We recently launched Recorded Future Express — a free browser extension for security teams. Use Express over any web-based SIEM, vulnerability management solution, security blog, and more to put real-time security intelligence at your fingertips. Instantly prioritize alerts, incidents, and vulnerabilities based on real-time risk scores from the world’s largest commercial collection platform. Sign up now.
For more, see our daily update on COVID-19 and the cybersecurity community.
Red Canary reports finding a new threat to Windows machines. It's observing a cluster of apparently related activities the company is calling "Blue Mockingbird" that are engaged in deploying Monero cryptominers on infected machines. The malicious payloads are appearing "in dynamic-link library (DLL) form on Windows systems." Initial access is gained through exploitation of public-facing web applications, and the most common payload is the XMRig open-source currency miner.
A new version of the Dacls remote access Trojan is being distributed by North Korea's Lazarus Group (also known as Hidden Cobra and APT38). Malwarebytes Labs says that this version is designed to work against Macs, and it does so through Trojanized versions of the MinaOTP two-factor authentication app, an app used mostly by Chinese speakers, which suggests its probable target set. Qihoo360 Netlab first described the Dacls RAT in December of 2019.
Botnets rise, of course, but they also fall, especially as affected devices are patched or retired. One long-running botnet that exploited D-Link NVRs (network video recorders) and NAS (network-attached storage) devices has slowly declined through this natural attrition. ZDNet reports that the Cereal botnet, established by some otaku to download anime, has been active since 2012. It peaked in 2015 with over ten-thousand bots in its herd, but is now almost gone. Cereal was also driven down by some competing malware: Cr1ptT0r ransomware suppressed Cereal infestations this past winter (which wasn't necessarily a good thing for victims). Forcepoint now thinks it safe to publish details on the vanishing botnet.
Today's issue includes events affecting China, European Union, Israel, Democratic People's Republic of Korea, United Kingdom, and United States.
First there were firewalls to protect the perimeter of the enterprise, and then there were firewalls within firewalls, and so on.
"And now what I think the new sort of threat landscape is—you know, we have our perimeter firewall. Our users, you know, are going to get impacted at some point. I have some customers where they actually have people working for organized crime that come into an organization as a developer. So the assumption is that you've already been breached. That's sort of the new mindset of CISOs. So how do you basically ensure that the breach that has already taken place - and you have to assume breach - that it can't spread? And the answer to doing that is segmentation. So the first thing that a CISO will do is to say, oh, let's buy more firewalls to do that. Well, the problem is that driving more and more firewalls into your data center is costly and disruptive in that, you know, you may have to re-architect your data center to insert them. And I think that's why things are starting to break down."
—Matt Glenn, vice president of product management at Illumio, on the CyberWire's Daily Podcast, 5.5.20.
It's the matroshka model of security, and there's always a last doll, somewhere. Despite what the fashionable lady with theosophical views told William James ("It's no good, Mr. James: it's turtles all the way down") there's not going to be an infinite regress here or elsewhere, and that wouldn't be a good thing anyway.
If you're interested in space and communications (technology, policy, business, and operations), take a look at the latest issue of Cosmic AES Signals & Space. Produced in partnership with the CyberWire, Signals & Space offers a monthly overview of news in this sector.
Looking to advance your cybersecurity career? Then the Georgetown University Master's in Cybersecurity Risk Management is for you. Ideal for working professionals, our program offers flexible options to take classes online, on campus, or through a combination of both—so you don’t have to interrupt your career to earn your degree. You'll leave the program with the expertise you need to effectively manage risks and navigate today’s increasingly complex cyber threats. Learn more.
In today's CyberWire Daily Podcast, out later this afternoon, we speak with our partners at Booz Allen Hamilton, as Michael Sechrist tells us where things are headed with ransomware. Our guest is Rachael Stockton from LastPass, discussing their Psychology of Passwords report.
Hacking Humans is up. In this episode, "Exploiting our distractions," Dave has the story of PR firms selling lies online, Joe has the story of a sophisticated Business Email Compromise attack, The Catch of the Day advises you to update your account information IMMEDIATELY, and later in the show our interview with Dave Baggett, CEO and Founder of INKY. This will be a discussion of fake stimulus payment phishing scam INKY recently found.
In this week's episode of CSO Perspectives, "Dark web and TOR: What kind of intelligence can you find there?" the CyberWire's CSO Rick Howard discusses counterintelligence operations by commercial vendors on the dark web, and the kinds of intelligence that can be found there.
Illusive Networks Discovers New Nation-State Cyberattack Tools Linked to COVID-19 Phishing Scam (PR Newswire) Illusive Networks®, the leader in deception-based cyber defense solutions, today revealed it detected and thwarted a nation-state attack linked...
Cybercriminals Actively Exploiting RDP to Target Remote Organizations (McAfee Blogs) The COVID-19 pandemic has prompted many companies to enable their employees to work remotely and, in a large number of cases, on a global scale. A key
CISA Warnings Highlight Myriad Security Threats (Decipher) Over the past few days, the Cybersecurity and Infrastructure Security Agency has issued several alerts warning about nation-state actors targeting healthcare and medical research organizations, as well as ways organizations should protect their remote workforce.
COVID-19 - Malware Makes Hay During a Pandemic (McAfee Blogs) Special thanks to Prajwala Rao, Oliver Devane, Shannon Cole, Ankit Goel and members of Malware Research for their contribution and monitoring of related
Twitter steps up its fight back against 5G coronavirus conspiracy theories (The Telegraph) The theory, which has spread on social media, has resulted in attacks on telecoms masts
UK comms experts continue to question contact-tracing app (ComputerWeekly.com) Academics and comms industry experts challenge UK government scientists on their defence of NHS contact-tracing app, in particular the issue of centralised data gathering.
India's Covid-19 Contact Tracing App Could Leak Patient Locations (Wired) The system's use of GPS data could let hackers pinpoint who reports a positive diagnosis.
A Scramble for Virus Apps That Do No Harm (New York Times) Dozens of tracking apps for smartphones are being used or developed to help contain the coronavirus pandemic. But there are worries about privacy and hastily written software.
Shin Bet cyber founder: Coronavirus surveillance needed to save lives (The Jerusalem Post) Maybe empower new body to replace agency in future, protect privacy
ExtraHop Data Shows Shifts in IoT Device Usage During COVID-19 Have Broad Security Implications (ExtraHop) New Report Details IoT and Other Connected Devices Trends During Pandemic; Identifies Biggest Security Gaps for Organizations
RDP Attacks Surged by 330% in The US Amid Pandemic (Atlas VPN) According to data extracted and analyzed by Atlas VPN, remote desktop protocol (RDP) attacks rocketed by 330% in the US amid the COVID-19 pandemic. The rise in cyber-attacks correlates almost precisely with the start of lockdowns worldwide from March 10, 2020.
The Price of Fame? Celebrities Face Unique Hacking Threats (Dark Reading) Hackers are hitting the sports industry hard on social media and luring quarantined consumers with offers of free streaming services, a new report shows.
A perfect cyber storm is brewing as Nigerian scammers add to COVID-19 response team woes (SC Margazine) A Nigerian cybercrime group SilverTerrier targets healthcare organisations critical to COVID-19 response. Organisations advised "apply extra scrutiny to COVID-19-related email attachments."
The Cybersecurity of Health (Council on Foreign Relations) The coronavirus pandemic has highlighted the need for a patient-centric approach to the cybersecurity of healthcare technology systems.
Experts warn companies to prepare for security breaches when travel restrictions lift (PhocusWire) Travel companies may have seen an increase in phishing attacks due to the volume of refunds issued recently, but experts say they should brace for security breaches as restrictions lift.
7 Tips for Security Pros Patching in a Pandemic (Dark Reading) The shift to remote work has worsened patch management challenges and created new ones. Security pros share insights and best practices.
SBA bans RPA for PPP loan applications after bots clog system (SearchEnterpriseAI) The Small Business Administration is no longer accepting RPA for Paycheck Protection Program (PPP) finance applications, after a flood of RPA-generated applications overwhelmed the agencies' systems and triggered technical problems.
Justice Department Eyes Fraud in Lending Program for Small Businesses Hit by Coronavirus Crisis (Wall Street Journal) Federal prosecutors are mounting a broad search for fraud in emergency lending programs designed to assist businesses battered by the coronavirus crisis, a top Justice Department official said Tuesday.
The Economic Shutdown's Impact on Security Budgets (Security Boulevard) Cybersecurity spending, even if only driven by industry and government regulatory compliance mandates, has proven itself to be relatively resilient
Cloudera cuts staff in response to Covid-19 (Silicon Valley Business Journal) The Palo Alto software company is the latest tech player to conduct layoffs in response to the coronavirus pandemic.
San Jose cloud giant furloughs 27% of global workforce (Silicon Valley Business Journal) Nutanix Inc., led by CEO Dheeraj Pandey, is furloughing almost 1,500 employees.
Cohesity cuts staff weeks after raising $250M at doubled valuation (Silicon Valley Business Journal) The move is the latest in a wave of cost-cutting by venture-backed companies in the Bay Area during a pandemic emergency that shut down much of the nation's economy.
FrontStream Unveils the Industry’s First Peer-to-Peer Fundraising Plat (PRWeb) FrontStream, the leading provider of a complete suite of products that empower registered nonprofit organizations and socially responsible corporations to raise m
Buguroo launches Covid-19 Online Banking Fraud Resources Centre to protect consumers against rising tide of phishing attacks (Global Security Mag Online) buguroo announced its new Covid-19 Online Banking Fraud Resources Centre, which consumers and companies located anywhere in the world can use to check whether Covid-related emails, SMS messages and social posts are scams. The service – which is free-of-charge – has been launched to counter the growing wave of phishing activity that has accompanied the Coronavirus outbreak.
Free IR for cyber security attacks aimed at hospitals (ITWeb) Dimension Data offers free incident response for cyber security attacks aimed at hospitals during the COVID-19 pandemic.
ESET to support EU CERTs with free access to threat intelligence during Covid-19 (Telecom Paper) ESET said it implemented measures to assist national Computer Emergency Response Teams within the EU (EU CERTs) in mitigating threats during the Covid-19 crisis.
A Department of Defense bulletin on a 'leaking' sinkhole has baffled cybersecurity experts (CyberScoop) A bulletin in mid-April from the DCSA said China was stealing data from contractors. But how the DCSA came to that conclusion is complicated.
Detecting COR_PROFILER manipulation for persistence - Red Canary (Red Canary) Red Canary detected adversaries abusing Microsoft's COR_PROFILER to achieve persistence and bypass User Access Control (UAC).
Lazarus Group Hides macOS Spyware in 2FA Application (Threatpost) The Dacls RAT has been ported from an existing Linux version.
Two Popular VPNs Exposed Users to Attacks Via Fake Updates (SecurityWeek) Researchers have analyzed the 20 most popular VPNs and found that two of them had vulnerabilities that exposed users to attacks via fake updates
Hackers hide web skimmer behind a website's favicon (ZDNet) Hackers created a fake image-hosting portal to hide a web skimming operation.
Kaiji malware spawns ‘army’ of Internet of Things devices after gaining root access (SC Magazine) New details emerge after security researchers discovered another strain of malware specifically built to infect smart IoT devices and Linux-based servers.
For 8 years, a hacker operated a massive IoT botnet just to download Anime videos (ZDNet) The botnet consisted solely of D-Link NAS and NVR devices and the botnet peaked at 10,000 bots in 2015.
Abnormal Attack Stories: Cisco Webex Phishing (Abnormal Security) In this attack, attackers are impersonating a notification from Cisco Webex in order to steal the credentials of employees. Quick Summary Platform: Office 365Email Gateway: MessageLabs# Mailboxes: 2,800 to 5,000Victims: EmployeesPayload: Malicious LinkTechnique: Impersonation What was the attack? Setup: Companies have largely transitioned to working from home where they can in response to the current...
