsurgency fight against technologically inferior actors, network defense and operational security now faces atrophy

Litigation, Investigation, and Law Enforcement

Erdogan says informing on Gulen supporters 'patriotic duty' (Fox News) Turkey's president has called on a group of businessmen to inform authorities about anyone they suspect of being a follower of a U.S.-based Muslim cleric accused of orchestrating Turkey's failed July 15 coup

Did a U.S. think tank sponsor a military coup? Turkey thinks so. (Los Angeles Times) Bespectacled and slightly balding, Washington academic Henri J. Barkey hardly appears the type to mastermind political revolt and foreign intrigue

An ICS cyber incident results in criminal convictions (Control: Unfettered) August 8, 2016, a federal jury found Pacific Gas and Electric (PG&E) guilty on five felony counts of failing to adequately inspect its gas pipelines before the blast that incinerated a neighborhood in San Bruno, CA. in September 2010. The utility was also found guilty of one count of misleading federal investigators about the standard it used to identify high-risk pipelines

Judge dismisses suit accusing Twitter of supporting ISIS group (New York Daily News) A federal judge in San Francisco has dismissed a lawsuit accusing Twitter of supporting the Islamic State group

Canada Attack Suspect Dead After Police Operation in Ontario (ABC News) A Canadian man previously banned from associating with Islamic State extremists has been killed as Canada's national police force thwarted what they believed was a suicide bomb plot, a senior police official said

Germany: 2nd arrest in connection with attack plan suspect (AP) German authorities on Wednesday arrested a man suspected of involvement in violence in Syria, a move triggered by the detention last week of a Syrian asylum-seeker who was suspected of planning an attack

French terror suspect tells court he's a victim of injustice (AP via Fox News) A French citizen with ties to the Charlie Hebdo attack in Paris has told a court in Bulgaria he is a victim of injustice

New Hillary Clinton Emails Raise Questions About State Department, Foundation Overlap (Time) Emails show her interacting with lobbyists and donors

Did Hillary’s Top Aide Help Cover Up Her Private Server? (Daily Beast) Hillary Clinton’s State Department claimed they knew nothing about her personal email system. Newly released records show a very different picture

Press Releases Finally Get a Devoted Readership: Hackers (Wired) No one ever wants to read press releases, not even journalists, and especially not when the documents are dense corporate financial updates trying to make things sound rosy to investors no matter what. You can imagine, though, that these perfunctory releases might take on a whole other significance and value to someone interested in, say, insider trading

UK prisons can now get cellphones remotely blocked over suspected illicit use (TechCrunch) It shouldn’t come as a surprise, really, that mobile phones are becoming an increasing concern among those tasked with policing prison populations. Smuggled in cellulars are being linked to all sorts of decidedly less benign contraband, including drugs, guns and the like

ISPs and FCC Republicans celebrate FCC’s court loss on muni broadband (Ars Technica) FCC critics glad that commission can't preempt state laws

Bleeping Computer countersues maker of SpyHunter (Ars Technica) Upset over domain name registrations that "libel" Bleeping Computer

For a complete running list of events, please visit the Event Tracker.

Upcoming Events

Insider Threat Program Development Training For NISPOM CC 2 (Aberdeen, Maryland, USA, Aug 10 - 11, 2016) Insider Threat Defense will hold a two-day training class on Insider Threat Program Development (National Insider Threat Policy-NISPOM Conforming Change 2). For a limited time the training is being offered at a discounted rate of $795 (normally $1395). The training is comprehensive and provides students with the knowledge and resources to develop and implement a robust Insider Threat Program. Insider Threat Defense has trained over one hundred fifty organizations and has become the "go-to company" for Insider Threat Program Development Training.

TECHEXPO Top Secret Polygraph-Only Hiring Event (Baltimore, Maryland, USA, Aug 10, 2016) Polygraph-Tested Professionals are invited to interview for new career opportunities on Wednesday, August 10 at the BWI Marriott in Baltimore, MD. A CI or Full Scope Polygraph is Required to Attend. Hot job opportunities are available in Cyber Security, Intelligence, Defense and IT. Hiring managers will be onsite to fill critical open positions.

International Conference on Cyber Security (ICCS) 2016 (Kota, Rajasthan, India, Aug 13 - 14, 2016) The International Conference on Cyber Security (ICCS) 2016 is an unparalleled opportunity to discuss cyberthreat analysis, operations, research, and law enforcement to coordinate various efforts to create a more secure world. The ICCS 2016 serves as a platform for researchers and practitioners from academia, industry, and government to present, discuss, and exchange ideas that address real-world problems with CYBER SECURITY. The conference program will include special sessions, presentations delivered by researchers from the international community, including presentations from keynote speakers and state-of-the-art lectures and keynote speeches

2016 Information Assurance Symposium (Washington, DC, USA, Aug 16 - 18, 2016) The Information Assurance Symposium is the premier IA event at which leaders and practitioners share vital information and provide direction and best practices to meet today’s challenges in IA and the cyber environment. The classification of the event is UNCLASSIFIED//FOR OFFICIAL USE ONLY. The 2016 IAS is expecting upwards of 2,000 attendees and will provide an excellent opportunity to learn and network with leading information assurance and cyber security professionals, subject matter experts and solution providers from throughout Government, industry and academia. The Information Assurance Symposium will include a variety of keynote sessions, five distinct tracts and panel discussions spanning over three days. It will also have a vendor expo where hundreds of exhibitors will display a wide variety of IA products, services and demonstrations. Exciting networking opportunities will be offered in the exhibit hall, all designed to enhance the IAS attendee experience.

