Shelley-Rose M.

Cyber Designations: OFAC has designated the following 5 individuals and entity for their connections to the Intellexa Consortium, a software development group alleged to develop and export surveillance tools to authoritarian regimes: Artemis Artemiou, the general manager and a board member of an Intellexa Consortium company; Felix Bitzios, the beneficial owner of an Intellexa Consortium company used to supply spyware to a foreign government; Andrea Nicola Constantino Hermes Gambazzi, the beneficial owner of 2 Intellexa Consortium members designated pursuant to Executive Order 13694; Merom Harpaz, a top executive of the Intellexa Consortium; Panagiota Karaoli, the director of multiple Intellexa Consortium entities; and Aliada Group, an entity based in the British Virgin Islands and member of the Intellexa Consortium, which enable transactions for the network.   Designations over Human Rights Abuses in Georgia: OFAC, alongside the Department of State, has also designated the following individuals: Zviad Kharazishvili, the Georgian Ministry of Internal Affairs Special Task Department Chief; Mileri Lagazauri, a deputy to Kharazishvili; Zurab Makharadze and Konstantine Morgoshia, the leaders of an allegedly violent extremist group. These 4 designations are made for alleged involvement in serious human rights abuses committed in response to peaceful protests in Georgia – Department of State press release. The DoS has also imposed visa restrictions on over 60 Georgian individuals and their families who are said to be undermining democracy in Georgia. #Sanctions #Russia #EUCommission #ExportControl #TradeWar #TSECS #SanctionsUpdate #TurkishSociety #Sanctions #USA #OFAC #BIS #TradeUpdates #GlobalTrade #TradeCompliance #InternationalRelations #EconomicSanctions #TradeRegulations #TurkishExports #TradePolicy #SecurityMatters #ForeignPolicy #ComplianceNews #EconomicSecurity #CrossBorderBusiness

1

Drawing upon a comprehensive survey of almost 400 corporate DFIR professionals, the fourth annual State of Enterprise #DFIR report examines the evolving contributions and experiences of DFIR professionals within corporate environments. Get it today: https://ow.ly/ENaK50RkeWH

16

New Report on Operational Resilience reveals 18% in Europe believe their regulators have provided enough support to help implement operational resilience in their firms. Full Report = https://lnkd.in/gDerfH5p     Bravo all to The BCI including Rachael Elliott for their great work on #CyberSecurity

1

We released joint guidance with the Federal Bureau of Investigation (FBI) on “Product Security Bad Practices,” part of the #SecurebyDesign initiative. The guidance outlines risky product security practices for software manufacturers, particularly those supporting critical infrastructure and national critical functions. The bad practices are organized into three categories: product properties, security features, and organizational processes and policies. The guidance also includes recommended actions and additional resources to help software manufacturers prioritize security throughout the product development process. The public comment period is now open through November 30. https://go.dhs.gov/UxS

119

4 Comments

R-MOR announces Sale of Advanced Maritime OSINT Platform to State-owned Agency in Eastern Europe [New York, NY] - [06/29/2024] - R-MOR, a global leader in Cyber Defense and Open-Source Intelligence (OSINT) solutions, proudly announces the sale of its state-of-the-art Maritime OSINT platform to a prominent State-owned agency in Eastern Europe. This strategic acquisition underscores the agency's commitment to enhancing maritime security and intelligence capabilities in the region. The Maritime OSINT platform implemented by R-MOR is renowned for its advanced features and AI driven analytical capabilities. It leverages a comprehensive suite of tools designed to gather, process, and analyze vast amounts of open-source data related to maritime activities. This platform will empower the State Intelligence agency to: Enhance Maritime Surveillance: Real-time tracking and monitoring of maritime vessels, enabling the detection of suspicious activities and potential security threats. Improve Situational Awareness: Comprehensive analysis of maritime data, providing actionable insights and a clearer operational picture. Support Decision-Making: Advanced data analytics and reporting tools to support strategic and tactical decision-making processes. Strengthen Collaborative Efforts: Facilitate information sharing and collaboration with other national and international maritime security agencies. "We are honored to partner with the State-owned agency in Eastern Europe," said Arik Alcalay, CEO of R-MOR.  "Our Maritime OSINT platform is designed to meet the critical demands of modern maritime operations, and we are confident it will significantly enhance their capabilities in safeguarding maritime interests and national security." The deployment of this platform aligns with the broader strategic objectives of the State-owned agency, focusing on leveraging cutting-edge technology to address evolving security challenges. By integrating R-MOR's Maritime OSINT platform, the agency is poised to strengthen its maritime domain awareness and operational readiness. R-MOR remains committed to delivering innovative Cyber Defense and OSINT solutions that empower commercial organizations and State-owned security agencies worldwide. This sale marks a significant milestone in our ongoing efforts to support maritime security and intelligence operations globally. About R-MOR R-MOR is a leading provider of Cyber Defense platforms and Open-Source Intelligence (OSINT) solutions, specializing in advanced AI driven Cyber algorithms, data analytics, surveillance, and AI platforms. With a global footprint and a commitment to innovation, R-MOR delivers cutting-edge technologies that empower organizations to achieve their security and protection objectives. For more information, please visit www.r-mor.com or contact R-MOR's CEO at: [email protected] +1 (212) 407 9245

9

1 Comment

How does open-source information differ from OSINT? Guidehouse's OSINT Director, Melisa Stivaletti, dives into it in a recent conversation with Eric B. from IT Audit Labs. Learn more about Guidehouse's defense and intelligence expertise: https://lnkd.in/e_NijQVh

35

Joint Statement from FBI and CISA on the People's Republic of China Targeting of Commercial Telecommunications Infrastructure November 13, 2024, FBI https://lnkd.in/eQ4zUz3x The U.S. government's continued investigation into the People's Republic of China (PRC) targeting of commercial telecommunications infrastructure has revealed a broad and significant cyber espionage campaign. Specifically, we have identified that PRC-affiliated actors have compromised networks at multiple telecommunications companies to enable the theft of customer call records data, the compromise of private communications of a limited number of individuals who are primarily involved in government or political activity, and the copying of certain information that was subject to U.S. law enforcement requests pursuant to court orders. We expect our understanding of these compromises to grow as the investigation continues.

14

From Health-ISAC's Daily Cyber Headline: https://lnkd.in/eF7DcD3Y Researchers identified a failed infiltration attempt by the Turla APT, which is a Russian threat actor group, while purportedly targeting an Albanian organization. The discovery underscores the escalating cyber warfare tactics employed by state-aligned actors amidst geopolitical tensions. To mitigate these threats, European organizations should prioritize #cybersecurity measures and foster international cooperation to counter sophisticated attacks. Heightened vigilance is crucial as the Turla APT group continues to refine its tactics. Health-ISAC Members are additionally advised to implement robust cybersecurity measures, including regular security audits and updates, to protect against potential breaches.

5

In a major development at the RSA Conference in San Francisco, the U.S. State Department unveiled the "United States' International Cyberspace and Digital Policy Strategy: Towards an Innovative, Secure, and Rights-Respecting Digital Future." This #combatingcybercrime #cybercapacitybuilding #cyberthreatresponse #datagovernance #digitalsolidarity #digitaltechnologyinnovation #globalcybercooperation #internationalcyberlaw #rightsrespectingdigitaluse #securedigitalecosystem

1

🗳️Voting Vanguards🗳️ ICYMI: CISA published a comprehensive "Guide to Operational Security for Election Officials," aiming to bolster the security of U.S. election infrastructure. 🛡️ The guide provides a detailed overview of operational security (OPSEC) measures within the electoral context, emphasizing the identification and protection of sensitive information that could be compromised by threat actors. This vulnerability can jeopardize the duties of election workers, expose voters' personally identifiable information, and grant unauthorized access to critical systems. 👩‍💼 To combat these risks, the guide suggests integrating OPSEC principles into daily election operations and cultivating a culture of security awareness among election staff. By understanding how adversaries might view sensitive data, election officials can more effectively assess and mitigate potential threats. CISA also supports election workers with training in secure practices, incident response planning, and de-escalation techniques, positioning this guide as a crucial tool to safeguard the integrity and transparency of elections. 👇 Click the link below to view and download a full copy of the guide for yourself and let us know in the comments your thoughts on election security and how we can address the vulnerabilities of tomorrow, today. #CISA #election #electionsecurity #cybersecurity #vote #votersecurity #electioninfrastructure #vulnerabilities #technology #riskmitigation #threatactors https://buff.ly/3xTmkpa

1

𝐁𝐑𝐄𝐀𝐊𝐈𝐍𝐆 𝐍𝐄𝐖𝐒 𝐅𝐑𝐎𝐌 𝐌𝐄𝐓𝐀🚨 💎 𝐌𝐞𝐭𝐚 has announced a significant initiative to make its 𝐨𝐩𝐞𝐧-𝐬𝐨𝐮𝐫𝐜𝐞 𝐋𝐥𝐚𝐦𝐚 𝐀𝐈 𝐦𝐨𝐝𝐞𝐥𝐬 available to U.S. government agencies, including those working on defense and national security applications. This move represents a major step in leveraging 𝐨𝐩𝐞𝐧-𝐬𝐨𝐮𝐫𝐜𝐞 𝐀𝐈 for national security and economic prosperity. 💫 In this evolving landscape, 𝐖𝐨𝐰𝐃𝐀𝐎 (https://wowdao.ai/) emerges as a significant player in the 𝐨𝐩𝐞𝐧-𝐬𝐨𝐮𝐫𝐜𝐞 𝐀𝐈 ecosystem. As the first 𝐝𝐞𝐜𝐞𝐧𝐭𝐫𝐚𝐥𝐢𝐳𝐞𝐝 𝐚𝐮𝐭𝐨𝐧𝐨𝐦𝐨𝐮𝐬 𝐨𝐫𝐠𝐚𝐧𝐢𝐳𝐚𝐭𝐢𝐨𝐧 for the open-source AI community, WowDAO is at the forefront of decentralizing AI development. Our platform's merit-based control and governance system ensures fair and efficient development of AI technologies. If you share our vision for transforming DAO governance, join our Discord now to help build our subDAO! 👉 𝐃𝐢𝐬𝐜𝐨𝐫𝐝: https://lnkd.in/gzCzeVgj 🌎 𝐖𝐞𝐛𝐬𝐢𝐭𝐞: https://wowdao.ai/ 𝐒𝐨𝐮𝐫𝐜𝐞: Meta #WowDAO #AI #Web3 #DAO #Blockchain #NFT #IPProtection #IPNFTs

11

The National Institute of Standards and Technology is seeking public feedback on a draft roadmap for implementing the U.S. government's National Standards Strategy for Critical and Emerging Technology. Read more: https://lnkd.in/efYrmPBY _____ #GovTech #GovernmentContracting

2

Rishabh Rakhecha, Director of Research Operations, explains in his latest blog why DFP shouldn’t function as a standalone solution for fraud prevention. It should be integrated with existing quality control programs within research firms and emerging technologies such as advanced facial recognition and behavioral analysis to build a reliable defense system against fraudulent activity. Read the Full Blog: https://bit.ly/3Swd01B #AI #MarketResearch #DigitalFingerPrint #GenerativeAI #FraudulentResponses #InsightswithBA #BorderlessAccess

