Automated News - Automator Solutions’ Post

"The way we frame and define these issues profoundly influences how we understand and respond to them. Our perceptions of threats, cyber or otherwise, shape the strategies and resources allocated to combat them." Interesting piece on the dangers of a myopic focus on worst case scenarios. https://lnkd.in/esbHahqw

All too often I come across situations where organisations fail to grasp that using technology has a downside as well as an upside. Few organisations truly appreciated how technology usage expands the attack surface open to attack by adversaries. Get in contact to discuss our cyber & information security services. #burohappoldcybersecurity #burohappoldsecurity #burohappoldasvisory

I’ve read many books, but this one changed my life: (And it’s not cliche) → Sandworm by Andy Greenberg And here's why: Since Stuxnet, I was fascinated with ICS/OT cyber security. I did all I could to try to learn more about the field. It took me a while to realize that the field didn't really exist then. But as the years went by, I soaked up whatever I could. I had learned a lot about ICS/OT cyber security. And understood the WHY of it. Why it is important to protect ICS/OT environments. Why it is important to protect critical infrastructure. But Sandworm helped me understand the big picture even more clearly. Helped me understand years before the lessons played out on the news today. 1. Stuxnet Was Just the Beginning With Stuxnet, other countries saw the US and Israel target Iran with a cyber weapon. And what was the repercussion? Nothing. Other countries realized that there was currently, and still are, no repercussions for cyber-attacks. Those other countries also saw the technical marvel of Stuxnet. They knew they needed to step up their game. 2. Private Citizens Can Be Caught in the Crossfire of Nation-states When NotPetya hit, the unsuspecting general public initially fell into chaos. Critical infrastructure was impacted. -> Trains weren't running -> The ATMs weren't working -> Couldn't buy groceries at the store -> Hospitals were redirecting ambulances -> The largest shipping company in the world was down 3. We Can't Ignore the Geopolitical Landscape as Cyber Defenders I used to never care about WHO was doing the attacking. I loved hearing attribution stories. Hearing about the cyber spy game. But at the same time, from being a defender. I didn't care who you were or what you wanted. I just wanted you off the network and to stop you from coming back. In today's world, we can't just ignore who is doing the attacking. We can't ignore that piece of the big puzzle. Even if I still just want you off the network. No matter who you are. 4. Militaries Will Combine Cyber with Physical Attacks Sandworm was written before the current Russian invasion of Ukraine. The book spent significant time to highlight the long standing history between the two countries. Not only with Russia using the Ukraine to test its ICS/OT cyber weapons. But going back to the Holodomor in the early 1930s. Where the Russians killed 5 million Ukrainians through starvation. Fast forward to today, we see the Russian military coordinating cyber and physical strikes against the Ukraine. Something we will see all militaries come to do over time. How do we prepare as private citizens? Especially those of us entrusted with protecting critical infrastructure? I've read the book three times. I still learn something new each time. If you are interested in ICS/OT cyber or work in the field... You MUST read this book. P.S. What is your MUST read book? #CyberSecurity #Engineering #OTSecurity #Technology

Writing in The Post this week, CyberCX's Dan Richardson says that against a backdrop of technological change and worsening cyber threats, a new cyber security strategy in New Zealand is an important opportunity for the Government to set out how the country will tackle the challenges of its digitally disrupted future.   "Recognising that the threat landscape is shifting, our major allies and trading partners – the United States, the United Kingdom, and Australia – have all launched ambitious and comprehensive cyber security strategies in the past two years," writes Dan.   "Should the New Zealand strategy look toward 2030, like Australia and the UK, there are five primary objectives to focus on over that timeframe: protecting critical infrastructure, fighting scams, bolstering the South Pacific, hardening government systems, and deepening collaboration between government and industry."   You can read the full opinion piece here: https://lnkd.in/d4y586g8

Why did the computer go to therapy? Because it had too many bytes from phishing attacks! 🐟💻 Washington Post says - “In their development of offensive cyber mass, the scale of their respective operational experience, their proven reach on cyber espionage and the clarity of their political direction and doctrinal thinking, China and Russia probably surpass all other states except the U.S.,” the report states While the US is still the world leader in Cyber, many other countries are bolstering their offensive prowess. You can read more here. https://lnkd.in/dp8BHTw

