Brett McDowell

How does open-source information differ from OSINT? Guidehouse's OSINT Director, Melisa Stivaletti, dives into it in a recent conversation with Eric B. from IT Audit Labs. Learn more about Guidehouse's defense and intelligence expertise: https://lnkd.in/e_NijQVh

35

Cyber Designations: OFAC has designated the following 5 individuals and entity for their connections to the Intellexa Consortium, a software development group alleged to develop and export surveillance tools to authoritarian regimes: Artemis Artemiou, the general manager and a board member of an Intellexa Consortium company; Felix Bitzios, the beneficial owner of an Intellexa Consortium company used to supply spyware to a foreign government; Andrea Nicola Constantino Hermes Gambazzi, the beneficial owner of 2 Intellexa Consortium members designated pursuant to Executive Order 13694; Merom Harpaz, a top executive of the Intellexa Consortium; Panagiota Karaoli, the director of multiple Intellexa Consortium entities; and Aliada Group, an entity based in the British Virgin Islands and member of the Intellexa Consortium, which enable transactions for the network.   Designations over Human Rights Abuses in Georgia: OFAC, alongside the Department of State, has also designated the following individuals: Zviad Kharazishvili, the Georgian Ministry of Internal Affairs Special Task Department Chief; Mileri Lagazauri, a deputy to Kharazishvili; Zurab Makharadze and Konstantine Morgoshia, the leaders of an allegedly violent extremist group. These 4 designations are made for alleged involvement in serious human rights abuses committed in response to peaceful protests in Georgia – Department of State press release. The DoS has also imposed visa restrictions on over 60 Georgian individuals and their families who are said to be undermining democracy in Georgia. #Sanctions #Russia #EUCommission #ExportControl #TradeWar #TSECS #SanctionsUpdate #TurkishSociety #Sanctions #USA #OFAC #BIS #TradeUpdates #GlobalTrade #TradeCompliance #InternationalRelations #EconomicSanctions #TradeRegulations #TurkishExports #TradePolicy #SecurityMatters #ForeignPolicy #ComplianceNews #EconomicSecurity #CrossBorderBusiness

1

Only one week to go! Join us for this informative session featuring Juan C. Asenjo, Ph.D., CISSP Asenjo from Prime Factors and Parnashree Saha from Encryption Consulting. https://lnkd.in/geFAf7HW #EncryptionConsulting #DataSecurity #Cybersecurity #Encryption #DataProtection #InformationSecurity #Compliance #RiskManagement #ZeroTrust #ApplicationSecurity #CloudSecurity

6

*** New CCSS v9 requirement for blockchain state monitoring *** Monitoring wallet addresses for suspicious activity appears to be a very effective detective control. Unauthorized access and use of key material can sometimes be detected before other information security controls identify the intrusion. Cyvers provides, for the crypto community's benefit, a publicly accessible alert service that has proven effective at alerting entities of intrusions into an entity's platform. One example is the WazirX breach, where it appears Cyvers tooling identified suspicious activity with a WazirX wallet while the attack occurred. https://lnkd.in/gcB5-yP5 Based on the Cyvers example and many other alerts generated from monitoring wallet addresses, the CCSS Steering Committee added a requirement to CCSS v9 that the blockchain state, confirmed and unconfirmed, be monitored for suspicious activity. The requirement is below. "2.02.4.1 Relevant blockchain state (confirmed and unconfirmed) as it relates to the CCSS Trusted Environment are continuously monitored for anomalous behavior, generating alerts. Appropriate personnel address the alerts that are generated." The wording of the requirement avoids “wallet address monitoring” to future-proof this requirement and allow for different monitoring approaches that do not lock in the entity to purchase vendor-provided tooling to meet the requirement.  Note that the “unconfirmed” state term is related to transactions that have not been fully confirmed, such as transactions in a mempool. The CCSSA (the auditor) will consider whether the "unconfirmed" state applies to the entity under audit when conducting an audit. More guidance on this requirement will be coming. CCSS v9 is located here: https://lnkd.in/gUxMJjn9 #DigitalAssetsFramework #DigitalAssets #VirtualAssets #CryptoCustody #CryptoCompliance #Crypto #CryptoCurrency #ccss #ccssa #informationsecurity #digitalpayments #cryptosecurity #informationsecurity #risk

22

3 Comments

The FDIC is planning to tighten #cybersecurity standards, with a proposed new rule affecting financial institutions of all sizes. Jessica Caballero of DefenseStorm breaks down what your institution needs to know about evolving cyber risk requirements. https://hubs.ly/Q02Xq0CG0 #CorporateCompliance