Large-scale attacks leave nearly a million WordPress websites at risk (SC Magazine) Massive growth in XSS flaw attacks on WordPress websites over past week - up 30 times - mostly from a single threat actor.
Anatomy of a Well-Crafted UPS, FedEx, and DHL Phishing Email During COVID-19 (Votiro) What happened: Votiro’s Research Team has discovered a malicious macro hiding in Microsoft Excel spreadsheets delivered via phishing emails appearing to be from UPS, FedEx, and DHL. The Excel spreadsheet includes an obfuscated macro that launches PowerShell in hidden mode and downloads a payload from geronaga.com, a website that is registered with a Chinese website […]
193 Law Firms – Advanced Data Breach Disclosure Update (TurgenSec Community) TurgenSec discovered a data breach at a legal software provider affecting over 190 law firms, including three magic circle law firms. We posted our public statement of the matter on the 27th of April. It
York University cyber attack looks like ransomware, says security expert (IT World Canada) Last week Toronto’s York University fell victim to what appears to be a ransomware attack, according to cybersecurity expert David Masson, and
Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability (Cisco Security - CiscoTest Application) The Cisco Security portal provides actionable intelligence for security threats and vulnerabilities in Cisco products and services and third-party products.
Instacart Patches SMS Spoofing Vulnerability Discovered by Tenable Research (Tenable®) As grocery delivery services have seen an increase in traffic from users during the coronavirus pandemic, Tenable Research identified an SMS spoofing flaw that could have allowed an attacker to sen
Phishing and Fraud in Financial Services Threat Research Update (ZeroFOX) The financial services industry continues to be impacted by both the benefits and the risks of digital transformation. FinServ institutions must acknowledge that in this world of digital business, cyberattackers now have equal access to consumers.
The State of XOps Report Reveals IT and InfoSec Alignment Increases IT Security Confidence by Three Times (SaltStack) The State of XOps Report from SaltStack reveals IT and InfoSec alignment increases IT security confidence by three times over siloed teams with broken comms
Acunetix Web Application Vulnerability Report 2020 (Acunetix) Every year, Acunetix releases a vulnerability testing report that shows the state of web security. This is the report for 2020.
The SecureAuth 2020 State of Identity Report (SecureAuth) SecureAuth conducted the research using an online survey among 2,000 general population consumers in the U.S. Data was collected between March 16 and March 21, 2020. With nearly 50% of survey respondents currently in the U.S. workforce, the survey provides an objective data set with respect to the security and privacy habits consumers apply in both their personal and professional lives.
Financial Phishing Attacks Take Off, Malware Declines (Dark Reading) In the past year, the number of digital threats increased by nearly half as phishing swamped malware to become the most dominant attack technique.
CrowdStrike Cautions UK Businesses Of Looming Cyber Security Threats (Security Informed) Cybersecurity expert CrowdStrike has issued a stark warning to British businesses, telling them to crack down on lax remote working policies now or risk catastrophic exposure at the hands of...
SANS 2020 Cyber Threat Intelligence (CTI) Survey Results (Anomali) The use of cyber threat intelligence (CTI) for network defense is growing, with 80% of respondents producing or consuming CTI, compared with 60% in 2017.
2020 State of Hybrid Cloud Security Infographic (FireMon) State of Hybrid Cloud Security. Gain key insights on how the lack of automation & visibility, and network security complexity are impacting digital transformation initiatives.
Cybersecurity Market Review for Q1 2020 (Momentum Cyber) We are pleased to provide you with Momentum’s Cybersecurity Market Review for Q1 2020. Strategic activity in Q1 continued its strong momentum with 144 transactions deploying over $10.8B across M&A (49 transactions, $8.4B) and financing (95 transactions, $2.4B). However, we have begun witnessing the impacts of COVID-19 at the start of Q2 and expect strategic activity to decline significantly.
