Start your day with intelligence. Get The OODA Daily Pulse.

Home > OODA Analysis and Briefs

Analysis

  • Nice Try (NSA critique) (Update)

    One of the better attempts to critique the NSA’s efforts today in the NY Times: If the program is along the lines described by USA Today — with the security agency receiving complete lists of who called whom from each of the phone companies — the object is probably to collect data and draw a…

  • Now THIS Creeps Me Out

    So the other day I tried to use my credit card to buy something, and it was denied even though I knew perfectly well my credit card was just fine. So I called my credit-card company to find out what was up with all this, and it turned out I had made the unpardonable mistake…

  • Spies in the Shower

    From InfoWorld: I don’t want to alarm you, but a reader just sent me evidence showing that a large and secretive organization is tracking some surprising information about us. No, not the National Security Agency. We’re talking about a really secretive organization: Proctor & Gamble. The sender hits the nail on the head: “My privacy…

  • BOHICA

    Personal data, including Social Security numbers of 26.5 million U.S. veterans, was stolen from a Veterans Affairs employee this month after he took the information home without authorization, the department said Monday. The INFOSEC practitioner in me wants to beat some GS-half-wit @$$ . . . the ex-GI in me lowering my trousers and spreading…

  • Of Privacy and Security

    Most of the critics of IC activities fall into one of two camps (with some cross-pollination). The first are almost not worth discussing since the main thrust of their arguments center on the words “Bush” and “lied” and it gets no more robust than that. The second camp likes to play tricks with the language…

  • WWDD?

    Over the last several years we have been fortunate enough to not have been subjected to another September 11th-scale attack. Further more, we have not had the misfortune of suffering anything on a smaller scale like the attacks in London or Madrid. There are a number of potential reasons why we are able live in…

  • Mid-Hearing Assessment of Hayden Confirmation (Update)

    No way I can blog this full-time, but am catching bits and pieces on the radio. Some good, hard questions, very good and solid answers. I am particularly fond of the statement reference the “80-90” people briefed at the start of the terrorism surveillance project; NOT a small cabal of untouchables a’la Graham and crew…

  • Not Serious XIII

    The Homeland Security Department has not yet submitted a strategic plan to Congress on how it intends to improve border security and immigration enforcement, prompting House appropriators to cut funding in the department’s fiscal 2007 budget. I don’t want to be seen as piling-on given the report from Hugh Hewitt on the disconnect between the…

  • Curiouser and curiouser (Update)

    Qwest says they flat-out didn’t oblige NSA’s request for phone records. Bell South and Verizon are now saying “We Never!” That leaves AT&T holding the bag, but probably not for long. So are the phone companies lying? Only if there is an elaborate agreement in place to have each org cover the @ss of the…

  • Flash traffic for all cell members

    Usama says: “don’t forget to opt out of the surveillance program.”

  • Brilliant

    A senior federal law enforcement official tells ABC News the government is tracking the phone numbers we call in an effort to root out confidential sources. Human intelligence (traditional “spying”) is in part successful because people have a sense of trust that the guy (intelligence officer) who is talking you (impending traitor) into doing something…

  • Telephone Man

    (The retooled, recycled version of the earlier post mentioned. Periodical option fell through so baby goes shoeless this month 😉 ) After General Michael Hayden was nominated by President Bush for the directorship of the Central Intelligence Agency, it took mere days for stories about alleged illegalities perpetrated during his tenure at the National Security…

  • Achtung!

    For all the screaming mimis . . . this is how it works in a REAL police state.

  • Imagine That (NSA Revelations)

    From ABC: Americans by nearly a 2-1 ratio call the surveillance of telephone records an acceptable way for the federal government to investigate possible terrorist threats, expressing broad unconcern even if their own calling patterns are scrutinized. Lending support to the administration’s defense of its anti-terrorism intelligence efforts, 63 percent in this ABC News/Washington Post…

  • NSA Expose

    Scary piece on NSA’s supposed evils in USA Today this morning. Will have a more thorough treatment up later today, but in the mean time, allow me to do my bit for the environment and recycle another post that should provide some insights and balance out the hype. Moring coverage from Michelle Malkin, Strata-Sphere, OTB,…

Briefs

  • Haiti vigilante push ‘symptomatic’ of state’s failures: Advocates

    In Haiti, a grassroots vigilante movement called “Bwa Kale” has emerged as citizens take matters into their own hands to combat gang violence. Suspected gang members have been chased, beaten, decapitated, and burned alive by the vigilantes, resulting in a decrease in kidnappings, killings, and other forms of violence. However, human rights groups emphasize that…

  • Ben Roberts-Smith: Top Australian soldier loses war crimes defamation case

    Australia’s decorated soldier Ben Roberts-Smith has lost a defamation case against three newspapers that accused him of war crimes in Afghanistan. The judge ruled that four of the six murder allegations were substantially true, including kicking a farmer off a cliff and shooting a captured Taliban fighter multiple times. While two murder allegations and reports…

  • NATO is in a race against time to save itself from a major embarrassment

    NATO is racing against time to avoid the embarrassment of Sweden missing its deadline for admission to the alliance. Turkey, a strategically important NATO member, is blocking Sweden’s accession due to concerns about Sweden’s perceived support for Kurdish terror groups and alleged complicity in anti-Turkish protests. Missing the deadline could send a dangerous message to…

  • Xi Jinping tells China’s national security chiefs to prepare for ‘worst case’ scenarios

    Chinese leader Xi Jinping has called on national security officials to prepare for worst-case scenarios and be ready to face challenges. Xi emphasized the increased complexity and difficulty of national security issues and urged a focus on making the national security system more effective. China has been expanding its concept of national security, covering various…

  • Zyxel Customers Urged to Patch Exploited Bug

    Zyxel networking device users are being urged to update their firewalls and VPNs due to active exploitation of a vulnerability (CVE-2023-28771) that enables remote code execution. The flaw affects Zyxel’s ATP, USG Flex, VPN, and ZyWall/USG products and allows attackers to execute OS commands remotely. The vulnerability is being widely exploited to compromise devices and…

  • HMRC in New Tax Credits Scam Warning

    The UK’s tax office, HM Revenue and Customs (HMRC), has warned customers claiming tax credits about new scams targeting their personal and financial information. Fraudsters are using tactics such as posing as HMRC officials and creating a sense of urgency to trick claimants into giving money or sensitive data. Scams may involve phishing emails or…

  • Chrome 114 Released With 18 Security Fixes

    Google has released Chrome 114 with 18 security fixes, including 13 vulnerabilities reported by external researchers. Among these, eight are rated as ‘high’ severity, with the most significant being an out-of-bounds write issue in Swiftshader (CVE-2023-2929), which earned a $15,000 bug bounty for the researcher. Other high-severity flaws include a use-after-free bug in Extensions (CVE-2023-2930)…

  • Amazon Settles Ring Customer Spying Complaint

    Amazon has agreed to pay $30.8 million to settle privacy complaints related to its Ring home security cameras and Alexa smart speakers. The Federal Trade Commission accused Ring of failing to implement sufficient security measures, leading to privacy violations such as employees spying on female customers. The settlement requires Ring to delete unlawfully accessed data…

  • The Future Of Generative AI Beyond ChatGPT

    Generative tools like ChatGPT and Stable Diffusion have got everyone talking about artificial intelligence (AI) – but where is it headed next? It’s already clear that this exciting technology will have a big impact on the way we live and work. UK energy provider Octopus Energy has said that 44% of its customer service emails are…

  • ChatGPT’s Riskiness Splits Biden Administration on EU’s AI Rules

    Biden administration officials are divided over how aggressively new artificial intelligence tools should be regulated — and their differences are playing out this week in Sweden. Some White House and Commerce Department officials support the strong measures proposed by the European Union for AI products such as ChatGPT and Dall-E, people involved in the discussions…

  • North Korea’s first spy satellite launch ends in failure and promise to send up another

    North Korea’s first spy satellite launch has ended in failure after its second stage malfunctioned, sending the projectile plunging into the sea, with the regime vowing to conduct another launch soon. The launch sparked emergency warnings on the southern Japanese island of Okinawa and in the South Korean capital Seoul, where the city briefly issued…

  • The Power of AI: Why Nvidia became the first chipmaking company to enter $1 trillion club

    Nvidia on Tuesday became the first chipmaking company to enter the elite $1 trillion club. The past three trading sessions on Wall Street have seen Nvidia stock rise more than 31 per cent including a three per cent gain on Tuesday – though its market cap soon fell below that $1 trillion mark. Apple, Alphabet,…

  • China warns of artificial intelligence risks, calls for beefed-up national security measures

    China’s ruling Communist Party has warned of the risks posed by advances in artificial intelligence while calling for heightened national security measures. The statement issued after a meeting Tuesday chaired by party leader and President Xi Jinping underscores the tension between the government’s determination to seize global leadership in cutting-edge technology and concerns about the…