🎯According to U.S. officials, a Chinese hacker group known as “Salt Typhoon” has infiltrated the networks of at least three major U.S. telecommunications providers in a significant cybersecurity breach. This audacious espionage operation is believed to be aimed at uncovering the Chinese targets of American surveillance. The Federal Bureau of Investigation (FBI), U.S. intelligence agencies, and the Department of Homeland Security are currently investigating the breach, which remains in its early stages. 🔔 Stay connected for industry’s latest content – Follow Dr. Anil Lamba, CISSP #linkedin #teamamex #JPMorganChase #cybersecurity #technologycontrols #infosec #informationsecurity #GenAi #linkedintopvoices #cybersecurityawareness #innovation #techindustry #cyber #birminghamtech #cybersecurity #fintech #careerintech #handsworth #communitysupport #womenintech #technology #security #cloud #infosec #riskassessment #informationsecurity #auditmanagement #informationprotection #securityaudit #cyberrisks #cybersecurity #security #cloudsecurity #trends #grc #leadership #socialmedia #digitization #cyberrisk #education #Hacking #privacy #datasecurity #passwordmanagement #identitytheft #phishingemails #holidayseason #bankfraud #personalinformation #creditfraud

We often think of Cyberwarfare in terms of the 1983 movie WarGames. It's a geeky situation with the right combination of drama, a love story, and a bit of computer. Yet, state-sponsored hacking and ransomware attacks can disrupt governments and civilian lives. We could see the results during the initial Russian attacks on Ukraine when governmental and corporate services went down. Likewise, the Iranian attacks on US water supplies should show us that we are not immune to being pulled into these conflicts. Consequently, business leaders must adapt their stand and include the topic in their cyber risk management plans. Join me in discovering how we got into this situation and why Cyberwarfare will soon be part of our everyday lives. #cybersecurity #cyberwarfare https://lnkd.in/grrcfPPx

Chinese cyber agency accused of 'false and baseless' claims about US interfering in Volt Typhoon research. Key takeaways: 1. The U.S.-based ThreatMon is contesting claims by China's National Computer Virus Emergency Response Center (CVERC) that the company altered a report on an alleged blackmailing gang under U.S. influence, underscoring the tensions between China and the U.S. in cybersecurity narratives. 2. The dispute emphasizes how cybersecurity research, crucial for tracking and understanding threats, can be manipulated for broader geopolitical powerplays. The CVERC is accused of employing such methods to deflect blame for attacks on Western infrastructure. 3. If cybersecurity firms' findings can be skewed in this manner, it could erode trust in their judgments, potentially hampering international coordination in the face of evolving cyber threats. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/ddgvBsqi

🔏 STORY TIME🔏 In the 1970s, computers were vaults-appropriately secured physically, with security as simple as a locked door. As technology advanced, so did the threats. The next year, in 1988, the first major attack on the Internet was by something called the Morris Worm, an experiment that went badly wrong and became the first such attack in this new form of war. By the 1990s, the internet had entered a sea of change, as did the cybercriminals. By the year 2000, there came a virus called ILOVEYOU, posing in the garb of a love letter. It sent the whole world into tizzy and proved that even things as harmless as an email can be more dangerous. Fast track to 2010, a year whereby the Stuxnet worm showed us that these kinds of cyber-attacks could bring nations low and welcomed us to the era of digital warfare. Today, ransomware attacks like Colonial Pipeline make us remember that cybersecurity in this hyper-connected world is not about protection of data; it's protection of the way of life. The cybersecurity story is one that is never-ending, a cat-and-mouse game that never really stops evolving. And in the digital world, the only predictability is to stay one step ahead.

Are USBs fetch again? Major APTs from Russia, China, and beyond are once again turning to USBs to compromise highly guarded government organizations and critical infrastructure facilities. Dark Reading reports on this cybersecurity trend from #CPX2024: https://lnkd.in/eEHM3R8g