Microsoft in Negotiations to Acquire Israeli Cybersecurity Company CyberX (CTECH) Estimated $170 million deal is set to be completed in June
Zoom buys Keybase — its first acquisition — as part of 90-day plan to fix security flaws (CNBC) Zoom CEO Eric Yuan said adding Keybase technology will allow users to make sure that intruders don't enter meetings.
Clear Skye Raises $4.95M Led by Toba Capital to Meet Growing Global Demand for SaaS Identity Governance and Administration Solutions (BusinessWire) Clear Skye® Inc., the better way to IGA company, today announced that it has closed a $4.95 million Series A round of funding led by Toba Capital. Rou
Xator closes deal for InCadence (Washington Technology) Xator has closed its acquisition of InCadence in a move that adds new contract vehicles and further builds the buyer's portfolio in C4ISR, national security and intelligence.
Carbonite, Webroot Hit Business Goals; Parent OpenText Restructures (ChannelE2E) Carbonite & Webroot hit financial targets in latest quarter. But parent OpenText cuts some staff & temporarily reduces salaries amid economic uncertainty.
Fidelis Cybersecurity Wins U.S. Cyber Command Competition (Fidelis Cybersecurity) Company’s innovative Network Traffic Analysis solution is named the winner of the “Rotten Apple in the Bushel” competition for its innovative machine learning analytics.
Portshift Chosen as a 2020 Red Herring Top 100 Europe Winner (PRWeb) Portshift, a leader in Kubernetes-native solutions, today announced that Portshift has been selected as a 2020 Red Herring Top 100 Europe winner. After much
TransUnion Accelerates the Expansion of its Global Fraud Business and Hires Shai Cohen to Lead it (TransUnion) Announces the Global Fraud & Identity Solutions Group; Cohen held leadership roles at RSA, EMC and Intel
ZeroNorth Appoints Chris Riley as Senior Vice President of Sales (ZeroNorth) Following a year of 300% ARR growth and the doubling of its customer base, ZeroNorth’s appoints Chris Riley as SVP of Sales to accelerate the company’s current momentum and ignite the company’s next phase of growth.
Strider announces John Mullen, Former Assistant Director of CIA, Joins Company as Advisor (PR Newswire) Strider Technologies, developer of the world's first economic statecraft technology platform, announced today that John Mullen has joined...
Matthew G. Devost Joins Flashpoint Board of Directors (Olean Times Herald) Flashpoint, the globally trusted leader in risk intelligence, has today announced that Matthew G. Devost has been appointed to the company's Board of
KnowBe4 Launches Kit to Help Strengthen Passwords for World Password Day (PR Newswire) KnowBe4, the provider of the world's largest security awareness training and simulated phishing platform, today announced it has launched a new...
Exabeam Partners with Orca Tech to Accelerate Business Growth in Australia and New Zealand (Exabeam) Exabeam, the Smarter SIEM™ company, and Orca Technology (Orca[...]
Ermetic Launches Analytics-based Solution that Protects AWS, Google Cloud and Microsoft Azure from Data Breaches (Ermetic) Platform Automates the Detection and Remediation of Identity and Access-based Risks to Enable Continuous Enforcement of Least Privilege Policies at Scale.
New from Satellite 2020: GitHub Codespaces, GitHub Discussions, securing code in private repositories, and more (The GitHub Blog) See what we announced at our first virtual GitHub Satellite including a full dev environment on GitHub powered by VS Code, a new way to have discussions with your communities, new ways to secure projects with code scanning and secret scanning, and more.
CISA and INL Release Commercial Routing Assistance App (Idaho Falls Magazine) The Cybersecurity and Infrastructure Security Agency (CISA) and Idaho National Laboratory (INL) launched a new Commercial Routing Assistance (CRA) tool today for truckers and other commercial drivers in the U.S.
Government authorities secure mobile communication with crypto solutions from Sectra | Sectra Group (Sectra Group) International medical imaging IT and cybersecurity company Sectra (https://sectra.com/) (STO: SECT B) is receiving new orders for its crypto solutions for mobile telephony, smartphones and the blue-light operations’ communication network TETRA from several European government authorities.
InQuest Partners with Joe Security to Exclusively Deliver Joe Sandbox to the US Public Sector (Olean Times Herald) InQuest, a leading provider of enterprise-scale file analytics, threat hunting and threat prevention solutions, today announced an exclusive reseller agreement with Joe Security, a leading provider of automated malware analysis.
Make passwords at least 13 characters long and protect email with a strong passphrase, police advise (Computing) With Covid-19 related fraud through the roof it's time to review password policy, says South East Regional Organised Crime Unit
#WorldPasswordDay 2020: Promoting Good Password Practice During #COVID19 (Infosecurity Magazine) Promoting good password practice has never been more important amid the unprecedented remote working situation
Webcast: Free Tools! How to Use Developer Tools and Javascript in Webapp Pentests (Black Hills Information Security) I like webapps, don’t you? Webapps have got to be the best way to learn about security. Why? Because they’re self-contained and so very transparent. You don’t need a big ol’ lab before you can play with them. You can run them in a single tiny VM or even tiny-er Docker image on your laptop. …
Threat Hunting IoT and IIoT Devices (Active Countermeasures) Intro One of the challenges of agent-based security solutions is that they leave you with blind spots. They will help to lock down […]
FIRST updates coordination principles for Multi-Party Vulnerability Coordination and Disclosure (FIRST — Forum of Incident Response and Security Teams) As part of their mission to encourage global coordination and a global language, the Forum of Incident Response and Security Teams (FIRST) has released an updated set of coordination principles – Guidelines for Multi-Party Vulnerability Coordination and Disclosure version 1.1.
European nations may be hesitant to trust AI for cybersecurity (Fifth Domain) The United States is designating resources to develop artificial intelligence (AI) for cybersecurity, but European countries are slower to follow.
These are the people Facebook put in charge of deciding whether to delete controversial posts (CNBC) The board includes a former Prime Minister of Denmark and several former journalists.
Opinion | We Are a New Board at Facebook. Here’s What We’ll Decide. (New York Times) The company’s independent oversight body will focus on challenging content issues, such as hate speech and harassment.
Facebook will rue its left-wing oversight board appointments (The Telegraph) The board has been filled with people like the former Guardian editor Alan Rusbridger who conform to Facebook's liberal world view
CyberPatriot XII Nationals Champions Announced (Air Force Association) The Air Force Association's CyberPatriot program announced this week the winners of the twelfth season of its National Youth Cyber Defense Competition.
Identity governance and WVU’s security strategy (EdScoop) WVU’s CISO shares why investing in identity governance is important to universities to strengthen their overall security posture with users.
No cookie consent walls — and no, scrolling isn’t consent, says EU data protection body (TechCrunch) You can’t make access to your website’s content dependent on a visitor agreeing that you can process their data — aka a ‘consent cookie wall’. Not if you need to be compliant with European data protection law. That’s the unambiguous message from the European Data…
Czechs Sign Joint 5G Security Declaration With United States (New York Times) The Czech Republic has signed a joint declaration with the United States to strengthen cooperation on next-generation 5G networks and promote rigorous evaluations of suppliers and supply chains, Czech leader Andrej Babis said on Wednesday.
FCC Wants Help Interpreting Law to Fund Replacement of Huawei, ZTE Equipment (Nextgov.com) The commission is giving stakeholders 15 days to weigh in on a related rulemaking.
Marco Rubio: Smaller contractors need more time to comply with China regulations (Florida Politics) Federal contractors are being barred from using certain Chinese telecommunication equipment.
Exclusive: U.S. drafts rule to allow Huawei and U.S. firms to work together on 5G standards - sources (Reuters) The U.S. Department of Commerce is close to signing off on a new rule that would allow U.S. companies to work with China's Huawei Technologies on setting standards for next generation 5G networks, people familiar with the matter said.
US drafts rule to allow Huawei and US firms to work together on 5G standards, sources say (CNBC) The rule is only expected to address Huawei, the people familiar with the matter said, not other listed entities like Chinese video surveillance firm Hikvision.
