Elizabeth Houser

Southern California study finds high levels of airborne plasticizers

1

Did you know that #CBRNResponder has a YouTube channel with over 90 how-to videos?! Check it out to learn more about a specific feature or function of CBRNResponder: https://lnkd.in/gzya-5ps

7

R-MOR announces Sale of Advanced Maritime OSINT Platform to State-owned Agency in Eastern Europe [New York, NY] - [06/29/2024] - R-MOR, a global leader in Cyber Defense and Open-Source Intelligence (OSINT) solutions, proudly announces the sale of its state-of-the-art Maritime OSINT platform to a prominent State-owned agency in Eastern Europe. This strategic acquisition underscores the agency's commitment to enhancing maritime security and intelligence capabilities in the region. The Maritime OSINT platform implemented by R-MOR is renowned for its advanced features and AI driven analytical capabilities. It leverages a comprehensive suite of tools designed to gather, process, and analyze vast amounts of open-source data related to maritime activities. This platform will empower the State Intelligence agency to: Enhance Maritime Surveillance: Real-time tracking and monitoring of maritime vessels, enabling the detection of suspicious activities and potential security threats. Improve Situational Awareness: Comprehensive analysis of maritime data, providing actionable insights and a clearer operational picture. Support Decision-Making: Advanced data analytics and reporting tools to support strategic and tactical decision-making processes. Strengthen Collaborative Efforts: Facilitate information sharing and collaboration with other national and international maritime security agencies. "We are honored to partner with the State-owned agency in Eastern Europe," said Arik Alcalay, CEO of R-MOR.  "Our Maritime OSINT platform is designed to meet the critical demands of modern maritime operations, and we are confident it will significantly enhance their capabilities in safeguarding maritime interests and national security." The deployment of this platform aligns with the broader strategic objectives of the State-owned agency, focusing on leveraging cutting-edge technology to address evolving security challenges. By integrating R-MOR's Maritime OSINT platform, the agency is poised to strengthen its maritime domain awareness and operational readiness. R-MOR remains committed to delivering innovative Cyber Defense and OSINT solutions that empower commercial organizations and State-owned security agencies worldwide. This sale marks a significant milestone in our ongoing efforts to support maritime security and intelligence operations globally. About R-MOR R-MOR is a leading provider of Cyber Defense platforms and Open-Source Intelligence (OSINT) solutions, specializing in advanced AI driven Cyber algorithms, data analytics, surveillance, and AI platforms. With a global footprint and a commitment to innovation, R-MOR delivers cutting-edge technologies that empower organizations to achieve their security and protection objectives. For more information, please visit www.r-mor.com or contact R-MOR's CEO at: [email protected] +1 (212) 407 9245

9

1 Comment

In Sekurokon 2024 breakout session ‘Breaching Corporate Facilities: Redacted Stories of Physical Intrusions’, #Sekuro Offensive Security Consultant Craig Dutton and Managing Consultant Steven Knight delve into real-world physical intrusion tactics used in corporate environments. Through redacted examples from Sekuro’s own physical intrusion engagements, Craig and Steven break down the TTPs – tactics, techniques, and procedures that attackers use to target corporate infrastructure. Revealing the impact of commonly exploited vulnerabilities, the speakers will also recommend actionable security practices to strengthen an organisation's physical security. Expect practical takeaways and success stories that can help safeguard your infrastructure. Join us for this exciting breakout session and explore many more at Sekurokon: www.sekuro.io/sekurokon #WeAreSekuro #TrustTomorrow #InfoSec #CyberSecurity #OffSec #PhysicalSecurity #VulnerabilityManagement #VulnerabilityAssessment

13

1 Comment

This post has nothing to do with breakdancing...and everything to do with clickbait. 🥁 Announcing New Blog: Investigating Spam and Clickbait Networks on Social Media! 🥁 In preparation for the Australian OSINT Symposium Training Day on September 10th. 📅, Jemma Ward, one OSINT Combine's senior training team, has just published a must-read blog! In her blog, Jemma delves into the murky world of spam networks on Facebook, revealing how these seemingly innocuous pages are being used to generate revenue, manipulate audiences, and spread harmful narratives. She also uncovers how AI-generated content is playing a crucial role in expanding the reach of these disinformation campaigns. Whether you're an OSINT professional or just curious about how disinformation spreads online, this blog is packed with valuable insights and practical tradecraft tips. 🔍 Read the full blog here: https://lnkd.in/e6dJxQpB 🎟 If you'd like to learn more from Jemma and OSINT Combine's other trainers at the Virtual Training Day, purchase your ticket here: https://lnkd.in/eAz-sn3K Photo Credit: X/Twitter #OSINT #Disinformation #AI #breakdancingbreaksinternet #Clickbait #SpamNetworks #AOS2024 #learn #opensourceintelligence #OSINTcommunity #RayGun

30

4 Comments

The latest #OSINT Tool Tuesday tutorial was added to the Email Resources for OSINT page. ⚡️ Learn how to use Zen for OSINT investigations https://lnkd.in/gstJGe7Y

24

Come join us at my upcoming 2-Day OSINT Trainings in San Francisco, July 18-19, 2024, and Ocala, FL, August 15-16, 2024. The training is completely hands-on, interactive, and terrific for both public and private sectors. This training is a thought process to teach you how to open your mind and do your work more efficiently and expeditiously. This course was originally created for the Federal Government. It is now available to both public and private sectors of all industries in open registrations and closed private trainings. OSINT is ever changing while A.I. and the dark web are important factors. You will learn new search techniques, tools, resources, and platforms. We can bring this training to your company / agency tailoring it to your needs. For more details and registration, go to https://lnkd.in/gdGGBV6 #osint #cybersecurity #lawenforcement #financialfraud #aml #financialcrime #executiveprotection #protectiveintelligence #artificialintelligence #AI #darkweb #redteam #physicalsecurity

