Forwarded from Пост Лукацкого
Как перейти от эфемерных угроз к реальным техникам злоумышленников? https://t.co/cDokAFM6UJ
— Alexey Lukatsky (@alukatsky) January 24, 2020
— Alexey Lukatsky (@alukatsky) January 24, 2020
US Could Appoint a Cybersecurity Leader for Each State - Infosecurity Magazine
https://www.infosecurity-magazine.com/news/us-state-cybersecurity-leader-act/
https://www.infosecurity-magazine.com/news/us-state-cybersecurity-leader-act/
Infosecurity Magazine
US Could Appoint a Cybersecurity Leader for Each State
Senate considers bill to create state cybersecurity leaders
Bizarre way of malware developer rivalry.
Someone is uninstalling the Phorpiex malware from infected PCs and telling users to install an antivirus | ZDNet
https://www.zdnet.com/article/someone-is-uninstalling-the-phorpiex-malware-from-infected-pcs-and-telling-users-to-install-an-antivirus/
Someone is uninstalling the Phorpiex malware from infected PCs and telling users to install an antivirus | ZDNet
https://www.zdnet.com/article/someone-is-uninstalling-the-phorpiex-malware-from-infected-pcs-and-telling-users-to-install-an-antivirus/
ZDNET
Someone is uninstalling the Phorpiex malware from infected PCs and telling users to install an antivirus
Malware analysts believe someone has hijacked the Phorpiex botnet from its creator and is sabotaging its operations by alerting users they've been infected.
Academics call for UK's Computer Misuse Act 1990 to be reformed • The Register
https://www.theregister.co.uk/2020/01/22/clrnn_computer_misuse_act_reform_call/
https://www.theregister.co.uk/2020/01/22/clrnn_computer_misuse_act_reform_call/
www.theregister.co.uk
Academics call for UK's Computer Misuse Act 1990 to be reformed
Report suggests public interest defences for infosec professionals, academics and journalists
Treasury Wants to Collect More Cyber Risk Details From Banks
https://www.bankinfosecurity.com/treasury-wants-to-collect-more-cyber-risk-details-from-banks-a-13642
https://www.bankinfosecurity.com/treasury-wants-to-collect-more-cyber-risk-details-from-banks-a-13642
Bankinfosecurity
Treasury Wants to Collect More Cyber Risk Details From Banks
The U.S. Treasury Department is proposing to collect more information from banks and financial markets about the cybersecurity risks they face to help ensure the
Example of security data lake cost estimation, cloud based.
https://medium.com/@osinger/nice-security-data-lake-how-much-did-it-cost-42a624cd9b0a
https://medium.com/@osinger/nice-security-data-lake-how-much-did-it-cost-42a624cd9b0a
Medium
Nice security data lake, how much did it cost?
See the actual numbers from a customer that reduced their SIEM spend with Snowflake.
You should check - have you patched these critical RCE vulnerabilities in January:
1)Citrix (last patch realesed 23-24.01.2020)
https://support.citrix.com/article/CTX267027
2)Microsoft Windows
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601
3) consider need of implementation of workaround for Internet Explorer https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV200001
4) patching Firefox
https://www.mozilla.org/en-US/security/advisories/mfsa2020-03/
5)Cisco Firepower https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-fmc-auth
1)Citrix (last patch realesed 23-24.01.2020)
https://support.citrix.com/article/CTX267027
2)Microsoft Windows
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601
3) consider need of implementation of workaround for Internet Explorer https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV200001
4) patching Firefox
https://www.mozilla.org/en-US/security/advisories/mfsa2020-03/
5)Cisco Firepower https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-fmc-auth
Mozilla
Security Vulnerabilities fixed in Firefox 72.0.1 and Firefox ESR 68.4.1
NISTIR 8278 (Draft), Guidelines for OLIR Users and Developers | CSRC
https://csrc.nist.gov/publications/detail/nistir/8278/draft
https://csrc.nist.gov/publications/detail/nistir/8278/draft
CSRC | NIST
NIST Internal or Interagency Report (NISTIR) 8278 (Draft), National Cybersecurity Online Informative References (OLIR) Program:…
In a general sense, an informative reference indicates how one document relates to another document. The National Cybersecurity Online Informative References (OLIR) Program is a NIST effort to facilitate subject matter experts defining standardized online…
Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events | NCCoE
https://www.nccoe.nist.gov/projects/building-blocks/data-integrity/identify-protect
https://www.nccoe.nist.gov/projects/building-blocks/data-integrity/identify-protect
Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events | NCCoE
https://www.nccoe.nist.gov/projects/building-blocks/data-integrity/detect-respond
https://www.nccoe.nist.gov/projects/building-blocks/data-integrity/detect-respond
www.nccoe.nist.gov
Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events | NCCoE
Project Abstract
The process to mitigate an active attack on an organization’s data integrity requires use of strong, effective tools. Detection of a data integrity attack involves identification of its source, the affected systems, and sufficient data collection…
The process to mitigate an active attack on an organization’s data integrity requires use of strong, effective tools. Detection of a data integrity attack involves identification of its source, the affected systems, and sufficient data collection…
Based on the responses it received, Cisco found for every $1 an organization spends on privacy, they receive a $2.70 return on investment.
https://iapp.org/news/a/study-mature-privacy-programs-experience-higher-roi/
https://iapp.org/news/a/study-mature-privacy-programs-experience-higher-roi/
iapp.org
Study: Mature privacy programs experience higher ROI
As data protection laws popped up around the world, many armed with strict penalties for noncompliance, organizations quickly realized they had to be proactive to meet those regulatory requirements.
Staying on top of those compliance requirements meant pouring…
Staying on top of those compliance requirements meant pouring…