Power grid compromise notes. Influence ops & deep fakes. Master134's malvertising. AZORult is back & worse. Creative destruction.

Cyber Attacks, Threats, and Vulnerabilities

Russia has compromised the US grid this year (Control Global) A US utility was compromised. The IP address and credentials for the cyber asset were posted on a Russian-based media site, and the cyber asset was subsequently infected with ransomware. The NERC CIP standards do not adequately address this problem.

Fake Monitors Endorse Cambodia's Sham Election (Foreign Policy) Dubious electoral endorsements are becoming normal for dictators worldwide.

Russians Are Targeting Private Election Companies, Too — And States Aren’t Doing Much About It (FiveThirtyEight) Regulations are lax on voting machine and election software manufacturers.

Hackers Target Senators, Political Parties Frequently, Shaheen Says (Roll Call) Sen. Jeanne Shaheen, D-N.H., said Sunday that senators and political parties are frequently the targets of phishing attacks by hackers.

Analysis | The Cybersecurity 202: Doctored videos could send fake news crisis into overdrive, lawmakers warn (Washington Post) Sens. Rubio and Warner want to thwart "deepfakes."

What are deepfakes? How and why they work (CSO Online) Deepfakes are fake videos or audio recordings that look and sound just like the real thing. Once the bailiwick of Hollywood special effects studios and intelligence agencies producing propaganda, deepfakes swap celebrities' faces into porn videos and put words in politicians' mouths, but they could do a lot worse.

Russian Jamming Poses a Growing Threat to U.S. Troops in Syria (Foreign Policy) But this type of warfare also gives the United States a chance to learn about the latest Russian technology.

Busting The Green Door: Army SIGINT Refocuses On Russia & China (Breaking Defense) Over 17 years of fighting terrorists and insurgents, “our SIGINT forces mastered the art and science of identifying and tracking individual threats with pinpoint precision," Lt. Gen. Berrier said. "We now face a significant challenge on a much larger scale."

Shadowy Mastermind Plays Online Advertising System to Spread Malware (Computer Business Review) Check Point researchers identify new "malvertising" campaign that abuses the "legitimate" digital infrastructure of the online advertising industry

A Malvertising Campaign of Secrets and Lies (Check Point Research) Check Point Research has uncovered a large Malvertising campaign that starts with thousands of compromised WordPress websites, involves multiple parties in the online advertising chain and ends with distributing malicious content, via multiple Exploit Kits, to online users everywhere. Before explaining the details of this research, and for those who are not familiar with how …

New version of AZORult stealer improves loading features, spreads alongside ransomware in new campaign (Proofpoint) Proofpoint researchers detail recent updates to the AZORult information stealer.

This new cryptomining malware targets business PCs and servers (ZDNet) Researchers have uncovered a cryptojacking campaign that looks to spread across infected networks to ensure as much mining profit as possible.

Intel’s chip vulnerabilities don’t bode well for the spread of ransomware (Medium) Traditionally, ransomware security was based on matching viruses to a database of known malware. AI offers a more dynamic approach.

Microsoft Discovers Supply Chain Attack at Unnamed Maker of PDF Software (BleepingComputer) Microsoft said today that hackers compromised a font package installed by a PDF editor app and used it to deploy a cryptocurrency miner on users' computers.

Inside SamSam: A Step Forward for Ransomware? (Infosecurity Magazine) Looking at SamSam after Sophos analysts were able to capture a sample of the targeted ransomware

Hackers find creative way to steal $7.7 million without being detected (Ars Technica) Thieves obtain platform's private key, use it to destroy coins, then create new ones.

Steam Pulled an Indie Game Accused of Being an Elaborate Cryptocurrency Mining Scam (Motherboard) Steam game 'Abstractism' was pulled from the marketplace after users complained that it was hijacking their computers to mine cryptocurrency, and that the game developers were scamming players with in-game assets.

Crypto Mining: Google’s Play Store Joins Apple in Banning Mining Apps (CoinCentral) Google has just updated its Play Store developer policy and included a quote that it does not allow crypto mining apps. This is according to the BBC. The last time a significant update occurred, fake ID apps were targeted regardless of their intent.

Activist Publishes 11,000 Private DMs Between Wikileaks and Its Supporters (Motherboard) Emma Best, a freedom of information activist, has published a large cache of Twitter direct messages between Wikileaks and some of its most fervent supporters, including ones showing antisemitic sentiment from Wikileaks.

