Errol Weiss

⚡️Some domains likely used by #transparentTribe #APT36 counciling[.]com nbssedelhi[.]org ashifdigitalseva[.]xyz birthdeath[.]in gov-certificate[.]com viewss[.]click admin-mcas-df[.]ms admin-mcas[.]ms mcas-df[.]ms mcas[.]ms verifycertificate[.]info nimsme[.]org

1

1 Comment

Known Exploited Vulnerabilities Remain Unmitigated Past Deadlines: - Critical severity KEVS took nearly 4.5 months (137 median days) - High severity vulnerabilities take more than 9 months (238 median days) - Medium severity vulnerabilities take nearly 1.5 years (517 median days) https://lnkd.in/g_RExD96

1

🗞️ In CyberScoop: "[T]he years of work to build up federal collaboration with industry are paying off, from the Joint Cyber Defense Collaborative to the National Risk Management Center — the 'proto' version of the JCDC, [Chris Krebs] said — to the National Security Agency’s Cybersecurity Collaboration Center. "'We’re starting to see that these things work with the resources and time into it, but it’s generating results and there’s no better evidence of the results, I think, than when Russia invaded Ukraine, and the ‘Shields Up’ campaign and the breadth to which that was able to change behavior in industry,' said Krebs, now chief intelligence and public policy officer at SentinelOne." To learn more, read the full article by Tim Starks: https://s1.ai/CS-Collab

42

This week's podcast, CIRCIA Rulemaking: Double Incident Reporting for the DIB. Defense contractors have had cyber incident reporting obligations under DFARS clause 252.204-7012 for many years. Recently, however, CISA issued a 457-page proposed rule implementing the 2022 Cyber Incident Reporting for Critical Infrastructure Act. Unless CISA and DoD can reach an agreement, DIB contractors will have duplicative incident reporting obligations for two different agencies. Links to watch/listen are in the comments ⬇ #DIB #DOD #cyber

14

2 Comments

Just in - CISA publishes Encrypted DNS Implementation Guidance for Federal Agencies to enhance cybersecurity and protect sensitive data. Stay ahead of the curve with this important resource: https://lnkd.in/eMeN-uxt #cybersecurity #CISA #encryptedDNS

2

This Cybersecurity and Infrastructure Security Agency guide offers actionable steps to combat the evolving tactics of foreign malign influence operations. More resources available here: https://lnkd.in/ebM9fqFn #security #nationalsecurity #homelandsecurity #infrastructure #criticalinfrastructure #CI #resource #research #resources #highthreat #threat #threats #cybersecurity #cyber #electionsecurity

6

Jill Martucci, CISA, SSCP, Director of GRC, Advisory Services for Avalon Cyber dives into the "Govern" function in the National Institute of Standards and Technology (NIST) Version 2.0 of the Cybersecurity Framework. "While there are multiple enhancements in CSF 2.0, the “Govern” function is the change that may have the largest impact, as this function should help organizations and compliance teams map and meet various laws and regulations while managing their cyber programs." Learn more in Jill's latest blog post: https://hubs.li/Q02Ll22z0 #TeamAvalon #AvalonCyber #NIST2.0 #compliance #cybersecurity #riskmanagement #cyber #governance

14

🚨 Hot Off the Press! 🚨 The DOJ and CISA have just released a Notice of Proposed Rulemaking (NPRM) and Proposed Security Requirements for Restricted Transactions, each implementing Executive Order 14117. These new rules aim to regulate the processing of certain personal data and will impact various sectors. 🔒 Key Highlights: 🗺 Data Restrictions: The proposed rules will limit the transfer of personal data—such as protected health information, financial data, government employee data, biometrics, and bulk data (over 100,000 individuals)—to specific countries. 🗺 Ownership Matters: Restrictions apply to entities more than 50% owned by citizens (both real and corporate) of these countries. It won't be enough to just avoid doing business in a given country. 💡 Why It Matters💡 If you’re building apps or solutions that process personal data for over 10,000 individuals or any government employees, brace yourself for mandatory technical controls and restrictions on outsourcing development and operations. Original Sources: https://lnkd.in/drJ3wgKq https://lnkd.in/dR-iVzzc Stay informed and prepared to adapt your strategies! #DataPrivacy #Cybersecurity #ExecutiveOrder #DOJ #CISA #Compliance #TechDevelopment

1

"The authoring organizations urge HPH Sector and all critical infrastructure organizations to apply the recommendations in the Mitigations section of this CSA to reduce the likelihood of compromise from Black Basta and other ransomware attacks." https://lnkd.in/guHsqxJa #BlackBasta #RaaS #Cybersecurity #CriticalInfrastructure #industrialcyber #icssecurity #ics

1

Indicted pair of foreign nationals were behind swatting attack on CISA director. Key takeaways: 1. The alarming "swatting" attack against CISA Director Jen Easterly underscores the vulnerability of high-level cybersecurity officials and the overall risk to the U.S. security establishment. 2. The extensive three-year campaign carried out by the two alleged perpetrators, targeting roughly 100 individuals, highlights the transnational nature of cybercrime and the challenges of tracking and prosecuting offenders across borders. 3. Swatting represents a critical threat, as this form of harassment not only wastes critical police resources, but also poses real dangers to people's lives and causes significant psychological trauma, emphasizing the urgent need for a comprehensive response strategy. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/dz628Pba

2

Selecting a security advisor requires rigorous due diligence. This CISOPlatform blog post details critical factors to consider, including verification of certifications, experience, and conflict-of-interest assessments to mitigate risk.  Read more: https://lnkd.in/gPqifT6v By: Anton Chuvakin (Security Advisor, Google Cloud) #cybersecurity #securityadvisor #riskmanagement #duediligence

13

5 Comments

Drawing upon a comprehensive survey of almost 400 corporate DFIR professionals, the fourth annual State of Enterprise #DFIR report examines the evolving contributions and experiences of DFIR professionals within corporate environments. Get it today: https://ow.ly/ENaK50RkeWH

16

Today, CISA and the Federal Bureau of Investigation (FBI) published a Secure by Design Alert, "Eliminating Cross-Site Scripting Vulnerabilities." The alert urges software manufacturers to design and develop software that reasonably protects their customers against malicious cyber actors exploiting this common and dangerous class of product defect. CISA and the FBI encourage manufacturers to learn how to protect their products from falling victim to cross-site scripting exploits by reviewing and implementing actions in this alert. During National Coding Week, let’s push for a secure-by-design approach to stop cross-site scripting vulnerabilities at the source. https://go.dhs.gov/Uob

234

1 Comment

Happy National Coding Week! This important alert by the CISA and FBI can provide you with some valuable information on how to safeguard your customers against XSS. A must read!

1

Federal Cybersecurity Pros 🇺🇸🛡️  Join this webinar to learn about the latest advancements in securing identity management for federal agencies. Date: July 24th  Time: 9 am PT / 12 pm ET Register today 👉 https://lnkd.in/gr7mJMpZ #infosec #cybersecurity Bassam A. Steve Butsch Yubico

13