  • Ukraine war: The mothers going to get their children back from Russia

    During the Russian invasion of Ukraine, 13 children with special educational needs were taken from their school by armed Russian soldiers and disappeared for weeks. The children were finally allowed to call home from Russian-occupied territory. To get them back, their relatives had to make grueling journeys into the country that declared war on Ukraine.…

  • North Korea says satellite launch fails, plans to try again

    North Korea’s attempt to launch a military reconnaissance satellite into space failed due to a malfunction in the rocket’s second stage, according to the state-run Korean Central News Agency (KCNA). The report cited low reliability and stability of the engine system and unstable fuel as the reasons for the mission’s failure. North Korea’s National Space…

  • Kosovo Prime Minister says he will not surrender country to Serbian ‘fascist militia’ after clashes in north

    Kosovo’s Prime Minister Albin Kurti stated that he would not surrender the country to a Serbian “fascist militia” following violent protests in the north over the installation of ethnically Albanian mayors. Clash occurred between NATO peacekeepers and Serbian demonstrators who tried to block the newly elected mayors from taking office in the municipality of Zvecan.…

  • Sentences for Milosevic allies extended in ‘milestone’ ruling

    Former allies of Serbian President Slobodan Milosevic, Jovica Stanisic and Franko Simatovic, have had their convictions expanded by United Nations judges. They were sentenced to 15 years for their involvement in crimes during the Balkan wars of the 1990s. The International Residual Mechanism for Criminal Tribunals overturned their acquittals for crimes in Bosnian and Croatian…

  • Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards

    Researchers at Eclypsium have discovered that numerous motherboard models produced by Gigabyte, a major Taiwanese computer components manufacturer, contain a backdoor functionality that poses a significant risk to organizations. The backdoor, found in the firmware of many Gigabyte systems, drops a Windows binary during boot-up, which downloads and executes another payload from Gigabyte servers over…

  • Salesforce ‘Ghost Sites’ Expose Sensitive Corporate Data

    Companies that move away from Salesforce often forget to deactivate their sites, leading to the creation of “ghost sites” that contain sensitive corporate, vendor, and user data. These abandoned Communities within Salesforce environments can expose valuable information when administrators fail to remove or properly secure the data. Ghost sites can be identified using tools that…

  • 9M Dental Patients Affected by LockBit Attack on MCNA

    A US government-sponsored dental healthcare provider, MCNA Dental, has alerted its nearly 9 million clients that their personal and medical data was exposed in a LockBit ransomware attack earlier this year. The breach resulted in the theft of sensitive information, including patient names, addresses, dates of birth, phone numbers, email addresses, Social Security numbers, driver’s…

  • Generative AI: The new attack vector for trust and safety

    Threat actors are leveraging generative AI to carry out various forms of abuse, including child sex abuse material (CSAM), disinformation, fraud, and extremism, warns ActiveFence. The use of generative AI enables these actors to accelerate and amplify their operations, leading to a significant increase in the production of malicious content. Concerns arise from the exploitation…

  • Amex planning to use AI for ‘approving cards and lines of credit’

    Financial services titan American Express (Amex) plans to use artificial intelligence (AI) services to validate transactions, approve lines of credit, analyze customer sentiment and predict customer finances. Despite these aspirations, a recent report from VentureBeat indicates that Amex currently has no intention of rolling up its own large language model (LLM) to compete with the…

  • China launches new crew for space station, with eye to putting astronauts on moon before 2030

    China launched a new three-person crew for its orbiting space station on Tuesday, with an eye to putting astronauts on the moon before the end of the decade. The Shenzhou 16 spacecraft lifted off from the Jiuquan launch center on the edge of the Gobi Desert in northwestern China atop a Long March 2-F rocket just…

  • How To Defend Your AI Models

    On one side, the rise of SaaS LLMs (ChatGPT, GPT-4, Bing with AI, Bard) makes this a third-party risk management problem for security teams. And that’s great news, because it’s rare that third parties lead to breaches … ahem. Hope you caught the sarcasm there. Security pros should expect their company to buy — or…

  • Nvidia Unveils AI-Powered Tech That Could Automate Many Aspects Of Game Development

    Many major players in the video game industry have embraced the possibilities of generative AI, especially the technology has grown more mainstream in recent months. At a keynote earlier this month, Nvidia unveiled a suite of AI-powered tools for creating NPCs that it’s calling Nvidia Avatar Cloud Engine (ACE). Described as a “custom AI model…