Dixons Carphone breach: 10 times as many victims as first thought (Computing) Dixons says that the stolen records do not contain personal information

Cyber attack: UnityPoint says 1.4 million affected in phishing scam (Waterloo Cedar Falls Courier) More than a million patients of UnityPoint Health might have had health or personal information exposed, including Social Security and financial information, during a recent email phishing scam,

1.3 million online fashion shoppers exposed after data breach at UK ecommerce provider (Graham Cluley) Up to 1.4 million customers of a number of UK clothing and accessories websites have had their personal information exposed following a security breach at an IT services provider that they were sharing.

F Secure Oyj : Spam Is Still the Choice of Online Criminals, 40 Years Later (4-Traders) Online criminals have gotten savvier but they're still relying on the same old tricks they've been using for decades. F-Secure research shows spam... | juillet 31, 2018

Analysis: Reported data breaches in Australia (Help Net Security) The Office of the Australian Information Commissioner has published the first report on data breaches that fall under Notifiable Data Breaches scheme.

Cyber Trends

Symantec: Financial cyberattacks are on the rise (Fifth Domain) Hackers targeting both large financial institutions and individuals for profit have increased over the past year, according to security software company Symantec.

Where Did the Concept of 'Shadow Banning' Come From? (Motherboard) It's been called shadow banning, toading, being "sent to coventry," and ghost banning—but where did it actually start?

Managed security: a big gamble for Aussie IT providers (CRN Australia) Not an easy transition to make.

The Western Illusion of Chinese Innovation (Project Syndicate) Many Western observers – in media, academia, and government – now portray China as a fierce competitor for global technological supremacy, with top-down industrial policies that are enabling it to stand virtually shoulder-to-shoulder with Europe and the US. This is a serious misrepresentation.

US retailers lead world in data breaches (Retail Dive) Despite big spending by U.S. retailers, data breaches continue to grow, according to a study, with half reporting a breach in the last year.

Marketplace

Security Industry Association Seeks Nominations for 2018 George R. Lippert Award | Security Industry Association (Security Industry Association) SIA is now seeking nominations for the George R. Lippert Memorial Award, an honor recognizing long-term, selfless service to the security industry and SIA.

How to Get the Most Out of DEF CON and Black Hat 2018 (Security Intelligence) The IBM X-Force Red team is well-represented at DEF CON and Black Hat 2018, hosting sessions and panels about smart city security, vulnerability management and more.

Why trust is the biggest selling point for cybersecurity companies (IT Pro Portal) Companies that lose the trust of their customers will have a hard time finding new clients.

CEO guidance: Handling dynamic change in the cybersecurity industry (Help Net Security) In a little over 18 months since SonicWall split from Dell, the company has become operationally and financially independent. "In fact, while achieving

How Canada can close the cybersecurity talent gap (The Globe and Mail) Building a world-class pool of talent in Canada will not only avoid the potential costs of cyberattacks, it positions the country for economic success in the 21st century.

Tenable: Tempting And Able But Not Quite Yet (Seeking Alpha) Tenable is the most recent cybersecurity IPO following the highly anticipated offerings from both Zscaler and Carbon Black earlier this year.

Leading SOAR Provider D3 Security Closes FY2018 with Record Growth; Doubles Revenue and Employee Count (BusinessWire) D3 Security today announced record-breaking growth in both revenue and active enterprise customers.

GE Puts Digital Assets on the Block (Wall Street Journal) General Electric is seeking a buyer for key parts of its digital business as the beleaguered industrial conglomerate unwinds a signature initiative of former Chief Executive Jeff Immelt.

Alibaba Shares Remain Out of Reach in China, For Now (Wall Street Journal) China’s ambitious plan to lure technology giants back home is languishing, with companies and regulator blaming each other and a weaker stock market.

Banking Industry Veteran and Tech Investor Jay Mandelbaum Joins BioCatch Board of Directors (BioCatch) Banking Industry Veteran and Tech Investor Jay Mandelbaum Joins BioCatch Board of Directors

Caveonix Appoints Seasoned Cybersecurity Veterans Tom Noonan and Tom McDonough to its Board of Directors (PRNewswire) Industry Gurus Join Hybrid Cloud Security Provider's Board to Further Bolster Solution

Products, Services, and Solutions

How Endgame Protects Against Phishing from Macro-Enabled Documents (Endgame) Phishing continues to be one of the most effective methods of compromise according to Verizon’s Data Breach Investigations Report.  Adversaries often use crafted documents containing malicious macros and a deceptive lure to achieve initial access to target users and networks.  These macro-based attacks remain difficult to stop for numerous reasons. Adversaries are becoming more clever with their phishing schemes, and mail filtering will never stop a determined adversary from delivering payloads to inboxes.

Cofense SOARs Above Existing Security Orchestration and Automation Offerings Leveraging Human-Intelligence to Stop Active Cyber Attacks - Cofense (Cofense) Global human-phishing defense leader introduces new phishing SOAR platform to quickly stop phishing attacks in progress more efficiently

Securing Industrial Control System OT Networks (Tripwire) Industrial control system (ICS) environments pose unique security challenges. Tripwire Data Collector is a simple, cost-effective solution for maintaining system hardening and continual proof of compliance.

LogMeIn Unveils Secure Federated Login to LastPass with Active Directory (LogMeIn) New integration provides effortless password security for employees by removing the need to create or remember a separate master password

CompTIA PenTest+ Certification Available Worldwide (PRNewswire) Leading tech industry association expands portfolio of cybersecurity skills certifications

Threat Intelligence Transforms Security Automation Landscape with Launch of Its New Cloud Platform Evolve (BusinessWire) Threat Intelligence today launched Evolve, a new cloud-based all-in-one security automation platform.

Varonis Announces Upcoming Integration with Box to Secure Enterprise Content in the Cloud (GlobeNewswire News Room) Varonis Systems, Inc. (NASDAQ:VRNS), a pioneer in data security and analytics, is announcing an upcoming integration with Box, a leader in cloud content management, that will enable customers to secure and manage their data across their cloud data stores, including Box.

Financial institutions fight cybercrime with intelligent platform from Fiserv and BlueVoyant (Help Net Security) New cybersecurity platform designed for financial institutions orchestrates cybersecurity modules, enables threat remediation and simplifies reporting.

Pulse Secure Updates Network Access Control Platform for IoT (eWEEK) Pulse Secure is set to announce its new Pulse Policy Secure 9 network access control technology, bringing new capabilities to help identify and secure IoT devices.

Windows Defender (Finally) Earns Top Antivirus Marks (Tom's Guide) The free, built-in antivirus software in Windows 10 performs just as well as -- or even better than -- many of its paid competitors.

Technologies, Techniques, and Standards

MUD: The Solution to Our Messy Enterprise IoT Security Problems? (Dark Reading) The 'Manufacturer Usage Description' proposal from IETF offers a promising route for bolstering security across the industry.

Counties focus on vote security (The Villages Daily Sun) Sumter, Lake and Marion counties are bulking up on election security this year, aiming to fend off attempts to tamper with the voting process.

Cosco’s pre-cyber attack efforts protected network (Journal of Commerce) Cosco Shipping Lines was able to contain the damage from last week’s cyber attack to its operations in the Americas, and cargo handling in the US, Canada, and South America at its marine terminals was largely unaffected because Cosco isolated its internal networks across its global operations.

What the DoD can learn from the DHS CDM program (Fifth Domain) The ability to make determinations in real time — and to automate action based on what’s discovered at the federal level — is a game-changer.

Six best practices to follow in access control (Help Net Security) In this article, Bernhard Mehl, CEO at Kisi, offers his view on the six essential access control best practices you can use today.

The Need for Managed Detection and Response: Persistent and Prevalent Threats in North America’s Security Landscape (TrendLabs Security Intelligence Blog) The prevalent threats in North America's security landscape highlight the need for managed detection and response.

Understanding digital clues key in cyber breaches: LogRhythm exec (KrASIA) In light of the recent SingHealth attack, Matthew Winter of LogRhythm discusses how such breaches can be prevented.

Four-Time CEO Says Corporate Culture is the Most Important Defense... (Bricata) Corporate culture is an imperative in cybersecurity, according to a four-time CEO. Ben Levitan breaks down key cybersecurity issues every CEO needs to know.

Advanced Persistent Agony: Fixing the Broken Data Breach Response Template (Infosecurity Magazine) Why we need to change the cycle around data breach response.

Remain several steps ahead to prevent a data breach before it hits (SecurityInfoWatch.com) In the world of cyber and information security, the changing nature of attacks is the only thing that’s certain

Design and Innovation

Automating Kernel Exploitation for Better Flaw Remediation (Dark Reading) Black Hat researchers plan on open sourcing a new framework they say can help organizations get a better rein on vulnerability fixes for kernel bugs.

Everything bad about Facebook is bad for the same reason (Quartz) The philosophy of Hannah Arendt points to the banal evil beneath Facebook's many mistakes.

BurnBox Makes Hidden Files Look Like You've Deleted Them (WIRED) Cryptographers have developed a new technology designed to protect your secrets at the border.

Research and Development

Minister announces $650k for DST cyber tech research (Defence Connect) The Defence Science Technology Group (DST) is seeking applications from the cyber community across Australia to develop cyber solutions of high relevance to the country's national security, with appli

Beijing turns to artificial intelligence for diplomatic advantage (Times) Inspired by the ability of artificial intelligence to excel at complex board games, China is working towards harnessing the technology to plot foreign policy. The country’s foreign ministry is...

Academia

Certiport Partners with EC-Council to Validate Cybersecurity Skills in (PRWeb) Certiport, a Pearson VUE business, today announces a certification program for secondary schools and higher education in partnership with EC-Council, a global

Legislation, Policy, and Regulation

Canadian Prime Minister Justin Trudeau Reportedly Alarmed by Huawei’s Threat to National Security (Epoch Times) Canadian Prime Minister Justin Trudeau is alarmed about the national security threat posed by Chinese telecommunication giant Huawei, according to a Globe and Mail article citing an unnamed senior government official. The article said Trudeau has been hearing about the risks directly from U.S. President Donald Trump’s national security adviser John Bolton, and has also …

Russia’s Tiny Neighbor Prepares Its Cyber Revenge (Bloomberg.com) Estonia, the tiny eastern European nation that says it was the first target of state-sponsored cyber warfare from Russia, may soon be able to strike back.

Will the Senate Get Tough on Russia? (The New Yorker) Senator Chris Van Hollen explains the bipartisan support for his bill, the DETER Act, which would impose crippling sanctions on Russia in response to its election meddling.

As cyber-attacks on the US rise, is the answer to hack back? (BostonGlobe.com) Some security experts want the US government, and even private companies and individuals, to go on the offensive.

DHS Forms New Cyber Hub to Protect Critical U.S. Infrastructure (Wall Street Journal) The Department of Homeland Security will announce on Tuesday the creation of a center aimed at guarding the nation’s banks, energy companies and other industries from major cyberattacks, agency officials said.

Lawmakers Unveil Plans for Agency Telework and Cloud Security (Nextgov.com) Plus the annual defense authorization bill is poised to pass.

Litigation, Investigation, and Law Enforcement

NSA Statement on Semi-Annual Office of the Inspector General Report to Congress (IC on the Record) NSA welcomes the semi-annual report of the Office of the Inspector General (OIG) and OIG’s efforts to make the unclassified version as complete and transparent as possible for the public.

UK Group Threatens to Sue Facebook Over Cambridge Analytica (WIRED) Lawyers have served Facebook with a letter before claim, the first step for filing a class action lawsuit in the UK.

House GOP intends to seek Comey interview after August recess (TheHill) House Republicans are planning to seek an interview with former FBI Director James Comey in September to discuss his decisionmaking during the 2016 election, The Hill has learned.

Russian National Sentenced to 70 Months For $4 Million Debit Card Fraud (Dark Reading) Mikhail Malykhin's actions drove one company out business.

‘TELL YOUR DAD TO GIVE US BITCOIN:’ How a Hacker Allegedly Stole Millions by Hijacking Phone Numbers (Motherboard) California authorities say a 20-year-old college student hijacked more than 40 phone numbers and stole $5 million, including some from cryptocurrency investors at a blockchain conference Consensus.

Florida High School Football Team Improperly Accessed Rivals' Training Videos (BleepingComputer) The Braden River High School football program is in trouble after it was caught accessing the training videos of four of its rivals.

For a complete running list of events, please visit the Event Tracker.

Newly Noted Events

Black Hat USA 2018 (Las Vegas, Nevada, USA, Aug 4 - 9, 2018) Now in its 21st year, Black Hat USA is the world's leading information security event, providing attendees with the very latest in research, development and trends. Black Hat USA 2018 opens with four days of technical Trainings (August 4 – 7) followed by the two-day main conference (August 8 – 9) featuring Briefings, Arsenal, Business Hall, and more.

