Indicators of Compromise (noun)

12 hours ago

Indicators of Compromise (noun)

Digital evidence that a system or network has been breached.

Word Notes

Indicators of Compromise (noun)

12 hours ago

Indicators of Compromise (noun)

Digital evidence that a system or network has been breached.

Word Notes

Cybersecurity News

1 hour ago

CISA issued BOD 23-01. LAUSD ransomware update. Trends in API protection and SaaS security. Notes on a hybrid war.

CISA issued Binding Operational Directive 23-01. LAUSD says ransomware operators missed most sensitive PII. API protection report describes malicious transactions. Analysis of cyber risk in relation to SaaS applications. Review: Russian cyber operations have achieved nuisance-level effects. Reports of dissident hacktivism in Russia.

Daily Briefing

2 hours ago

API protection report describes malicious transactions.

Cequence Security finds a problem with "shadow APIs."

Story

2 hours ago

Ukraine at D+122: Ukraine's counteroffensive continues.

Russia begins to portray itself as the outgunned, overmatched underdog in its war against Ukraine, gamely fighting against the odds. Nuisance-level cyber operations continue on both sides as Ukraine's counteroffensive continues.

Story

3 hours ago

Analysis of cyber risk in relation to SaaS applications.

Varonis released a report highlighting the cyber risk associated with SaaS applications.

Story

10 hours ago

Cyber Resiliency with Sounil Yu

Sounil Yu, Chief Information Security Officer and Head of Research at JupiterOne, joins Ann on this week's episode of Afternoon Cyber Tea. Ann and Sounil discuss the importance and evolution of cyber resilience and what organizations can do today to build resilience for the future. Sounil is a security innovator with over 30 years of experience creating, breaking, and fixing computer and network systems. He is the creator of the Cyber Defense Matrix and the DIE Resiliency Framework, teaches security as an Adjunct Professor, co-chairs Art into Science: A Conference on Defense, and advises many startups.

Afternoon Cyber Tea

13 hours ago

Open Source Intelligence (OSINT): The Data We Leak

Over the past few years, there's been a lot of talk about the value of understanding Open Source Intelligence (OSINT). But, even with so much talk, relatively few cybersecurity professionals have had the time to take a deep dive into the topic. In this episode, Perry sits down with social engineer, OSINT investigator, and member of the OSINT Curious project, Christina Lekati to get an overview of the value of OSINT as well as some basic techniques. After that, we hear from Chris Kirsch (co-founder and CEO of runZero). Chris is a former black badge winner at DEF CON's social engineering competition and served as a judge in the most recent competition. He recently released an interesting report analyzing the top OSINT sources and vishing (voice phishing via phone) pretexts from that competition.

8th Layer Insights

19 hours ago

Microsoft Exchange zero-days exploited. Supply chain attack reported. New Lazarus activity. Mexican government falls victim to hacktivism. Hacking partial mobilization. Former insider threat.

Two Microsoft Exchange zero-days exploited in the wild. A supply chain attack, possibly from Chinese intelligence services. There’s new Lazarus activity: bring-your-own-vulnerable-driver. The Mexican government falls victim to apparent hacktivism. Flying under partial mobilization’s radar. Betsy Carmelite from Booz Allen Hamilton talks about addressing the cyber workforce skills gap. Our guest Rachel Tobac from SocialProof Security brings a musical approach to security awareness training. How’s your off-boarding program working out?

CyberWire Daily

20 hours ago

Signals & Space: DART's success. Another Artemis delay. Kinetic and cyber threats to space systems. Space situational awareness. Space Force culture.

DART's success and the future of planetary protection. Storms continue to postpone Artemis flight test. The possibility of kinetic attacks against satellites. Cyber threats to space systems. Space situational awareness and traffic management. Space Force roles and missions: satellite communication. General Raymond's valediction. Space Force and the challenges of building a service culture.

Signals and Space

21 hours ago

EU bill holds AI developers accountable. Australian government reacts to Optus breach. US Senator calls for more data breach intel.

New EU bill holds AI developers accountable. Australian government reacts to Optus breach. US Senator calls on federal government to share more data breach intel.

Policy

21 hours ago

Illinois medical group settles data breach. Luxury Hong Kong hotel chain breached. Ransomware gang dumps LA school district data.

Illinois medical group settles data breach. Luxury Hong Kong hotel chain breached. Ransomware gang dumps LA school district data.

Privacy

Oct 3, 2022

Microsoft Exchange Server 0-days. Hacktivism, cyberespionage, and supply chain attacks. Notes on hybrid war.

Microsoft Exchange Server zero-days exploited in the wild. Apparent hacktivism against the Mexican government. Lazarus Group's BYOVD spearphishing campaign. Customer service software supply chain attack. Underground markets offer to help Russians avoid mobilization. MI5 website sustains brief DDoS attack.

Daily Briefing

Oct 3, 2022

Supply chain attack, possibly from Chinese intelligence services.

It’s unclear how widespread the effects will be, but the choice to compromise customer service software seems significant.

Story

Load More