James Cavanagh

𝑻𝒉𝒆 “𝒔𝒊𝒍𝒆𝒏𝒕 𝒕𝒉𝒓𝒆𝒂𝒕” 𝒐𝒇 𝒄𝒚𝒃𝒆𝒓 #𝒆𝒔𝒑𝒊𝒐𝒏𝒂𝒈𝒆 𝒊𝒏 𝒕𝒉𝒆 𝑵𝒆𝒕𝒉𝒆𝒓𝒍𝒂𝒏𝒅𝒔 Earlier this year, the discovery of COATHANGER malware in a Dutch military network shone a light on the growing threat of cyber espionage in the Netherlands. It has since been discovered that the campaign was far more widespread than initially thought, leading to the compromise of 14,000 devices around the world. Targets included Western governments, diplomatic institutions, and companies in the defense sector. The campaign is believed to have been orchestrated by a state-backed Chinese threat actor.  A recent article by TNW points out that despite the breadth and sophistication of espionage campaigns, it’s the topic of ransomware that continues to dominate the conversation in cybersecurity. This is because ransomware is easily identifiable and produces immediate effects, unlike espionage, which is far more subtle. During espionage campaigns, the priority is stealth. Threat actors take deliberate measures to obfuscate their activities and stay under the radar, making them difficult to detect. These campaigns may run for years before being discovered, if they are discovered at all.  Espionage also produces delayed effects, tricking our brains into thinking it is less of a threat than it is. The effects of espionage – loss of sensitive data, intellectual property, state secrets – compound over time, often going unnoticed until the damage is done. To guard against this, organizations whose threat landscapes highlight espionage as a risk should perform periodic assessments to check for breaches, as well as ensuring a proactive monitoring, detection, and response (MDR) solution is in place.  Want to learn more about cyber espionage in the Netherlands? Check our sector-specific threat landscapes, linked in the comments below.

30

2 commentaren

Join Anomali for an unmissable webinar: "Executing the Security Mission: 3 Grips, 2 Key Resources, 1 Copilot - Unleashing Elite Performance". 🛡️ 🗓️ Date: Wednesday, April 17th 🕘 Time: 9am PT | 12pm ET | 4pm GMT Featuring prominent speakers Steve Benton, VP of Threat Research (and former CSO of BT Group plc), and Matthew Sayar, Principal Product Manager of Anomali, this webinar is set to redefine your approach to cybersecurity. Discover the transformative concept of GRIP as we delve into its three foundational pillars: The Threat Landscape, Security Posture, and Actualized Threats. Learn how synthesizing these elements can bolster your security strategy, pushing you towards unparalleled achievements in defending against threats. Don't miss the opportunity to elevate your security mission to elite levels. Register now and transform the way you defend against threats: https://ow.ly/85s530sBBJn #CybersecurityWebinar #AnomaliEvent #SecurityMission #ElitePerformance #ThreatManagement

2

🚨 U.K. Hacker Linked to Notorious Scattered Spider Group Arrested in Spain 🇬🇧 🇪🇸 👇 Key Points About This Significant Arrest 👇 🇪🇸 A 22-year-old U.K. hacker, linked to the Scattered Spider group, was arrested in Palma de Mallorca, Spain, while attempting to board a flight to Italy. 🔐 The arrest is a joint effort by the FBI and Spanish Police, following the individual's involvement in high-profile ransomware attacks. 📲 The hacker, known as "Tyler," specialized in SIM swapping to gain control of victims' online accounts by intercepting messages and one-time passwords. 🌐 Scattered Spider, also known as 0ktapus or UNC3944, is notorious for social engineering attacks, ransomware, and data theft. 🛡️ The group has targeted over 100 organizations since May 2022, exploiting SaaS applications and leveraging advanced cyberattack techniques. 🧑‍💻 Their tactics include phishing, using cloud synchronization utilities, and targeting privileged access security solutions like CyberArk. This arrest underscores the importance of international cooperation in combating cybercrime and highlights the sophisticated methods employed by cybercriminal groups. 📍 The Hacker News