  • Artificial intelligence could lead to extinction, experts warn

    Artificial intelligence could lead to the extinction of humanity, experts – including the heads of OpenAI and Google Deepmind – have warned. Dozens have supported a statement published on the webpage of the Centre for AI Safety. “Mitigating the risk of extinction from AI should be a global priority alongside other societal-scale risks such as pandemics and…

  • Dark Web Data Leak Exposes RaidForums Members

    VX-Underground researchers assessed that 478,000 RaidForums members were exposed to another hacking site. RaidForums was a well-known marketplace for hackers to buy and sell stolen data. In 2022, the Department of Justice shut down the site and filed criminal charges against RaidForums’ founder and chief administrator. RaidForums hosted numerous high-profile data breaches, including 40 million user…

  • Denmark boosts military spending, announces more aid for Ukraine

    Denmark, a NATO member, plans to invest 143 billion Danish crowns ($21 billion) in defense over the next decade. The increased spending aims to meet military and security goals and address shortcomings in defense capabilities, particularly in light of Russia’s invasion of Ukraine. The government also announced an additional 21.9 billion Danish crowns ($3.16 billion)…

  • Dozens of NATO peacekeepers injured during clashes in northern Kosovo

    Clashes between protesters and NATO’s peacekeeping mission in Kosovo left at least 34 soldiers injured, according to the Italian defense ministry. The tensions escalated after ethnically Albanian mayors took office in the majority Kosovo Serb area, leading to increased violence. Protesters threw Molotov cocktails and other objects at the peacekeeping troops, causing injuries including fractures…

  • Covid: Top Chinese scientist says don’t rule out lab leak

    A former top Chinese government scientist, Prof George Gao, has stated that the possibility of the COVID-19 virus leaking from a laboratory should not be dismissed. Prof Gao, who previously headed China’s Centre for Disease Control, played a significant role in the pandemic response. While China’s government denies any suggestion of a lab origin in…

  • Moscow drone attack: Russia accuses Ukraine of ‘terrorist’ strike

    Russia has accused Ukraine of carrying out a drone attack on Moscow, marking the first time the city has been targeted by multiple drones since the invasion of Ukraine. The Russian defense ministry claimed that at least eight drones caused minor damage in what they called a “terrorist attack.” Moscow Mayor Sergei Sobyanin confirmed that…

  • New Mirai Variant Campaigns are Targeting IoT Devices

    Unit 42 researchers discovered new malicious activity targeting IoT devices. Using Mirai, a malware capable of turning Linux-based devices into remotely controlled bots, hackers can orchestrate larger attacks. This variant of Mirai, dubbed IZ1H9, was first uncovered in August 2018 and has been frequently utilized since. The research team observed a wave of malicious campaigns…

  • Personal Information of 9 Million Individuals Stolen in MCNA Ransomware Attack

    MCNA Insurance Company and Managed Care of North America is one of the largest dental benefits managers in the United States. The company has started sending notification letters to over nine million users impacted by a data breach earlier this year. The attack occurred between February 26 and March 7 and targeted Medicaid and Children’s…

  • Many Vulnerabilities Found in PrinterLogic Enterprise Software

    PrinterLogic’s enterprise management solution allows organizations to manage multiple printers from a single console. Security researchers at Seek discovered numerous weaknesses in the software that could put organizations at risk. Analysis of the PrinterLogic Saas platform and the Virtual Appliance on PrinterLogic’s website revealed 18 distinct vulnerabilities. The platform is most susceptible to an authentication…

  • Nvidia introduces AI supercomputer to create ChatGPT successors

    Nvidia continues to push forward in the race to develop artificial intelligence (AI) tools and applications as the company revealed plans to release more AI products. Speaking at the Computex show in Taiwan on May 28, Nvidia CEO Jensen Huang unveiled a new AI supercomputer platform called DGX GH200. The supercomputer’s primary purpose is to aid…

  • Environmental impact of AI: Pioneering solutions for a sustainable future

    The past several years have seen artificial intelligence (AI) emerge as a global transformative force possessing the power to revolutionize several industries. From autonomous vehicles to smart home devices, AI-driven solutions have permeated various aspects of our lives, promising increased efficiency and convenience. However, alongside these advancements, the environmental impact of AI has also come under…

