Martin Loeffler

New Cyber Daily Report Blog Post!   Title: Securing Modern Digitized Supply Chains Author: Windhya Rankothge, Research Associate at the Canadian Institute for Cybersecurity Link: https://lnkd.in/gNB5SU5P   @cyber_reports #SupplyChainSecurity #CyberSecurity #DigitalSupplyChain #CyberThreats #DataProtection #SupplyChainManagement #ENISA #CyberResilience #SecureSupplyChains

23

1 Comment

At least 20 Canadian government networks have been compromised by Chinese state-sponsored threat actors, who have maintained access over the past four years to steal valuable data. The Canadian Centre for Cyber Security (Cyber Centre) confirmed the compromises in its National Cyber Threat Assessment 2025-2026. Alongside rising state-sponsored attacks by China, Russia, Iran and North Korea, the report identified India as an emerging cyber-threat to Canada.

1

Dig into #ThreatandAttackSimulation with this substantive two-part blog on Active Directory Certificate Service vulnerabilities and potential attacks. In this hands-on learning experience, Senior Security Consultants Brian Mitchell and Eugene Mar guide you through lab building, vulnerability testing, remediation and more. Read Part 1: https://okt.to/HWt2y4 Read Part 2: https://okt.to/8rgXto #cybersecurity #penetrationtesting

14

Toronto school board reports ransomware attack on test environment. Why it matters: 1. This ransomware attack on the Toronto District School Board's test environment signals another increasing risk in cybersecurity, with hackers now targeting school systems, besides traditional targets like companies and municipal institutions. 2. While no immediate impact has been seen on the TDSB's official systems, the attack highlights the critical importance of robust cybersecurity protocols, especially in separate testing environments, as they can also become targets of cyber attacks. 3. This incident underscores the need for continuous vigilance and cooperation with cybercrime agencies. Notifying authorities and experts, as seen with the TDSB, aids in managing the situation, identifying threats, and informing affected individuals in due time if their information was compromised. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/eNB7qfUg

1

Canada Warns of Chinese Cyber Threat Targeting Critical Systems The Canadian Centre for Cyber Security has issued a warning about increased scanning of Canadian IT systems by Chinese state-sponsored hackers. The activity, targeting various sectors including government, critical infrastructure, and media, signals potential vulnerabilities. While no breaches have been confirmed, this reconnaissance could be a precursor to more aggressive cyber actions. The Cyber Centre advises isolation of critical infrastructure, enhanced network monitoring, multi-factor authentication, offline backups, and updated incident response plans as preventive measures. This alert highlights the urgency of strengthening Canada’s cybersecurity to safeguard against foreign threats, particularly in sectors critical to national stability and security. Read More: https://lnkd.in/dc_Dd-qk #CyberSecurity #Canada #ChineseHackers #CriticalInfrastructure #CyberThreat #NationalSecurity #CyberAlert #DataProtection #ITSecurity #StateSponsoredAttack #CanadaCyberAwareness

1

🚨 Hot Off the Press! 🚨 The DOJ and CISA have just released a Notice of Proposed Rulemaking (NPRM) and Proposed Security Requirements for Restricted Transactions, each implementing Executive Order 14117. These new rules aim to regulate the processing of certain personal data and will impact various sectors. 🔒 Key Highlights: 🗺 Data Restrictions: The proposed rules will limit the transfer of personal data—such as protected health information, financial data, government employee data, biometrics, and bulk data (over 100,000 individuals)—to specific countries. 🗺 Ownership Matters: Restrictions apply to entities more than 50% owned by citizens (both real and corporate) of these countries. It won't be enough to just avoid doing business in a given country. 💡 Why It Matters💡 If you’re building apps or solutions that process personal data for over 10,000 individuals or any government employees, brace yourself for mandatory technical controls and restrictions on outsourcing development and operations. Original Sources: https://lnkd.in/drJ3wgKq https://lnkd.in/dR-iVzzc Stay informed and prepared to adapt your strategies! #DataPrivacy #Cybersecurity #ExecutiveOrder #DOJ #CISA #Compliance #TechDevelopment

1

Selecting the right cybersecurity certification can feel like navigating a labyrinth, especially when deciding between the Certified Information Systems Security Professional (CISSP) and the GIAC Certified Incident Handler (GCIH). Both certifications are well-regarded in the industry, but they serve different purposes and career paths. Are you more interested in the broad, managerial aspects of cybersecurity, or do you want to dive deep into incident handling and response? This article will break down the essentials of CISSP vs. GCIH, helping you make an informed decision that aligns with your career goals. Whether you're aiming for a management role or a hands-on technical position, we've got you covered. Read the full article here ➡️ https://buff.ly/4bgQtfJ

2

Hello Neo, enter the cyberverse and check out our blog post below to learn about #CyberCrime in #Canada! https://lnkd.in/g_GMyrxj #CollettReadLLP #CriminalLaw #CriminalLawyers #Hackers #Hacking #CyberSecurity

4

https://lnkd.in/gYiaG8bU Very nice article on global cyberfraud. Should #acfe consider cyber investigation as a dedicated section in the CFE certification process?

1

CVE-2024-24919: Check Point Software Security Gateway Info Disclosure On May 28, 2024, #CheckPoint published an advisory for CVE-2024-24919, a high-severity information disclosure vulnerability affecting Check Point Security Gateway devices configured with either the “#IPSec #VPN” or “#Mobile #Access” software blade. On May 29, 2024, security firm mnemonic published a blog reporting that they have observed in-the-wild exploitation of CVE-2024-24919 since April 30, 2024, with threat actors leveraging the vulnerability to enumerate and extract password hashes for all local accounts, including accounts used to connect to Active Directory. They’ve also observed adversaries moving laterally and extracting the “ntds.dit” file from compromised customers' Active Directory servers, within hours of an initial attack against a vulnerable Check Point Gateway. On May 30, 2024, watchTowr published technical details of CVE-2024-24919 including a PoC. The vulnerability allows an unauthenticated remote attacker to read the contents of an arbitrary file located on the affected appliance. For example, this allows an attacker to read the appliances /etc/shadow file, disclosing the password hashes for local accounts. The attacker is not limited to reading this file and may read other files that contain sensitive information. An attacker may be able to crack the password hashes for these local accounts, and if the Security Gateway allows password only authentication, the attacker may use the cracked passwords to authenticate. Mitigation Guidance Rapid7 on Presale1️⃣ Blog: https://lnkd.in/e3ZX8VhC

5

1 Comment

Known Exploited Vulnerabilities Remain Unmitigated Past Deadlines: - Critical severity KEVS took nearly 4.5 months (137 median days) - High severity vulnerabilities take more than 9 months (238 median days) - Medium severity vulnerabilities take nearly 1.5 years (517 median days) https://lnkd.in/g_RExD96

1

Happening tomorrow at 6 PM EST! Whether you are a developer or a security engineer, come learn common injection vulnerabilities in APIs. 💉 Details in the main post.

3