2

New report alert – EIC Scaling Club has released a new market roadmap for the Digital Security & Trust sector. As cyber threats continue to evolve and intensify, Europe is positioning itself as a key player in the digital security landscape. The new market roadmap highlights both the opportunities and challenges facing European companies in this critical sector. Key insights include: 1. Sales industries remain focused around B2B financial, professional, and logistic services, with an increasing interest in the public sector. 2. The B2B customer channel remains dominant, with a growing interest in tapping into indirect sales support in the future. 3. Major risks and challenges are seen in growing customers, securing investments, and maintaining competitive advantage. 4. Funding opportunities are diversified across VC/PE, public grants, project revenues, and debt funding. 5. And more. The report offers a snapshot of the stakeholder members vision and insights on the state of the Digital Security market in Europe and is designed to help professionals and entrepreneurs grasp meaningful insights to build their scaling strategy. To learn more about the methodology and participants, as well as deep dive into a trove of further market insights and details, view the report – link in the comments. A huge thank you to the authors and contributors, to name a few: Mikko-Jussi Suonenlahti Iva Tchetinova Nicolette Komitska Ada Jonuse Alexander J. Banz Anna Maj Daniel Kahn Ewa Chronowska François-Xavier Meyer Lajla Aganovic, CFA Lola Rebollo Revesado Mihai Sfintescu Nikki Foster Le-Grys Victoria Hernandez Valcarcel Juan Ignacio Gonzalez Katharina Frie Nuno Loureiro Hans Söhngen Ken Cassar Matthew Van Niekerk Carlos Alberto Silva Jean-Jacques de Dardel, Ph.D Remi Prunier Marco Riccardi Michal Tresner Georges Bossert Andreas Barthelmes Tiago Mendo Willi Mannheims Jeff McClelland #digitalsecurityandtrust #europe #entrepreneurship #EIC #EICScalingClub #marketreport #deeptech

30

1 commentaar

🌎 Since its inception, Fal.Con has taken place solely in the United States, attracting participants from around the globe. ⤵️ 🌍 After many successful years of growth, CrowdStrike is excited to be hosting the first-ever #FalConEurope, which will take place 6-7 November in Amsterdam! 🔗 Read all about the plans for Fal.Con Europe in our latest blog post: https://lnkd.in/dg29KkMT #CrowdStrike #Cybersecurity #CybersecurityEvents #FalConEurope

6

The August edition of the Data-Centric Advantage Newsletter is here! This month, we're tackling: ✅State-sponsored cyberattacks in the Middle East ✅Insights from the latest Gartner report on unstructured data ✅Seclore’s data-centric response to the NSA's most recent security guidance

3

Dive into Veracode's new blog where we explore the importance of targeted penetration tests for AI chatbots. As Roy Shoemake notes, 'Each threat-led penetration test shall cover several or all critical functions of a financial entity, and shall be performed on live production systems.' Discover how Veracode can help secure your AI technologies against emerging threats. #AISecurity #Cybersecurity #Veracode

3

Somehow, Volt Typhoon returned, more sophisticated and more determined than ever. Unlike attackers who vanish when discovered, this adversary digs in even deeper when exposed. According to the STRIKE Team, Volt Typhoon’s tactics are adaptive and multifaceted. They exploit legacy weaknesses in Cisco RV320/325 routers and Netgear ProSafe routers, devices long past their prime, using them as operational relay boxes. These end-of-life devices become perfect entry points, and in just 37 days, Volt Typhoon compromised 30% of visible Cisco RV320/325 routers. You can read more about Ryan Sherstobitoff's insights in this ITPro article written by Solomon Klappholz. #cybersecurity #datahacks #volttyphoon https://lnkd.in/evdecmGd

