Marcus Schermann

Do your homework and gear-up first responders to the risks cited in your threat and vulnerability assessments. Hands-free communications and highly visible personal protective equipment are high on the list. Cultures of care take care to do these things well.

2

Three days: Putting the 𝗜𝗡𝗧 into 𝗢𝗦𝗜𝗡𝗧. In the next three days, I will have the pleasure of teaching 𝗢𝗽𝗲𝗻 𝗦𝗼𝘂𝗿𝗰𝗲 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 at a client in the beautiful city of Hamburg. ⚓ #OSINT became a trending topic a good while back. However, it is noticeable that many people who are on the 𝗿𝗲𝘀𝗲𝗮𝗿𝗰𝗵 𝘀𝗶𝗱𝗲 of OSINT have a 𝗱𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝘁 𝘂𝗻𝗱𝗲𝗿𝘀𝘁𝗮𝗻𝗱𝗶𝗻𝗴 of OSINT than 𝗮𝗻𝗮𝗹𝘆𝘀𝘁𝘀, especially all-source analysts. 👩‍💻 That's why I'm really looking forward to three days of 𝗿𝗲𝗮𝗹 𝗶𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 𝘁𝗿𝗮𝗶𝗻𝗶𝗻𝗴 with information that has been openly obtained. 🌐 So the question is: "𝗪𝗵𝗮𝘁 𝗱𝗼 𝗜 𝗱𝗼 𝘄𝗶𝘁𝗵 𝘁𝗵𝗲 𝗱𝗮𝘁𝗮 𝗮𝗻𝗱 𝗶𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝘁𝗵𝗮𝘁 𝗜 𝗵𝗮𝘃𝗲 𝗿𝗲𝘀𝗲𝗮𝗿𝗰𝗵𝗲𝗱?" 🤷‍♂️ Because often the challenge for authorities and companies lies 𝗻𝗼𝘁 𝗶𝗻 𝘁𝗵𝗲 𝗿𝗲𝘀𝗲𝗮𝗿𝗰𝗵, but in 𝗺𝗮𝗸𝗶𝗻𝗴 𝘀𝗲𝗻𝘀𝗲 of what is available or can be researched. This can be particularly challenging because the trend is to buy tools to collect more information rather than invest in the personnel who have to evaluate the additional data on top of the normal volume of information. 🌊 This raises the question: Only invested in technology and not in personnel? I'll keep you updated in the next few days and give you a 𝘀𝗻𝗲𝗮𝗸 𝗽𝗲𝗲𝗸 into my 𝗢𝗦𝗜𝗡𝗧 𝗰𝗼𝗺𝗽𝗮𝗰𝘁 𝘁𝗿𝗮𝗶𝗻𝗶𝗻𝗴, which could also be titled “OSINT for analysts”. 𝗦𝘁𝗮𝘆 𝘁𝘂𝗻𝗲𝗱! 😎 - Improving #Intelligence throught #training and #consulting! Follow for more insights on Intelligence or reach out directly. 📧

40

4 Kommentare

🚨 #DataBreach 🚨 On September 1, 2024, the German Air Traffic Control agency Deutsche Flugsicherung (DFS) reported a cyberattack that disrupted its office communications systems. Notably, the breach did not impact air traffic operations, and flights continued without interruption. The attack was detected the previous week, leading DFS to implement protective measures, though they withheld specific details about the impacted systems and the nature of the defensive actions taken. The incident has drawn significant attention due to the suspected involvement of APT-28, also known as Fancy Bear, a hacker group believed to be linked to the Russian military intelligence service GRU. This group has a history of cyber espionage targeting political entities, media outlets, and government agencies globally since 2004. The Federal Office for the Protection of the Constitution (BfV) in Germany attributed the attack to this group, although definitive verification is still pending. Following the incident, DFS notified national security authorities, and the Federal Ministry of Transport acknowledged the breach while deferring further comments to DFS. The ongoing investigation restricts the release of additional details to prevent compromising the inquiry or revealing defensive strategies. The attack underscores the persistent threat of cyberattacks on critical infrastructure in Germany and highlights the role of state-linked actors like APT-28 in such activities.

1

In the video series "Smart Forward" by Bochum Wirtschaftsentwicklung, Carsten Willems (CEO VMRay) says: "The proximity to Ruhr University is important for us, with its focus on IT security, the many well-educated students, and world-class cutting-edge research. This offers us numerous opportunities for collaboration." 🥰 Thanks for highlighting us in such a positive way! VMRay plays such an important role in Bochum's IT security ecosystem. 🧐 For those who don’t know: Carsten completed his PhD at Ruhr-Universität Bochum. Read the full story here: https://lnkd.in/eEUKSveM

4

The best online investigators are constantly staying up to date on current trends & topics. Discover different open-source intelligence books recommended by industry experts. Click to check out the list today in the Institute 📚 #OSINT #osintforgood #DFIR #OSMOSIS

28

The best online investigators are constantly staying up to date on current trends & topics. Discover different open-source intelligence books recommended by industry experts. Click to check out the list today in the Institute 📚 #OSINT #osintforgood #DFIR #OSMOSIS

24

4 Kommentare

Thank you very much for having me and giving me the opportunity to explain what #Humint can do also in #corporatesecurity! What a great podcast, welcoming host and amazing variety of intelligence practitioners, which discuss real world solutions for real world problems. If you are interested what #HumanIntelligence can do in Corporate Security for Penetration Testing, Social Engineering or Investigations, please get in touch and also listen to the #GreyDynamics podcast.

18

2 Kommentare

Shoutout to Germany again! Another experienced self-defence instructor is about to begin the SAFE Violence Prevention & Self Defence Certification. He's still deciding to proceed, even after speaking with me, lol! https://lnkd.in/d9AdA2Bd #selfdefense #selfdefence #certification #violenceprevention

1

🚨Every piece of information, no matter how small, can be crucial in bringing closure to families. This case is a poignant reminder of the unresolved stories that need our attention. Do you recognize this t-shirt? Let's help identify this woman and bring justice 🚨 #IdentifyMe #INTERPOL #INTETPOLGA #ForASaferWorld #INTERPOLqatar

25

1 Kommentar

The best online investigators are constantly staying up to date on current trends & topics. Discover different OSINT videos & tutorials recommended by industry experts. Click to check out the list today in the Institute 💻 #OSINT #osintforgood #DFIR #OSMOSIS

12

Cyberattack on German Air Traffic Control: APT 28 in the Crosshairs In today’s digital era, critical infrastructures ✈️ are increasingly under threat from sophisticated cyberattacks 💀 The recent incident targeting Germany’s 🇩🇪 air traffic control (DFS) is a stark reminder of this reality. While the attack, attributed to the infamous APT 28 group (also known as “Fancy 🐻 Bear”), fortunately did not disrupt air traffic, it did paralyze internal office communications, raising significant concerns. 📍 This incident underscores the persistent threats posed by advanced persistent threat (APT) groups like APT 28, which is believed to have strong ties to Russian 🇷🇺 military intelligence (GRU). Despite the robust operational systems of DFS, which remained unaffected, the breach 🔓 in office communication systems highlights vulnerabilities that must be addressed. At Aiuken Cybersecurity, we emphasize the importance of fortified cybersecurity strategies, especially for critical infrastructures. The ability to anticipate, detect, and respond to such sophisticated threats is crucial in safeguarding 🙌🏼 national and global security Our team 😉 is committed to helping organizations bolster their defenses against such persistent threats. Now more than ever, a proactive approach to cybersecurity is not just an option—it’s a necessity 👉🏻 Protect your company 👉🏻Train your staff #Cybersecurity #APT28 #FancyBear #CriticalInfrastructure #CyberDefense #AiukenCybersecurity

24

1 Kommentar

German air traffic control agency confirms cyberattack, says operations unaffected. Key takeaways: 1. The cyberattack on Deutsche Flugsicherung, Germany's air traffic control company, exposes potential vulnerabilities in critical infrastructure, with implications for national security and flight operations. 2. The potential involvement of APT28, linked to Russia's military intelligence service, adds an urgent geopolitical dimension, as it underlines the ongoing risk of state-backed cyber espionage. 3. While flight operations remained unaffected, successful access to the company's administrative IT infrastructure suggests the necessity for robust cyber defenses, and highlights the critical role of agencies like BSI in managing such attacks. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/epUqm6v7