Insider Threat Program Development Training (Washington, DC, USA, Mar 29 - 30, 2016) Insider Threat Defense announced it will hold a training class on Insider Threat Program Development (National Insider Threat Policy-NISPOM Conforming Change 2) on March 29-30, 2016, in Washington, DC. For a limited time the training is being offered at a discounted rate of $795. The training is comprehensive and provides students with the knowledge and resources to develop and implement a robust Insider Threat Program. Insider Threat Defense has trained a substantial number of organizations and has become the "Go To Company" for Insider Threat Program Development Training

SANS Alaska 2016 (Anchorage, Alaska, USA, Aug 22 - 27, 2016) SANS is bringing our renowned security training to Alaska! Join us in August for a week of hands-on training and compelling bonus sessions while taking in breathtaking views and experiencing the great Alaskan wilderness. SANS Alaska will feature two hands-on, immersion-style security training courses taught by real-world practitioners August 22-27, 2016 in Anchorage.

CISO New Jersey (Hoboken, New Jersey, USA, Aug 23, 2016) With newspaper headlines covering the latest data breaches, cloud computing security questions going unanswered and hackers developing more sophisticated attacks, the IT department has a growing responsibility to protect customer and company data. The CISO Summit brings together C-level IT security executives, industry analysts and solution providers to discuss challenges and best practices in a relaxed, yet focused business setting. Agenda sessions include panel discussions, think tanks, analyst Q&A sessions and much more.

Cyber Jobs Fair (San Antonio, Texas, USA, Aug 23, 2016) Held in conjunction with the Second Annual CyberTexas Conference, the Cyber Jobs Fair is open to anyone with cyber security education or experience. A security clearance is not required. Booz Allen Hamilton, Digital Hands, IPSecure, Inc., ISHPI, L-3 - West, Lockheed Martin, the Los Alamos National Laboratory, MacAulay-Brown, Inc., STG, Inc., and Tensley Consulting, Inc. will be among the employers attending.

CyberTexas (San Antonio, Texas, USA, Aug 23 - 24, 2016) CyberTexas was established to provide expanded access to security developments and resources located in Texas; provide an ongoing platform for the education and skill development of cyber professionals & job creation; build strong relationships with other U.S. and International geographies focused on cyber ecosystem development; bring national and international resources to the region to showcase Texas-based cyber assets; identify and encourage business opportunities within and outside of Texas; and create long-term value for the cyber security ecosystem of San Antonio and the State of Texas.

Chicago Cyber Security Summit (Chicago, Illinois, USA, Aug 25, 2016) The Cyber Security Summit is an exclusive conference series connects C-Suite & Senior Executives who are responsible for protecting their companies’ critical infrastructures with innovative solution providers and renowned information security experts. This educational and informational forum will focus on educating attendees on how to best protect highly vulnerable business applications and critical infrastructure. Attendees will have the opportunity to meet the nation’s leading solution providers and discover the latest products and services for enterprise cyber defense.

Air Force Information Technology and Cyberpower Conference 2016 (Montgomery, Alabama, USA, Aug 29 - 31, 2016) America is faced with a national emergency in cyberspace. US national security, economic vitality, financial stability and foreign policy are being eroded. Increasingly prevalent and severe malicious cyber activities are being directed against the DOD, USG, Private-Sector, Critical Infrastructure and Key Resource operators, Academia and Civil Society. USG industrial-aged thought, processes, and organizational relationship are not fostering “success” against decentralized, digital-age threat actors. An information-age solution is needed. Private-public dialogue is integral to building a new paradigm in which digital platforms are secure, and the nation is defended in a domain. Building bridges between government and the private sector is essential for victory. This conference will promote a national dialogue between the US Air Force, commercial businesses, academia and civil society to generate “whole of nation” strategies and processes aimed at overcoming challenges and ambiguities of an increasingly digital world.

CISO Toronto (Toronto, Ontario, Canada, Aug 30, 2016) A data breach is not only a PR nightmare, but cause for customers to turn to competitors, exposing sensitive company information and racking up fines from industry regulators. In order for organizations to operate smoothly, CISOs and IT security executives need to be ahead of the hackers, and kept abreast of the latest IT security topics and trends.