DefCon 26 (Las Vegas, Nevada, USA, Aug 9 - 12, 2018) DEF CON has been a part of the hacker community for over two decades. $280.00 USD, cash for all four days. Everyone pays the same: The government, the media, the ‘well known hackers’, the unknown script kiddies. The only discount is for Goons and speakers, who get to work without paying for the privilege. We only accept cash - no checks, no money orders, no travelers checks. We don't want to be a target of any State or Federal fishing expeditions.

Cyber Beacon (Washington, DC, USA, Sep 20, 2018) Cyber Beacon is the flagship event of the National Defense University's College of Information and Cyberspace (NDU CIC). The conference brings together cyber experts from across the national security community, private sector, and academia to discuss the most pressing problem sets concerning cyberspace and national security. This year's theme is "decision making in cyberspace". Cyber Beacon V will be held on Wednesday 19 and Thursday 20 September 2018 at the NDU campus on Fort McNair in Washington, DC.

Retail Cyber Intelligence Summit (Denver, Colorado, USA, Oct 2 - 3, 2018) Network with 250+ CISOs and their teams from retail and consumer facing industries: restaurants, hospitality, gaming, convenience, grocery and more. Share best practices, gain insights, network. This conference is organized by R-CISC, the retail ISAC.

Upcoming Events

SINET61 2018 (Melbourne, Victoria, Australia, Jul 31 - Aug 1, 2018) Promoting cybersecurity on a global scale. SINET – Melbourne provides a venue where international solution providers can engage with leaders of government, business and the investment community to advance innovative solutions to Cybersecurity challenges.

Community College Cyber Summit (3CS) (Gresham, Oregon, USA, Aug 2 - 4, 2018) 3CS is the only national academic conference focused on cybersecurity education at community colleges. Who should attend 3CS? College faculty and administrators, IT faculty who are involved or who would like to become involved in cybersecurity education, non-IT faculty in critical infrastructure fields who are interested in incorporating cybersecurity topics into their curricula, decision makers in positions that influence cybersecurity education programs, community college students interested in learning about security or expanding their current knowledge, and students attending the 3CS Pre-Summit Job Fair and National Cyber League (NCL) on Thursday, August 2nd.

2018 Community College Cyber Summit (3CS) (Gresham and Portland, Oregon, USA, Aug 2 - 4, 2018) 3CS is organized and produced by the National CyberWatch Center, National Resource Center for Systems Security and Information Assurance (CSSIA), CyberWatch West (CWW), and Broadening Advanced Technological Education Connections (BATEC), which are all funded by the National Science Foundation (NSF). The outcomes of 3CS leverage community college cybersecurity programs across the nation by introducing the latest technologies, best practices, curricula, products, and more.

2nd Billington Automotive Cybersecurity Summit (Detroit, Michigan, USA, Aug 3, 2018) The 2nd summit on August 3 in Detroit, MI will be the top leadership summit on auto cybersecurity convening a who’s who of speakers in the automotive cybersecurity ecosystem. The inaugural summit included, among others, the CEO of GM Mary Barra and the U.S. Secretary of Transportation Anthony Foxx, resulting in media coverage from The New York Times and The Wall Street Journal and attracting 500 attendees. NOTE: Attendees must be citizens of the U.S. or allied nations to attend this event.

2nd Billington Automotive Cybersecurity Summit (Detroit, Michigan, USA, Aug 3, 2018) The 2nd summit on August 3 in Detroit, MI will be the top leadership summit on auto cybersecurity convening a who’s who of speakers in the automotive cybersecurity ecosystem. The inaugural summit included, among others, the CEO of GM Mary Barra and the U.S. Secretary of Transportation Anthony Foxx, resulting in media coverage from The New York Times and The Wall Street Journal and attracting 500 attendees. NOTE: Attendees must be citizens of the U.S. or allied nations to attend this event.

Black Hat USA 2018 (Las Vegas, Nevada, USA, Aug 4 - 9, 2018) Now in its 21st year, Black Hat USA is the world's leading information security event, providing attendees with the very latest in research, development and trends. Black Hat USA 2018 opens with four days of technical Trainings (August 4 – 7) followed by the two-day main conference (August 8 – 9) featuring Briefings, Arsenal, Business Hall, and more.