6

Spyware, claiming the good, doing the bad? 🔎 First, what is Spyware?   Spyware, a double-edge sword, is malicious software installed on a smartphone or computer. It secretly gathers information like location, browsing habits, keystrokes, while also intercepting all communications (messages and calls). These data are transmitted to third parties, jeopardizing both privacy and security of the user. 🤔 Why use Spyware?   Marketed by companies as legitimate software for monitoring and surveillance, spyware is often advertised with slogans like 'We work to save lives and create a better, safer world’ or ‘Create Insights, Win the Digital Race’. However, the reality behind these claims seems to be quite different. 😶 Who uses Spyware?   Mostly governments. Officially, they use them for anti-terrorism or other similar consensual purposes. In practice, government can also misuse them to surveil their own citizens or target specific individuals including journalists, political activists, and opponents who can fall victims to spyware. ☝️ The Ethical Dilemma of spyware?   Spyware are products meant to be sold by companies developing them. How can they control the final usage of the software? Similarly to a weapon dealership who sells a weapon, not knowing if its product will be used to harm other human beings. Ultimately, it raises similar ethical questions. Want to know more? Fred Raynal delves into the prevention of spyware misuse. Read the full interview here:  https://lnkd.in/ePBPdBEG

11

1 Kommentar

Active Assailant Preparedness: Risks and Recommendation Get a first look at the results of ASIS’s 2024 Active Assailant Preparedness Survey, a comprehensive compilation of insights, practices, and experiences shared by over 700 security professionals. We’ll explore benchmarks, provide trend analysis, and discuss the practices, technologies, and policies that make a difference. A panel of industry experts will share insights and context to illuminate the data in applicable ways. Learning Objectives: Discover benchmarks and trends in how companies prepare for active assailant incidents. Learn the types of serious workplace violence incidents have experienced and prepare for. Gain insights into the policies, practices, and security systems that can aid active assailant preparedness. Moderator: Scott Briscoe Content Development Director ASIS International Thursday, August 22, 2024 11:00am EDT Sponsored By: Everbridge 1 CPE Nonmember Price: $0.00 Member Price: $0.00 #asisinternational #forasaferworld #securitymatters https://lnkd.in/gkFv-nQf

5

Suspected APT28 Cyberattack Targets German Air Traffic Control: What We Know So Far. Germany’s air traffic control authority, Deutsche Flugsicherung (DFS), has reportedly been targeted by a suspected cyberattack attributed to APT28, also known as Fancy Bear. The group, believed to be associated with Russian military intelligence (GRU), is known for its sophisticated cyber espionage campaigns targeting governmental, military, and infrastructure entities worldwide. This latest attack on Germany’s critical infrastructure underscores the increasing risk of state-sponsored cyberattacks on national security. https://lnkd.in/e3J75TMD

2

Systems Thinking for Sustainable Crime Prevention - Planning for Risky Places By Vania Ceccato, Andy Newton https://lnkd.in/eE573eK6. This book offers a comprehensive overview of areas with elevated levels of crime, which we consider ‘risky places.’ These can be facilities, nodes, or paths and can be found everywhere, from small towns to megacities. Crime and fear are examined from the perspective of those who use these places, based on examples from the US, the UK, Sweden, Nigeria, Brazil, China, Australia, and more. Advocating for a systems thinking approach, the book shows what can be learned from risky places and identifies ways to address their inherent problems. The book also assesses current barriers to applying systems thinking and identifies ways to foster interconnected long-term crime prevention strategies that meet the diverse needs of multiple stakeholders. Aimed at academics, students, and professionals in urban planning, criminology, geography, and related fields, this book is a vital resource for those dedicated to creating safer, more inclusive, and sustainable environments.

3

🚨 Terrorism Alert in Germany 🚨 #Hezbollah #DroneThreats A suspected member of the terrorist organization Hezbollah has been arrested by the #BKA on behalf of the Federal Prosecutor General. The individual is accused of procuring components to build military drones, which were intended to be exported to Lebanon for use in terrorist attacks on Israel. This alarming incident highlights the growing threat of non-state actors leveraging drone technology to carry out attacks. The implications for global security are profound and call for immediate attention and action. 🔍 Learn More: For an in-depth analysis of this evolving threat, check out our blog on The Rise of Non-State Drone Threats >>> https://lnkd.in/dRCyAUys Stay informed, stay vigilant. #Terrorism #NationalSecurity #DroneTechnology #CounterTerrorism #SecurityAlert #CUAS #Counterdrone

8