Wednesday, September 07, 2022

I worry about ‘proof of concept’ attacks. Who has similar security?

https://www.cpomagazine.com/cyber-security/devastating-ransomware-attacks-on-chile-montenegro-shut-down-government-agencies-banks/

Devastating Ransomware Attacks on Chile, Montenegro Shut Down Government Agencies, Banks

A set of ransomware attacks in Chile and Montenegro has caused substantial damage, shutting down banks and government agencies and even prompting a call to North Atlantic Treaty Organization (NATO) partners for emergency assistance.

Montenegro is dealing with a brutal ongoing campaign of ransomware attacks that appears to be coming from criminal groups in Russia and targeting government websites. A member of NATO since 2017, Montenegro has requested help from the United States in fending off these attacks. Government agencies in Chile have also been hit by a new form of ransomware that targets Linux servers, and at least one has been threatened with a “double extortion” dump of stolen information.



(Related) Quick attribution suggests a clumsy attack.

https://apnews.com/article/nato-technology-iran-middle-east-6be153b291f42bd549d5ecce5941c32a

Albania cuts diplomatic ties with Iran over July cyberattack

Albania cut diplomatic ties with Iran and expelled the country’s embassy staff over a major cyberattack nearly two months ago that was allegedly carried out by Tehran on Albanian government websites, the prime minister said Wednesday.

The move by Albania, a NATO country, was the first known case of a country cutting diplomatic relations over a cyberattack.





Seems strange that the bad guys think a school district has a budget for ransomware…

https://www.bespacific.com/los-angeles-school-district-warns-of-disruption-as-it-battles-ongoing-ransomware-attack/

Los Angeles school district warns of disruption as it battles ongoing ransomware attack

TechCrunch: “The Los Angeles Unified School District (LAUSD) has confirmed it was hit by a ransomware attack that is causing ongoing technical disruptions. LAUSD is the second largest school district in the U.S. after the New York City Department of Education. LAUSD serves more than 600,000 students spanning kindergarten through 12th grade at over 1,000 schools, and employs more than 26,000 teachers. The district said on Monday that it was hit by a cyberattack over the weekend, which it later confirmed was ransomware…”





Papers, Citizen!” Or in this case, “RFID card, student!” Will students be allowed on the bus if they forgot/lost their card?

https://www.thedenverchannel.com/news/local-news/cherry-creek-school-district-debuts-new-technology-for-students-on-school-buses

Cherry Creek School District debuts new technology for students on school buses

The Cherry Creek School District is rolling out a new program so parents can check to make sure their children [or their child’s RFID card Bob] made it to school safely.

As part of the new program, every single student in the district will be given a RFID card. That card will be scanned every single time students get on and off a school bus.





Is this an indication that other states might adopt similar laws?

https://apnews.com/article/technology-lawsuits-united-states-maine-data-privacy-9b2a40a18839c16df732368ee04ea856

Internet service providers drop challenge of privacy law

One of the strictest internet privacy laws in the United States has withstood a legal challenge, as a group of telecommunication providers has dropped its bid to overturn the Maine standard.

Maine created one of the toughest rules in the nation for internet service providers in 2020 when it began enforcing an “opt-in” web privacy standard. The law stops the service providers from using, disclosing, selling or providing access to customers’ personal information without permission.

Industry associations swiftly sued with a claim that the new law violated their First Amendment rights. A federal judge rejected that challenge, but legal wrangling continued.





Have I mentioned this already?

https://www.bakerdatacounsel.com/data-security/2022-dsir-report-deeper-dive-the-expanding-landscape-of-state-data-privacy-law/

2022 DSIR Report Deeper Dive: The Expanding Landscape of State Data Privacy Law

BakerHostetler’s Data Security Incident Response Report is a one-of-a-kind resource that leverages aggregated data from security incidents. Our Digital Risk Advisory and Cybersecurity team has shared insights from attorneys across the firm’s Digital Assets and Data Management Practice Group who work with clients on complex privacy and data protection matters. This article takes a closer look at recent updates to the privacy law compliance landscape in the United States.





Tools & Techniques.

https://www.makeuseof.com/techsmith-capture-how-to-screen-record-computer/

How to Record Your Computer Screen Using TechSmith Capture

TechSmith Capture is software that allows you to record your computer screen. It's simple to use, free to download, and offers many basic screen recording features.

You can record your microphone in the event that you want to do a voiceover. You can also record the system's audio or your webcam. If you choose to record your webcam, TechSmith will place your webcam's view in the bottom-right corner of the screen recording.

Once you have recorded your video, TechSmith will generate a link. You can use this link to share your video with others.



No comments: