Thursday, August 19, 2021

Don’t say yes without thinking like a hacker…

https://www.cpomagazine.com/cyber-security/is-your-business-prepared-to-stop-a-ransomware-attack/

Is Your Business Prepared to Stop a Ransomware Attack?

Ransomware has become so prevalent that no industry is immune, including public sector organizations such as school districts and police forces. When cybercriminals are actively targeting the police, it’s pretty clear just how widespread the problem is.

So, why is ransomware so prevalent, other than the fact that it’s obviously making a lot of cybercriminals rich? For starters, it’s not just individual actors committing crimes. We’re now seeing well-organized syndicates and state actors getting into the mix. In some ways, ransomware has become an actual cottage industry of sorts.

Secondly, the nature of the workplace has changed so much in the pandemic era that it’s left businesses extremely vulnerable:



(Related) Another shift in method.

https://www.cpomagazine.com/cyber-security/accenture-downplays-the-lockbit-ransomware-attack-that-reportedly-encrypted-2500-computers-leaking-6-terabytes-of-data/

Accenture Downplays the LockBit Ransomware Attack That Reportedly Encrypted 2,500 Computers, Leaking 6 Terabytes of Data

The group was also actively recruiting corporate insiders to facilitate its ransomware attacks in exchange for millions of dollars. The ransomware gang also sought partners to provide Remote Desktop Protocol (RDP) and Virtual Private Network (VPN) exploits for initial access and Cobalt Strike and Metasploit for threat emulation.





Perhaps another salary increase?

https://www.csoonline.com/article/3629460/7-key-data-points-on-the-cybersecurity-skills-shortage.html#tk.rss_all

7 key data points on the cybersecurity skills shortage

I am proud to say that the annual Life and Times of Cybersecurity Professionals report from ESG and ISSA is now available for free download.

As part of the research for this report, we always ask cybersecurity professionals several questions about the global cybersecurity skills shortage. Is it real? Are things improving or getting worse? Is your organization impacted and, if so, how?





Of course, we’ll only use it for background checks…

https://www.bespacific.com/background-check-agency-wants-a-social-media-search-tool/

Background Check Agency Wants a Social Media Search Tool

Nextgov: “The Defense Counterintelligence and Security Agency wants a tool to automatically cull social media and other public websites to create a searchable database of posts, actions and interactions that can be used in insider threat investigations. Along with conducting background investigations for all of government, DCSA also manages the insider threat program for the Defense Department. The DOD Threat Management and Analysis Center, or DITMAC, “provides an enterprisewide capability to identify, assess, and mitigate risk from insiders; to oversee and manage unauthorized disclosures; and to integrate, manage, mature, and professionalize insider-threat capabilities… The tool must meet seven specific criteria to be considered…”



(Related) Connection?

https://www.bespacific.com/amateur-investigators-provide-evidence-identifying-jan-6-rioters/

Amateur Investigators Provide Evidence Identifying Jan 6 Rioters

NPR: “As rioters made their way through the U.S. Capitol on Jan. 6, many of them livestreamed their actions and posted photos and videos on social media. That steady stream of content created an enormous record of evidence that law enforcement needed to sift through to build cases against the accused. Now, more than 575 federal criminal complaints have been filed, and a striking pattern has emerged: Time and time again, the FBI is relying on crowdsourced tips from an ad hoc community of amateur investigators sifting through that pile of content for clues. These informal communities go by a number of names: Some go by the moniker Sedition Hunters. Others call themselves Deep State Dogs. Together, they amount to hundreds of people who since Jan. 6 have dedicated themselves to helping law enforcement track down suspects. Their cumulative work represents what is likely the largest spontaneous, open source information collection and analysis effort ever conducted by volunteers to assist law enforcement. Sedition Hunters are mentioned by name in at least 13 cases, other complaints reference specific social media handles of volunteers, and still more refer to evidence voluntarily submitted by tipsters — many of whom do not seem to know the accused — citing information on public platforms such as Facebook, Twitter, YouTube or Parler…”





Perspective.

https://www.pewresearch.org/fact-tank/2021/08/18/more-americans-now-say-government-should-take-steps-to-restrict-false-information-online-than-in-2018/

More Americans now say government should take steps to restrict false information online than in 2018

Amid rising concerns over misinformation online – including surrounding the COVID-19 pandemic, especially vaccines – Americans are now a bit more open to the idea of the U.S. government taking steps to restrict false information online. And a majority of the public continues to favor technology companies taking such action, according to a new Pew Research Center survey.

Roughly half of U.S. adults (48%) now say the government should take steps to restrict false information, even if it means losing some freedom to access and publish content, according to the survey of 11,178 adults conducted July 26-Aug. 8, 2021.

… When it comes to whether technology companies should take steps to address misinformation online, more are in agreement. A majority of adults (59%) continue to say technology companies should take steps to restrict misinformation online, even if it puts some restrictions on Americans’ ability to access and publish content.





Tools & Techniques.

https://www.makeuseof.com/transfer-files-to-kindle-via-email/

How to Quickly Transfer Files to Your Kindle via Email

… If you have a document that you want to read through your Kindle but don’t know how to send it to your device, you can send it through email. You’re likely to receive your document in an instant or after a few minutes. However, Amazon said that it could take up to 60 days to deliver your document.



No comments: