Most companies aren’t prepared to secure data and assets for a surge of remote employees. Whether your VPN is over capacity, new cloud services are coming on-board, or new devices need protection, we have you covered during this critical time. McAfee is offering 3-month subscriptions for Endpoint Protection, Unified Cloud Edge, and CASB to help you scale security to your remote employees. Learn more about these offers at mcafee.com/workfromhome.
For more, see our daily update on COVID-19 and the cybersecurity community.
The motivation behind attacks on European supercomputers, first discovered in an incident at the UK's ARCHER National Supercomputing Service, is now clearer: the attackers were cryptojacking, ZDNet reports. ARCHER has been updating its status regularly. Der Spiegel has reported attacks at six facilities in Germany. Last Thursday the Leibniz Supercomputing Centre of the Bavarian Academy of Sciences and Humanities also closed outside access to its systems. TU-Dresden took the same action for its Taurus system. On Saturday Switzerland disclosed a similar incident at CCSC. The European Grid Infrastructure (EGI) Computer Security Incident Response Team (CSIRT) confirmed that the intruders were seeking to use the supercomputers as cryptomining rigs.
Elexon, a middleman in the UK's electrical grid, continues to recover from the cyberattack it sustained last week. Industry Week, while noting that the incident did not compromise power distribution, argues that the attack should place infrastructure operators on alert.
Global Times reports that Beijing intends to place US tech companies on an "unreliable entity list" that would severely restrict their ability to do business in China, a "counterattack" in a new "tech Cold War" China claims the US started.
The REvil ransomware gang released documents they said offered a foretaste of President Trump's "dirty laundry" they'd obtained in a hack of a celebrity law firm, but as Forbes reports the emails amount to little.
US state agencies administering unemployment relief funds are experiencing a surge in COVID-19 fraud, the Washington Post reports. The New York Times faults weak identity verification systems.
Today's issue includes events affecting Australia, Belarus, China, European Union, Germany, Ireland, Japan, Moldova, Nigeria, Romania, Russia, Spain, Switzerland, Taiwan, Ukraine, United Kingdom, United States, and Vietnam.
What's the motivation for zero trust?
"The Snowden incident caused the NSA and many network defenders elsewhere to rethink their network designs. For the infosec community, it moved [John] Kindervag’s theoretical paper [on zero trust] from an interesting idea to a key design principle that we were all trying to adhere to. This was how we were going to build networks moving forward. And then, nothing significant happened. Most did not build them. It turns out that even though Kindervag’s thesis is brilliant, the practical “how-to” section is sparse."
—Rick Howard, CSO, Chief Analyst, and Senior Fellow, The CyberWire, in the CSO Perspectives podcast, "First principles: zero trust."
It's not just the insider threat, but the insider threat gives a sharp reason for considering zero trust.
Zero trust will also be the topic of a webinar this afternoon hosted by DreamPort: join here for more in a live CyberWire Pro Briefing with Rick Howard, running from 2:00 to 3:00 PM, Eastern Daylight Time.
Staying one step ahead of your adversaries is more challenging than ever. Fortunately, deception technology can give new visibility and intelligence in combating threat actors who seek to infiltrate your network.
Join our webinar on May 27 at 12pm EDT to learn how to optimize your deception technology investments to enhance your day-to-day security threat detection and mitigation activities.
In today's CyberWire Daily Podcast, out later this afternoon, we speak with our partners at Accenture, as Justin Harvey describes how companies are adjusting to the new remote working environment, and the impact that's having on their security posture. Our guest is Ehsan Foroughi with SecurityCompass on compliance issues.
In this week's episode of CSO Perspectives, "Cybersecurity first principles." the CyberWire's CSO Rick Howard continues his discussion of first principles with an account of zero trust, the next infosec building block.