  • Flash loan attack on Jimbos Protocol steals over $7.5 million

    Jimbos Protocol, an Arbitrum-based DeFi project, has suffered a flash loan attack that resulted in the loss of more than of 4000 ETH tokens, currently valued at over $7,500,000. The company disclosed the attack on Twitter yesterday, saying that law enforcement have been notified and it is working with security professionals to remediate the situation. The…

  • Nvidia chief Jensen Huang says AI is creating a ‘new computing era’

    Nvidia’s chief executive hailed a new era of computing in which “everyone is a programmer”, as the world’s most valuable semiconductor group unveiled a new supercomputer platform to stay at the forefront of the artificial intelligence revolution. Jensen Huang warned in a speech in Taiwan that the traditional tech industry would not keep pace with…

  • Lawyer apologizes for fake court citations from ChatGPT

    The meteoric rise of ChatGPT is shaking up multiple industries – including law, as one attorney recently found out. Roberto Mata sued Avianca airlines for injuries he says he sustained from a serving cart while on the airline in 2019, claiming negligence by an employee. Steven Schwartz, an attorney with Levidow, Levidow & Oberman and licensed…

  • Will Banks Drive Blockchain’s AI Transformation?

    Investment bank Goldman Sachs and Microsoft want to boost Web3 uptake on the Canton blockchain through artificial intelligence (AI). The duo joins traditional finance (TradFi) giants Deloitte, S&P Global, Moody’s, BNP Paribas, and Cboe Global Markets in building infrastructure during the crypto bear market. The recently-released Canton Network links the trading platforms of Goldman and Deutsche…

  • 6 ways generative AI chatbots and LLMs can enhance cybersecurity

    The rapid emergence of Open AI’s ChatGPT has been one of the biggest stories of the year, with the potential impact of generative AI chatbots and large language models (LLMs) on cybersecurity a key area of discussion. There’s been a lot of chatter about the security risks these new technologies could introduce — from concerns…

  • Microsoft urges lawmakers, companies to ‘step up’ with AI guardrails

    Brad Smith, the president of Big Tech firm Microsoft, has called on governments to “move faster” and corporations “step up” amid a massive acceleration in artificial intelligence development. Speaking at a May 25 panel in front of United States lawmakers in Washington D.C., Smith made the call as he proposed regulations that could mitigate the…

  • Virgin Galactic blasts into space after two-year hiatus

    After Virgin Orbit vanished in bankruptcy court, Virgin Galactic announced its first spaceflight in two years as the Unity 25 mission rocketed to an altitude of 54.2 miles (87.2 km) on May 25, 2023 in the skies over Spaceport America, New Mexico. The flight of VSS Unity took off at 9:15 am MT slung beneath…

  • A new antibiotic, discovered with artificial intelligence, may defeat a dangerous superbug

    Using artificial intelligence, researchers say, they’ve found a new type of antibiotic that works against a particularly menacing drug-resistant bacteria. When they tested the antibiotic on the skin of mice that were experimentally infected with the superbug, it controlled the growth of the bacteria, suggesting that the method could be used to create antibiotics tailored to…

  • Teens hand themselves in to police over Sydney fire

    Two 13-year-old boys have turned themselves in to the police after a fire destroyed a seven-story heritage building in central Sydney. Around 100 firefighters were required to extinguish the flames, and an exclusion zone is expected to remain in place for a week, displacing at least 70 residents. While the two boys are assisting with…

  • Russian rocket attack on Ukraine hospital kills two

    A missile strike on a medical clinic in Dnipro, eastern Ukraine, has resulted in at least two deaths and 23 injuries. The injured individuals, including two young boys, were taken to hospitals, with three in serious condition. Ukrainian authorities reported shooting down 17 missiles and 31 drones launched from Russia, targeting various locations including Dnipro,…

  • Japan shocked by ‘heinous’ attack as 4 die in gun and knife rampage

    A rare shooting and stabbing rampage occurred in Nakano, Japan, allegedly carried out by the son of a local government official. The suspect, Masanori Aoki, was arrested on suspicion of killing a police officer, a woman, and injuring several others. The incident has caused great anxiety in Japan, a country with strict gun control laws…

  • Belgian aid worker freed after Belgium, Iran agree prisoner swap, says Oman

    After reaching a deal to swap prisoners, a Belgian aid worker imprisoned in Iran for over a year is on his way back to Belgium, while an Iranian diplomat has been released from Belgium and is returning to Iran. The aid worker, Olivier Vandecasteele, was received by Belgian soldiers and diplomats in Oman before undergoing…

  • Threat actors exploit new channels for advanced phishing attacks

    Perception Point has reported a significant increase in advanced phishing attacks, with a 356% rise in such attacks attempted by threat actors in 2022. Overall, the total number of attacks increased by 87%, demonstrating the escalating threat that cyber attacks pose to organizations. Malicious actors are leveraging new tools and advancements in artificial intelligence and…

  • Romania’s Safetech Leans into UK Cybersecurity Market

    Romanian cybersecurity firm Safetech has expanded its presence to the UK, announcing plans to establish a security operations center (SOC) in London. The company cited government support programs, cultural affinities, and the size of the UK’s cybersecurity market as reasons for investing in the country. Safetech aims to create 15 cyber jobs in the UK…

  • Organizations Worldwide Targeted in Rapidly Evolving Buhti Ransomware Operation

    Symantec has identified a new ransomware operation called Buhti, also known as Blacktail, that targets both Linux and Windows systems. The operation has been rapidly expanding since mid-April, using LockBit and Babuk variants to exploit vulnerabilities for initial access and steal victim files. Buhti operators utilize a modified version of LockBit 3.0 for Windows machines…

  • New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grids

    Mandiant has discovered a new malware called CosmicEnergy, which is believed to be connected to Russia and aimed at disrupting industrial control systems, particularly electric grids. The malware targets devices using the IEC 60870-5-104 protocol and can manipulate power line switches and circuit breakers, posing a potential threat to electric grid assets. It is suspected…

  • South Korea’s KSLV-2 rocket launches seven satellites, one unaccounted for

    South Korea’s KSLV-2 rocket put seven satellites, including one equipped with synthetic aperture radar, into sun-synchronous orbit May 25, although an eighth cubesat is believed to have not deployed properly. The rocket lifted off at the planned time of 5:24 a.m. Eastern from the Naro Space Center. Live footage showed the 47.2-meter rocket, emblazoned with South…

  • Attackers Left Empty-Handed as Crypto Hacks Drop 70% in Q1 2023

    Attacks on token protocols and crypto projects dropped a staggering 70% in Q1 2023 compared to the same period last year when greed and valuations ran rampant, a new report by security firm TRM Labs shows. The stolen amount in the first three months this year is less than any quarter in 2022, showcasing better…

  • See why AI like ChatGPT has gotten so good, so fast

    Artificial intelligence has become shockingly capable in the past year. The latest chatbots can conduct fluid conversations, craft poems, even write lines of computer code while the latest image-makers can create fake “photos” that are virtually indistinguishable from the real thing. It wasn’t always this way. As recently as two years ago, AI created robotic text…

  • A Google DeepMind AI language model is now making descriptions for YouTube Shorts

    Google just combined DeepMind and Google Brain into one big AI team, and on Wednesday, the new Google DeepMind shared details on how one of its visual language models (VLM) is being used to generate descriptions for YouTube Shorts, which can help with discoverability. “Shorts are created in just a few minutes and often don’t include…

  • Solana blockchain integrates ChatGPT plugin, launches AI accelerator

    The Solana Foundation said Tuesday that it has created an open-source reference implementation that lets users interact with the Solana network directly from ChatGPT with a plugin that’s available for download on Github. “This integration from Solana Labs serves as a reference for how AI can make it easier to understand Solana data and protocols,…

  • Researchers Spot APTs Targeting Small Business MSPs

    Proofpoint security researchers have identified increasing attacks on small and medium businesses (SMBs) and their service providers. These attacks come from a variety of APTs linked to Russia, Iran, and North Korea. SMBs have lackluster cybersecurity relative to large companies and rarely have dedicated security teams. Proofpoint notes this makes these businesses easy targets for…

  • Biden Picks New NSA Head, Key to Support of Ukraine, Defense of US Elections

    Army Gen. Paul Nakasone is expected to step down as head of the National Security Agency (NSA) and U.S. Cyber Command (USCYBERCOM). Air Force Lt. Gen. Timothy Haugh, current deputy commander of USCYBERCOM, has been tapped to replace him. The agencies currently seek to bolster Ukrainian cyber defenses, halt cyber attacks against critical infrastructure, and…

  • Apria Healthcare Notifying 2 Million People of Years-Old Data Breaches

    Medical equipment company Apria Healthcare informed 1.86 million individuals of data breaches. Apria is the largest provider of home respiratory services and medical equipment with 280 locations in the United States. The cyber attacks likely compromised the personal information of many customers. The first cyber attack occurred between April 5 and May 7, 2019. The…