Hope Frank

Need some #OSINT prompts to get you going with AI? I got ya covered. Keep your eyes out for a major AI for OSINT update webinar coming soon. https://lnkd.in/gVRGBuTt

30

1 Comment

🚨 North Korean Hackers Target Defense Sector 🚨 In a startling revelation, South Korean police have uncovered a significant hacking campaign orchestrated by North Korea, targeting up to 83 defense contractors and subcontractors. This campaign, executed by state-backed groups such as Lazarus, Kimsuky, and Andariel, successfully compromised sensitive defense information from 10 companies between October 2022 and July 2023. Key Takeaways: 👉 Sophisticated Attack Techniques: The attackers employed various methods, including exploiting email system vulnerabilities to download files without authentication and using poor password practices to hijack third-party IT maintenance accounts. 👉 Underestimation of Threats: Many targeted companies were completely unaware of the breaches until notified by law enforcement, highlighting the stealth and effectiveness of the attacks. #CyberSecurity #cti #opentonewconnections #cyberthreatintelligence #informationsecurity #NorthKorea #DefenseIndustry #CyberEspionage #InfoSec

5

Cal Cities is excited to partner with VC3! VC3’s municipal-focused cybersecurity and technology services will help cities respond to the growing cybersecurity threats facing local governments. 🔒💻 Learn more about the services on offer from VC3. https://lnkd.in/gJdGn8GE

15

1 Comment

WATCH: The Future of Government Cybersecurity: Anticipating and Mitigating Emerging Threats in 2024 via Industry Insider – California and Armis #cybersecurity #publicsector #government #govtech #technology https://lnkd.in/erh3eSqW

5

We are setting the standard and @Gartner agrees! "HyperSphere is the first and only solution to have a published NIST National Checklist hardening guide derived from NIST 800-53 rev5 and aligning to both FISMA and DoD IL4 baselines." 👉 https://lnkd.in/einirruU #Gartner #CyberCompliance #SecurityStandard

9

Live from #PlanetCyberSec: Roundtable: Navigating AI Security, Privacy, and Governance Challenges Brian Koref leads a discussion on the impact of generative models and large language models. https://lnkd.in/g5SwK9jc #PlanetCyberSec #CyberSecurity #infosec #AI #CISO #CIO #CISOForum #AIGovernance

12

Check out our most recent podcast with Semper Sec's Rob Carson, CISSP, CISA! Art Ocain and Rob are chatting about #BlackHat2024 and #DEFCON2024 in #LasVegas. Listen in for what they're looking forward to, their tricks, and food they recommend! #BSIDES2024 #BSIDESLasVegas #CybersecurityConference #LasVegasConference #BlackHatAndDEFCON #BlackHat #DEFCON

2

The China-backed threat actor known as Earth Baku has diversified its targeting footprint beyond the Indo-Pacific region to include Europe, the Middle East, and Africa starting in late 2022. Newly targeted countries as part of the activity include Italy, Germany, the U.A.E., and Qatar, with suspected attacks also detected in Georgia and Romania. Governments, media and communications, telecoms, technology, healthcare, and education are some of the sectors singled out as part of the intrusion set. "The group has updated its tools, tactics, and procedures (TTPs) in more recent campaigns, making use of public-facing applications such as IIS servers as entry points for attacks, after which they deploy sophisticated malware toolsets on the victim's environment," Trend Micro researchers Ted Lee and Theo Chen said in an analysis published last week. https://lnkd.in/g3Y6K5JS

2

Join us for an expert panel on cutting through the #AI hype in #cybersecurity 5/30 @ 2pm ET! boB Rudis, Daniel Grant + Ron discuss: ✅ Building effective AI ✅ Data requirements for success ✅ Top use cases transforming threat research

4

At Frenos, we believe in staying ahead of the curve when it comes to critical infrastructure cybersecurity. Our latest blog post, "The Vital Shift to Proactive Defense" is now live! 🔐 Dive deep into how AI-driven adversarial thinking and dynamic attack path analysis can revolutionize your cybersecurity strategy. 🌐✨ Don’t miss out on these key insights that can help your organization not just defend but proactively deter cyber threats. 📖 Read the full blog: https://lnkd.in/gqp4cYvB #CyberSecurity #AI #TechInnovation #FrenosPlatform #ProactiveDefense #CyberThreats

4

Permutations and slight variations in adversary behavior can make our detections increasingly brittle. 🚨 Director of Security Research Matt Hand explores how organizations can effectively dissect tradecraft to build more robust detections: https://hubs.la/Q02LjsG00 [P] #cybersecurity #detectionengineering #tradecraft

13

I am extensively quoted in Ray Fernandez's article on Technopedia.io, which describes a sophisticated new #NorthKorean #phishing campaign aimed at obtaining information related to #cryptocurrency and #cryptowallets on various types of popular mobile devices, and now expanding its reach beyond #SouthKorea and into countries like UK and the US. Moreover, the campaign uses its capabilities to obtain other forms of data stored on the cell phones for #espionage purposes. I explained why North Korea's increased reach should not be surprising, thanks to the fact that #DPRK #intelligence operates in various countries, not just at home, and moreover increasingly integrates its hacking and phishing operations with other countries. The Hermit Kingdom is becoming both more normalized and more dangerous. #scamps #Malware #cybersecurity #cyberwarfare #cybercrimes #infosec #Informationsecurity #datasecurity #dataprivacy #security #privacy #Android #iOS #intelligence #counterintelligence #sanctions #missiles #ballisticmissiles #Military #defense #Russia #China #Iran #nuclear #Nuclearweapons #Nuclearpower #nuclearenergy #foreignpolicy #foreignaffairs #diplomacy #geopolitics #Malaysia #Africa #malware #spyware #fraud #lawandorder #societyandculture

Non-profit organization MITRE announced Thursday that its Cyber Resiliency Engineering Framework (CREF) Navigator aligns with the United States Department of Defense (DoD) #Cybersecurity Maturity Model Certification (CMMC). The move will aid the defense industrial base (DIB) in structuring cyber resiliency strategies and enhancing #supplychain strength. The CREF Navigator aligns with NIST SP 800-171, the National Institute of Standards and Technology (NIST) publication designed to safeguard Controlled Unclassified Information (CUI), and the subset of NIST SP 800-172 that aligns with the proposed #CMMC Level 3 model which has 24 of the 34 security requirements that address more sophisticated #cybersecurity attacks. “Our national security depends on the security of our defense systems and the supply chains to enable that defense,” Wen Masters, vice president for cyber technologies at MITRE, said in a media statement. “All along the supply chain, you need accountability in following the appropriate security requirements to build a resilient system. Resilience in the face of a cyber-attack is not a quick fix. Resiliency must be engineered before an incident.” “To allow cyber engineers to customize the tool for their individual needs, we enhanced the #CREFNavigator so users can create their own scenarios and apply different parameters of threats and techniques,” said Shane Steiger, Esq., CISSP, principal cybersecurity engineer at MITRE. #Cyberresilience #Threatlandscape https://lnkd.in/gemDPC2h

46

The Evolving Role of AI in Cyber Defense: Navigating the Digital Battlefield https://lnkd.in/gqUH3vey Cristina Dolan #AICyberDefense #CyberSecurity #DigitalBattlefield #AIinSecurity #CyberDefenseStrategies

2

Researchers at Forescout Technologies Inc.‘s #VedereLabs discovered 90,000 unknown vulnerabilities and risk blind spots in standard vulnerability guidance. These vulnerabilities, not included in the Cybersecurity and Infrastructure Security Agency Known Exploited Vulnerabilities (KEV) catalog, pose potential risks that cyber adversaries could exploit. The analysis also revealed inconsistencies in scoring vulnerabilities across databases, a process typically conducted using CVSS scores within the CVE ecosystem. The data indicates that the most exploited #OT and #IoT devices include network attached storage (NAS) at 21 percent, IP cameras at 17 percent, building automation devices at 12 percent, and VoIP equipment at 11 percent. “Vulnerabilities are being found, weaponized, and exploited in the wild faster than ever before, with 97 0-days exploited in 2023 and already 27 this year,” Elisa Costante, vice president of research at Forescout Technologies Inc. Research – Vedere Labs, said in a media statement. “Current methodologies for cataloging issues such as MITRE’s Common Vulnerabilities and Exposures (CVE) system and NIST’s National Vulnerability Database (NVD) are critical tools but have significant limitations." https://lnkd.in/gKgVyBEx

11

Artificial intelligence has quickly grown from a potential risk to a real threat that hits many victims, said Robert Tripp, special agent in charge of the San Francisco Field Office of the FBI. FBI Special Agent Robert Tripp Details Impact of AI, Mitigation Strategies #fbi #financialservices #financialcrime #ai #artificialintelligence #mitigationstrategies #cybersecurity #breaches #incidents #riskmanagement #cyberrisk #governance #cyberpolicies #cybersecuritypolicies #cyberprogram #Buckler https://lnkd.in/ef-yv-DE

2

Today’s #FedCyberX partner panel with ServiceNow’s Principal Executive Architect and Field CTO, arunkumar (arun) iyer, and Tanium’s Col. Sam K. (Ret.) and Shawn Gallagher delved into how the two solutions providers are working together to enable the federal government to act with certainty, using their #CMDB as the BrainTrust for all IT and Security operations decisions. #TaniumPartnerAdvantage #bettergov #innovategov #SecOps #ITOps

48

1 Comment

#AI can be a “force multiplier” that brings unprecedented efficiency in the detection of anomalies and intrusions across hundreds, if not thousands, of endpoints that might be deployed in industrial environments, says DeNexus’ Jose M Seara in Security Boulevard article by Nathan Eddy. https://shorturl.at/tBwpp #OTcybersecurity #criticalinfrastructure #CISO #cyberrisk

4