35

1 Comment

Federal and military leaders are spotlighting national security risks from data broker practices. As the regulatory focus sharpens on data protections, new opportunities are surfacing for firms specializing in GovCon compliance, cybersecurity, and data protection. CRG’s SME-Based Opportunities, INTERIM Advice & Differentiators: Opp – Securing National Security Data Protections in GovCon Contracts: The CFPB's potential reclassification of data brokers under FCRA opens opportunities for firms to support federal agencies in securing sensitive data and meeting compliance standards. -         Advice: Embed FCRA compliance within robust data protection frameworks, especially targeting personal data safeguards for federal and military personnel. Build solutions aligned with domestic and foreign data handling protocols. -         Differentiator: CRG’s expertise in regulatory compliance for federal contracts ensures clients can meet new data protection standards. CRG positions clients to build credibility, win strategic contracts, and deliver comprehensive security. Opp – Enhancing Cybersecurity Measures for GovCon Contracts with National Security Data: With data risks on the rise, there's an urgent need for sophisticated cybersecurity in contracts involving sensitive national security information. -         Advice: Implement advanced cybersecurity frameworks that proactively secure classified and personal data. Use threat intelligence and analytics to fortify systems against both foreign and domestic threats. -         Differentiator: CRG enables clients to apply cutting-edge cyber solutions, reinforcing their position in national security-focused contracts. CRG’s support ensures clients can counter emerging threats while securing essential federal work. Opp – Aligning Federal Compliance with National Security in Data Management: The Biden administration’s recent EO on data access risks emphasizes aligning practices with national security needs, presenting a unique opportunity for firms in compliance. -         Advice: Build compliance protocols to meet DOJ and CFPB standards, focusing on preventing data access by high-risk nations. Adaptable solutions will ensure resilience to regulatory changes. -         Differentiator: CRG’s unmatched compliance expertise supports clients in leveraging regulatory shifts to strengthen data handling, positioning them competitively for sensitive GovCon contracts. Looking to secure and manage national security-focused contracts? Partner with CRG to enhance compliance and data protection for GovCon success. Reach out to our Dubai office to explore how we can support your growth. 👉 crgroupinc.com | [email protected] #CRG #DataManagement #NationalSecurity #DataProtection #GovCon #PII #CFPB #DataSecurity #BigData #FCRA #DataAccess #CyberSecurity #Cyber #Cloud #Hardware #Software

2

US sanctions two members of Russian ‘Cyber Army’ hacktivist group. Key takeaways: 1. The U.S. Treasury's sanctions on Russian hacker group CARR's leaders signify an ever-intensifying effort to crack down on cyber threats, overtly pointing out Russia's use of hacktivist outfits for state-sponsored cyber assaults. 2. The CARR's low-technical sophistication levels, exposed after causing just brief interferences in the U.S. and European critical infrastructure, underscores the importance of a robust cybersecurity system that can thwart unrefined attacks. 3. While no major damage was reported, the hackers' infiltration into SCADA systems points to a frightening potential for much more severe disruptions in industrial operations. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/erEbWkxa

1

Wet ink alert! The Office of the National Cyber Director, The White House's Harry Coker and Office of Management and Budget's Shalanda Young inked a memo today outlining the FY26 President's Budget Request #cybersecurity priorities. 🔏 https://lnkd.in/eQjSkEvr tldr; ⚓ #ZeroTrust ⚓ #CriticalInfrastructure cybersecurity ⚓ Raise baseline cybersecurity ⚓ #OpenSource Software Security #OSS ⚓ Strengthen the #CyberWorkforce (ATTN: Mark E Green MD) ⚓ Post-#Quantum Cryptography 🤓 ⚓ Memory Safe Program Language (#Rust) ⚓ Industrial & #OperationalTechnology cybersecurity (#OT)

8

CFIUS's latest Annual Report to Congress highlights an uptick in penalties and an increased use of enforcement tools relating to national security-focused transaction reviews. Through this report, public remarks by senior officials, private sector outreach, and significant recent uses of and proposed enhancements to its penalty authorities, CFIUS has signaled an enhanced focus on monitoring and enforcement efforts. Parties should consider these trends, and CFIUS's augmented statutory authorities and policy role, in connection with transaction risk assessments and deal planning. Click below to download our Alert, which provides a summary of the CFIUS annual report. Randi Lesnick Don McGahn Lindsey Nelson Grayson Yeargin #CFIUS #nationalsecurity #fdi

6

1 Comment