Audit Your Digital Risk (Washington, DC, USA, Aug 7 - 8, 2018) Recent reports indicate that manufacturing is the most heavily targeted industry for cyber attacks in the past year. According to a study released by NTT Security, 34% of all documented cyber attacks in Q2 2017 were focused on manufacturing. It's likely you have a cybersecurity program and team in place, but do you know how to assess your level of risk? Audit Your Digital Risk is designed for cybersecurity and audit professionals, risk managers, and others focused on protecting a company's people, assets, and IP.

DefCon 26 (Las Vegas, Nevada, USA, Aug 9 - 12, 2018) DEF CON has been a part of the hacker community for over two decades. $280.00 USD, cash for all four days. Everyone pays the same: The government, the media, the ‘well known hackers’, the unknown script kiddies. The only discount is for Goons and speakers, who get to work without paying for the privilege. We only accept cash - no checks, no money orders, no travelers checks. We don't want to be a target of any State or Federal fishing expeditions.

CyberTexas 2018 (San Antonio, Texas, USA, Aug 14 - 15, 2018) The 2018 CyberTexas Conference will bring members of the CyberUSA community together with industry and government members of Texas to create long-term values for the cybersecurity ecosystem in San Antonio and the state of Texas. This conference is brought to you be the CyberTexas Foundation and the Federal Business Council (FBC), in conjunction with CyberUSA, and leaders from federal and local government agencies, industry, and academia. Key features of this conference include building on the four pillars of CyberUSA: Communication, Education, Innovation, and Workforce Development. Each topic will feature prominent speakers and panels from Texas and beyond to strengthen the cybersecurity ecosystem.

SecureWorld Bay Area (Santa Clara, California, USA, Aug 21, 2018) Connecting, informing, and developing leaders in cybersecurity. SecureWorld conferences provide more content and facilitate more professional connections than any other event in the Information Security industry. Join your fellow InfoSec professionals for high-quality, affordable cybersecurity training and education. Earn 6-12 CPE credits through 30+ educational elements, learning from nationally recognized industry leaders. Attend featured keynotes, panel discussions, breakout sessions, and solution vendor displays-all while networking with local peers.

The Air Force Information Technology & Cyberpower Conference (Montgomery, Alabama, USA, Aug 27 - 29, 2018) As the premiere Air Force cyber security annual event, the Air Force Information Technology & Cyberpower Conference (AFITC) returns to Montgomery, Alabama in August of 2018. As a critical intersection of Air Force IT experts, prominent IT academics, and some of America’s top cyber security companies, the AFITC offers a full of slate events and activities, with 3 days of speakers, expanded education/training opportunities, and an exhibitor-driven trade show that all revolves around the ways we can better defend America from cyber-attacks, advanced persistent threats, and proactively lead in this in this increasingly digital world.

The Cyber Security Summit: Chicago (Chicago, Illinois, USA, Aug 29, 2018) This event is an exclusive conference connecting Senior Level Executives responsible for protecting their company’s critical data with innovative solution providers & renowned information security experts. Learn from cyber security thought leaders and Engage in panel discussions focusing on trending cyber topics such as Sr. Leadership’s Best Approach to Cyber Defense, What’s Your Strategic Incident Response Plan?, Protecting your Enterprise from the Human Element and more. Your registration includes a catered breakfast, lunch, and cocktail reception. Receive half off your admission with promo code cyberwire50 at CyberSummitUSA.com and view details including the full agenda, participating solution providers & confirmed speakers. Tickets are normally $350, but only $175 with promo code.

Intelligence & National Security Summit (National Harbor, Maryland, USA, Sep 4 - 5, 2018) The Intelligence & National Security Summit is the premier forum for unclassified, public dialogue between the U.S. Government and its partners in the private and academic sectors. The 2018 Summit will include five plenary sessions, where senior leaders from the intelligence and national security communities will discuss top priorities, challenges, and assessments of key threats, as well as nine breakout sessions that will examine issues of vital importance to our national wellbeing and the readiness of the intelligence and national security workforce.

Cyber Resilience & Infosec Conference (Abu Dhabi, UAE, Sep 5 - 6, 2018) Interact with the top-notch cyber security specialists, learn new strategies and protect your company's future efficiently

Incident Response 18 (Arlington, Virginia, USA, Sep 5 - 6, 2018) If you work for a vendor or product company, please understand this is not a sales event. IR18 is a community-driven event that aims to disrupt the traditional approach and is more focused on community, connections and change. IR18 is a conference for cybersecurity professionals to learn and develop playbooks to improve Incident Response processes. If you are interested in contributing to the event, your company can sponsor one of the exclusive innovation categories. Contact Sponsors@IncidentResponse.com for more information.