9

"OSCs must retain artifacts used as evidence for the assessment for the duration of the validity period of the certificate of assessment, and at minimum, for six years from the date of certification assessment as addressed in 32 CFR 170.17(c)(4). The OSC is responsible for compiling relevant artifacts as evidence and having knowledgeable personnel available during the assessment. The organizational artifacts are proprietary to the OSC and will not be retained by the assessment team unless expressly permitted by the OSC. To preserve the integrity of the artifacts reviewed, the OSC creates a hash of assessment evidence (to include a list of the artifact names, the return values of the hashing algorithm, and the hashing algorithm used) and retains the artifact information for six years. The information obtained from the artifacts is an information collection and is provided to the C3PAO for uploading into the CMMC instantiation of eMASS." The above text is from the DoD's June 21, 2024 submission to the Federal Register. It describes the expected information collection level-of-effort for a CMMC Level 2 assessment. Some more information: The DoD expects evidence collection and archival, assessment planning and results, C3PAO records about their assessment staff, and submission of data into CMMC eMASS to take 525 hours on average, per assessed company. This is just the effort related to paperwork. It doesn't cover the time spent interviewing or demonstrating the system. It doesn't cover the time preparing. Bottom line? The DoD seems 𝒅𝒆𝒕𝒆𝒓𝒎𝒊𝒏𝒆𝒅 to get their defense contractors cyber-secure, no matter the cost. They are treating this as seriously as the defenses for our key military and government installations, and looking at a timeline of just a few years to get our manufacturing and military support base resilient to cyber-attack. If you're ready to start working seriously on NIST SP 800-171 and #CMMC compliance, or want to get scheduled for your certification assessment, give my team at Kieri Solutions - Authorized C3PAO a call. We specialize in helping companies become compliant without outsourcing their control of IT to a third party. Read more about the DoD's submission below: https://lnkd.in/eTFi9dVK

51

47 Comments

Our recent case study “Strengthening Security Through Trusted Access Penetration Testing in Light of North Korean Espionage Efforts” highlights how an impersonation incident led to significant security challenges for an organization, serving as a harsh reminder that internal vulnerabilities are just as dangerous as external threats. By reviewing this case study, organizations can gain insights into the evolving threat landscape and implement proactive measures to protect sensitive data. Check it out today.   #DepthSecurity #KnowBe4 #SecurityBreach #RemoteWork #TrustedAccess #CyberDefense

2

NSA Joins FBI and Others to Warn of North Korea Cyber Espionage Campaign July 25, 2024, NSA/CSS https://lnkd.in/gYfP3MK2 FORT MEADE, Md. – The National Security Agency (NSA) joins the Federal Bureau of Investigation (FBI) and others in releasing the joint Cybersecurity Advisory (CSA), “North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs.” The CSA includes detection methods and mitigation measures to help counter the malicious activity. This CSA details cyber espionage activity of the Democratic People’s Republic of Korea (DPRK) Reconnaissance General Bureau (RGB) 3rd Bureau. The group primarily targets defense, aerospace, nuclear, and engineering entities to obtain sensitive and classified technical information and intellectual property to advance the regime’s military and nuclear programs and ambitions. The authoring agencies assess this group poses an ongoing threat to various industry sectors worldwide, including, but not limited to, entities in the United States, South Korea, Japan, and India. The group funds their espionage activity through ransomware operations against U.S. healthcare entities. North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs:https://lnkd.in/dupQ2uBD

26

Excellent work here. The indictment offers good insight into the LockBit operation from law enforcement's perspective. https://lnkd.in/gy9AcPFW

35

In this week’s Silobreaker's Intelligence Report, learn more about: • Threat actor dubbed TIDRONE targeting military and satellite industries in Taiwan • Threat actor Earth Preta using new techniques and malware in attacks against Southeast Asian governments • The New Veaty and Spearal backdoors linked to Iran being used in attacks against the Iraqi government Sign up and read the full report here: https://hubs.ly/Q02PG0_M0 #IntelligenceReport #Cyber #Silobreaker #ThreatLandscape

1

"A comprehensive guide authored by Dean Parsons, SANS Certified Instructor and CEO / Principal Consultant of ICS Defense Force, emphasizes the growing need for specialized ICS security measures in the face of rising cyber threats." #criticalinfrastructure #ICS #cybersecurity

3

This Cybersecurity and Infrastructure Security Agency guide offers actionable steps to combat the evolving tactics of foreign malign influence operations. More resources available here: https://lnkd.in/ebM9fqFn #security #nationalsecurity #homelandsecurity #infrastructure #criticalinfrastructure #CI #resource #research #resources #highthreat #threat #threats #cybersecurity #cyber #electionsecurity

6

⚡️Some domains likely used by #transparentTribe #APT36 counciling[.]com nbssedelhi[.]org ashifdigitalseva[.]xyz birthdeath[.]in gov-certificate[.]com viewss[.]click admin-mcas-df[.]ms admin-mcas[.]ms mcas-df[.]ms mcas[.]ms verifycertificate[.]info nimsme[.]org

1

1 Comment

U.S. Cyber Command wants to increase the complexity of simulations and actors within its premier training platform, integrating more multidomain scenarios into practice as malicious cyber activity grows more sophisticated and cybersecurity becomes more ingrained in military planning. https://lnkd.in/grW5fG6G

1