1

We released joint guidance with the Federal Bureau of Investigation (FBI) on “Product Security Bad Practices,” part of the #SecurebyDesign initiative. The guidance outlines risky product security practices for software manufacturers, particularly those supporting critical infrastructure and national critical functions. The bad practices are organized into three categories: product properties, security features, and organizational processes and policies. The guidance also includes recommended actions and additional resources to help software manufacturers prioritize security throughout the product development process. The public comment period is now open through November 30. https://go.dhs.gov/UxS

119

4 Comments

Mobile Spyware can access sensitive personal data such as messages, photos, GPS locations, and browsing history. Unauthorized access to this information is a direct violation of an individual's right to privacy. #MobileSpyware technology can be used by governments or corporations to conduct mass surveillance of citizens, potentially leading to human rights abuses. Governments have been criticized for using spyware like Pegasus to monitor activists, journalists, and political opponents. Mobile Spyware is often used in cases of domestic abuse, allowing abusers to track and control their victims' movements and communications. Depending on the jurisdiction, those caught using spyware without consent could face criminal charges, fines, and imprisonment. Mobile spyware often infringing on individuals' privacy and personal freedoms.

2

Jill Martucci, CISA, SSCP, Director of GRC, Advisory Services for Avalon Cyber dives into the "Govern" function in the National Institute of Standards and Technology (NIST) Version 2.0 of the Cybersecurity Framework. "While there are multiple enhancements in CSF 2.0, the “Govern” function is the change that may have the largest impact, as this function should help organizations and compliance teams map and meet various laws and regulations while managing their cyber programs." Learn more in Jill's latest blog post: https://hubs.li/Q02Ll22z0 #TeamAvalon #AvalonCyber #NIST2.0 #compliance #cybersecurity #riskmanagement #cyber #governance

14

This pool was created using one of two free VPNs—MaskVPN and DewVPN—marketed to end users. Besides acting as a legitimate VPN, the software also operated as a botnet that covertly turned users’ devices into a proxy server. The complex structure was designed with the intent of making the botnet hard to reverse engineer. https://zurl.co/gJCY #Cybersecurity #cyberattacks #dataprotection #dataprivacy #convergeip

1

In the wake of the Salt Typhoon cyberespionage campaign allegedly linked to China, Federal Communications Commission (FCC) Chairwoman Jessica Rosenworcel has proposed immediate measures to strengthen the cybersecurity of US telecommunications infrastructure. The FCC’s action came a day after top US security agencies briefed senators and the Commission on the scope of Salt Typhoon’s espionage campaign, which involved infiltrating major telecommunications networks to steal sensitive data and intercept phone communications. The initiative includes a draft Declaratory Ruling that mandates telecom carriers to secure networks against unauthorized access under section 105 of the Communications Assistance for Law Enforcement Act (CALEA). https://lnkd.in/gFterXF8

17

6 Comments

The latest from OODA Loop Contributor Emilio Iasiello: In June 2024, the Office of the National Cyber Director (ONCD) released its report Summary of the 2023 Cybersecurity Regulatory Harmonization Request for Information, a government effort whose purpose is to find a path forward to creating a comprehensive framework to strengthen cybersecurity resilience across all sectors; simplify oversight and responsibilities of cyber regulators; and reduce administrative burden and cost on those organizations regulated.  The RFI adhered to Strategic Objective 1.1 of the 2023 National Cybersecurity Strategy, “Establish Cybersecurity Requirements to Support National Security and Public Safety.”  Eighty-six organizations responded to the RFI, representing the critical infrastructure sectors, as well as state and local government associations, academia, and non-profit and professional organizations.  The report found three major outcomes from those that responded to the survey:  1) lack of harmonization and reciprocity impacted cybersecurity outcomes while inflicting high compliance costs; 2) regulatory harmonization had challenges that extended to all sectors and organizations of all sizes and crossed jurisdictions; and 3) it was well within the U.S. government’s ability to address these existing challenges.   https://lnkd.in/eqU486u9

4

1 Comment

Join DefenseStorm Director of Cyber Risk Management, Jessica Caballero, CERP, CRCM, for an in-depth look at the updates made to NIST's CSF framework with the introduction of CSF 2.0. In this informative webinar, you'll find out everything you need to know about the enhancements to the gold standard in #cybersecurity frameworks and how CSF 2.0 will impact your institution. Register today! https://lnkd.in/gCszt7JW

21