Opinion | We may be dramatically overestimating China’s capabilities (Washington Post) A whirlwind of competition is coming that could make the Chinese 5G powerhouse go the way of Bell Telephone.
Analysis | The Cybersecurity 202: Democrats push a bill to combat child pornography without undermining encryption (Washington Post) The bill includes $5 billion for more police and prosecutors.
States blast EAC for slow-walking voting standards (FCW) The approval process has been going on for years, and several state officials worry the security standards will already be obsolete when they're finally approved.
Cisco-Centripetal Virtual Patent Trial Opens With Few Glitches (Bloomberg Law) Computer experts laid the foundation for a high stakes case Wednesday between Cisco Systems Inc. and Centripetal Networks Inc. as their virtual patent trial opened after a few technical glitches.
Cisco Patent Trial Kicks Off Over Zoom Without A Hitch (Law360) A bench trial got underway Wednesday over Zoom due to the pandemic in a case where Cisco Systems is accused of infringing a startup's network security patents, starting with a technical tutorial that went smoothly even with the judge, attorneys and witnesses all participating remotely.
LabCorp Hit with Shareholder Lawsuit Over 2 Separate Data Breaches (HealthITSecurity) A LabCorp shareholder has filed a lawsuit against the testing giant in an effort to recoup share value losses incurred after two separate data breaches in less than a year.
For a complete running list of events, please visit the Event Tracker.
National Cyber League (NCL) Spring Season (Various locations, Mar 19 - May 15, 2020) The National Cyber League (NCL) is a defensive and offensive puzzle-based, capture-the-flag style cybersecurity competition. Its virtual training ground helps high school and college students prepare and test themselves against cybersecurity challenges that they will likely face in the workforce. All participants play the games simultaneously during Preseason, Individual Game and Team Game. NCL allows players of all levels to enter. Between easy, medium and hard challenges, students have multiple opportunities to really shine in areas as they excel. Registration for the Spring Season closes March 20, 2020.
think2020 (Online, May 4 - 7, 2020) The annual IBM business and technology conference. Acquire hands-on experience with the latest advancements in open technologies from hybrid multicloud to data and AI – then meet the luminaries who are using them to transform our lives. Think isn't a single conference for thousands of people. It's thousands of curated conferences in one.
THOTCON (Chicago, Illinois, USA, May 8 - 9, 2020) THOTCON is a hacking conference based in Chicago IL, USA. This is a non-profit, non-commercial event looking to provide the best conference possible on a limited budget. Once you attend a THOTCON event, you will have experienced one of the best information security conferences in the world combined with a uniquely casual and social experience. The conference will be held at a location only to be disclosed to attendees and speakers during the week before the event.
Practical steps on your zero trust journey. A CyberWire Pro Briefing by Rick Howard. (Online, May 18, 2020) The Zero Trust strategy assumes that your network is already compromised and compels you to design it to reduce the probability of material impact to your organization if you experience either a trusted insider attack or an invading outsider who has bypassed your security controls to attain the same status. In other words, trust nobody and only allow employees enough access to the organization's resources to get their jobs done, but nothing further. You may think that designing and building that type of network is 180 degrees away from what you have right now. You would be wrong. You can get a long way down the Zero Trust path by using the equipment you already own in your current architecture. The thing that has to change is people and process. This CyberWire Pro online briefing will discuss what Zero Trust is, how to think about it in terms of your own environments, and the practical steps you can take right now with equipment you already have that will move you along that journey. This will be a vendor-neutral briefing by the CyberWire's CSO and Chief Analyst, Rick Howard, which will also provide some history and context for those looking to implement Zero Trust solutions.
41st IEEE Symposium on Security and Privacy (SP2020) (San Francisco, California, USA, May 18 - 20, 2020) IEEE Symposium on Security and Privacy has been the premier forum for computer security research, presenting the latest developments and bringing together researchers and practitioners. We solicit previously unpublished papers offering novel research contributions in any aspect of security or privacy. Papers may present advances in the theory, design, implementation, analysis, verification, or empirical evaluation and measurement of secure systems.