9th Annual Billington CyberSecurity Summit (Washington, DC, USA, Sep 6, 2018) An opportunity to hear, meet, and interact with cybersecurity leaders from Government and industry.

9th Annual Billington CyberSecurity Summit (Washington, DC, USA, Sep 6, 2018) The mission of Billington CyberSecurity is to bring together thought leaders from all sectors to examine the state of cybersecurity and highlight ways to enhance best practices and strengthen cyber defenses within government and the private sector. This year's summit, like the previous eight, will bring together leaders from government and industry for a comprehenive look at the challenges of cybersecurity.

SecureWorld Twin Cities (Minneapolis, Minnesota, USA, Sep 6, 2018) Connecting, informing, and developing leaders in cybersecurity. SecureWorld conferences provide more content and facilitate more professional connections than any other event in the Information Security industry. Join your fellow InfoSec professionals for high-quality, affordable cybersecurity training and education. Earn 6-12 CPE credits through 30+ educational elements, learning from nationally recognized industry leaders. Attend featured keynotes, panel discussions, breakout sessions, and solution vendor displays-all while networking with local peers.

CornCon IV: Quad Cities Cybersecurity Conference & Kids' Hacker Camp (Davenport, Iowa, USA, Sep 7 - 8, 2018) CornCon is a 2-day conference held in Davenport, Iowa including a professional development workshop on Friday and a full-day cybersecurity conference on Saturday. The workshop covers enterprise risk, privacy and security. The conference has a keynote track with top international speakers, and a technical track with cutting edge exploits, demos and presentations. There will be a hacker village, vendor expo, contests, t-shirts, food drinks and a great after party. There is also a Saturday kids' hacker camp running alongside the conference. "A little DEFCON in a corn field!"

2018 International Information Sharing Conference (Tysons Corner, Virginia, USA, Sep 11 - 12, 2018) Join representatives from fellow information sharing groups with all levels of expertise, security practitioners, major technology innovators, and well-established cybersecurity organizations, as they come together to discuss the impact ISAOs have had on the nation’s security, share lessons learned, and discover the latest in cybersecurity policy. Attendees will gain the knowledge needed to learn how to improve information sharing with keynote addresses by industry experts, senior government, and international thought leaders, presentations on key topics and panel discussions of interest to the Information Sharing community, technology demonstrations from service providers and vendors addressing information sharing challenges. There will be many networking opportunities and exhibits.

SecureWorld Detroit (Detroit, MIchigan, USA, Sep 12 - 13, 2018) Connecting, informing, and developing leaders in cybersecurity. SecureWorld conferences provide more content and facilitate more professional connections than any other event in the Information Security industry. Join your fellow InfoSec professionals for high-quality, affordable cybersecurity training and education. Earn 12-16 CPE credits through 60+ educational elements learning from nationally recognized industry leaders. Attend featured keynotes, panel discussions, breakout sessions, and solution vendor displays-all while networking with local peers.

Cybersecurity for Small & Medium Sized Businesses (Gaithersburg, Maryland, USA, Sep 13, 2018) Learn about technical, legal, cultural and policy cybersecurity issues facing small and medium sized businesses. Panelists include: Markus Rauschecker, J.D. University of MD. Center for Health and Homeland Security (CHHS); Ira Kolmaister, Network Alarm Corporation; Yossi Applebaum, SEPIO Systems; Ken Stalder, Sherpas Cyber Security Group; Moderator: Ellen Cornelius, University of MD CHHS. Panel discussion with questions and answers from 3:30- 5:00pm, with a networking reception to follow. More information and RSVP at the link.

FutureTech Expo (Dallas, Texas, USA, Sep 14 - 16, 2018) With over 2,000 expected attendees, 70 top-notch speakers and 100+ exhibitors from the Blockchain & Bitcoin, Artificial Intelligence, Cyber Security / Hacking, Quantum Computing, 3D Printing, and Virtual / Augmented Reality worlds, and talks from ICOs and blockchain startups and more, this Expo is going to be a diverse, wonderful, and potentially profitable experience for all who attend.