12

1 commentaar

Nice easy straightforward overview of NetSPI What we do How we do it Take a look and get in touch to start your journey to a Proactive Cyber Security mindset with NetSPI

3

Discover how ransomware attackers steal sensitive data and the top trends for 2024-2025 in this insightful interview with Martin Zugec, Technical Solutions Director at Bitdefender. Watch the full video on our blog: https://lnkd.in/dJ8tQCpP. #Bitdefender #trustedalways

1

How are you approaching #FedRAMP Rev 5? Chainguard's container images (base, application, & FIPS) are built for regulated environments, helping achieve or maintain ATO with: - FIPS-validated cryptography - STIG guidelines for Wolfi (coming soon!)🐺 - Automatic SBOMs, OCI Standard Images, and Sigstore-signed attestation🖋️ - Continuous vulnerability management with quick fixes for critical CVEs 🐙 Fast Track FedRAMP Compliance with Chainguard Images: https://lnkd.in/eF7R8WsC #containerization #opensource #FIPS #STIG #SBOM #vulnerabilitymanagement

55

9 commentaren

Diverse skill sets and perspectives are paramount in the security industry. With their distinctive experiences and attributes, female athletes emerge as prime candidates for roles in this dynamic field. Their athletic backgrounds instill discipline, resilience, and strategic problem-solving, which are crucial for influential security professionals. Read SecurityInfoWatch.com's spotlight with Rajant's Alice DiSanto and interview takeaways from #NCAA D1 female athletes and coaches from the University of Louisville. ➡ bit.ly/45XWtss #securityindustry #securitytechnology #RiSM #encryption

33

June Sentinel feature article: “The Threat Matrix Facing the Paris Olympics” by Petter Nesser and Wassim NASR “With wars raging in Ukraine and Gaza, and geopolitical tensions running high globally, the Paris Olympic Games face a concerning and complex threat picture. By far the biggest threat is jihadi terrorism, and specifically the Islamic State Khorasan group, which launched the deadliest Islamic State terrorist attack in Europe in Moscow in March and has already sought, through its signature cyber-coach approach to terrorism, to get individuals in France to carry out attacks targeting the Games. Far-right and far-left violent extremist groups also pose concern, as does the potential for protests on, for example, the war in Gaza to turn violent. The French are on high alert for malevolent activity from Russia amidst mounting examples of its links to violent far-right actors in Europe. It appears unlikely the Iran threat network will directly target the Games because Iran is participating in them and because Iran does not want a breakdown in its relations with Europe. But if the conflict between Israel and Hezbollah escalates significantly before and during the Games, an attack by the Lebanese terrorist group on Israeli interests cannot be ruled out given it has in the past targeted Israelis in Europe.” Access the article here: https://lnkd.in/eHpNeenj

18

Attention Security Pros! 🚨 Are you ready for DORA? The Digital Operational Resilience Act is set to revolutionize cybersecurity in the EU financial sector, and you need to be prepared. But no worries, we got your back! Why DORA matters? - It's a game changer for digital resilience in finance - Introduces unified ICT risk management across EU - Impacts banks, insurers, and even tech providers DORA isn't just another regulation - it's a comprehensive framework that will reshape how we approach cybersecurity in finance. 🔍 Want to dive deeper? Check our Cobalt's latest blog post for an in-depth analysis of DORA's impact, key requirements, and strategic implications. https://lnkd.in/eKJNJNtm 💡 Do you want to plan ahead and scope out what we have on offer? Let's talk! #DORA #CybersecurityInFinance #EURegulation #OperationalResilience

8

❗❗❗ Read below for the update from our team around the suspected TeamViewer breach.

5

#Cybersecurity starts and ends with people. It’s time we re-envision security awareness. Mimecast Engage takes a human-centric approach that allows security teams to take action based on real data, not training metrics. Ready to revolutionize security awareness? Check out this datasheet to read about the new features and unique benefits.

2