There are two main observations from the recent Radio Hack likely conducted by a pro-#Russia group that significantly disrupted #Poland's Railway System: 1/2 #Poland #Ukraine #Russia www.wired.com/story/poland...

#BlackHat so far has been an amazing opportunity to connect with good mentors and friends. Say hello if you are here!

Kudos to the @NYTimes for this high-quality investigative work - A Global Web of Chinese Propaganda funded through US nonprofits Leads to a U.S. Tech Mogul #propaganda #China https://t.co/xKSeWBS7iF

Are you going to BlackHat? If so, join us at the Daylight Beach Club 10 Aug for some great networking, some pool-side relaxation and incredible vibes. Hang with Grammy nominated DJ Morgan Page. Register here: https://www.eventbrite.com/e/hubble-blackhat-usa-pool-party-tickets-673225494577

Join us on this week's #SafeMode podcast as @bilyanalilly.bsky.social analyzes the collaborative efforts that halted Russian cyber threats on Ukraine. Find out the lessons learned and Elon Musk's role in supporting Ukrainian forces. https://cyberscoop.com/radio/writer-and-researcher-bilyana-lilly/

Welcome to BlueSky, @alenapopova.bsky.social!

Check out this clever spin on MITRE's ATT&CK kill chain for malvertising. Cyber threat intelligence professionals can use the model to track threat actors exploiting this relatively novel attack vector. This is an actionable guide that you don't want to miss! #cybersecurity #malvertising

Welcome to BlueSky @aejleslie.bsky.social! Follow Alexander for high-quality ransomware and other cybercrime analysis!

Iliya Sachkov, co-founder of GroupIB, is not a criminal. He built a state-of-the-art platform to catch cyber criminals with Russia's best interest in mind. The sentence he received is a deplorable example of how Russia's top innovators are smothered by the corrupt Kremlin.

Hi everyone, I will be attending #BlackHat and #defcon. Get in touch with me if you would like to meet.

DoE's Cybersecurity Capability Maturity Model (C2M2) is worth reading. Its latest version emphasizes both IT and OT security and is aligned with the NIST 800-53 and NIST CSF frameworks. #cybersecurity #energy https://www.energy.gov/sites/default/files/2022-06/C2M2%20Version%202.1%20June%202022.pdf

Another area where #Russia’s and #China’s influence operations playbooks converge: Mandiant links #China’s influence operations to protests. https://www.mandiant.com/resources/blog/pro-prc-haienergy-us-news

The Biden administration announces its new smart home cybersecurity label - a move in the right direction for standardizing, recognizing and emphasizing on cybersecurity compliance. https://www.theverge.com/2023/7/18/23798153/fcc-cyber-trust-mark-biden-security

InfoSecSherpa's Data Privacy and Information Security News Roundup for Saturday, July 15, 2023 Features the article, "Gay furry #hackers are targeting US states for passing anti-trans legislation." https://infosecsherpa.medium.com/infosecsherpas-news-roundup-for-saturday-july-15-2023-83550cb469a9

This was a well-spent Saturday morning with friends in #Manhattanbeach - a welcome pause from my critical infrastructure reading for the day!

An insightful episode of @FT’s Tech Tonic on how #Facebook transformed into a global social media giant connecting over 3 billion https://open.spotify.com/episode/6AtpHUaVYvkitnL2PXXqpQ?si=MPGaI3PgTVi_kyzTtDe4lg&context=spotify%3Ashow%3A6BRSvIBNQnB68GuoXJRCnQ

What are the top 10 #CISO’s knowledge domains? Here’s a great podcast that summarizes them: https://open.spotify.com/episode/3GUg4PcYxLUyhWKQHVqp8R?si=ZgCKR1p-ShCdzgndeblSlw&context=spotify%3Ashow%3A0w9mqg1SY4ytTnehjeGnP1

#Microsoft is allowed to acquire #Activision. Two stellar companies with awesome teams unite https://www.nytimes.com/2023/07/11/technology/microsoft-activision-deal-ftc.html?smid=url-share

The head of #Russia’s #Sandworm wrote his master’s thesis on information warfare. I explained how he views destroying governments in it here: https://www.oodaloop.com/archive/2023/06/29/russian-cyber-war-an-elite-russian-hacker-spells-out-his-vision-for-information-confrontation-in-world-politics/

My thoughts for the New York Times on Prigozhin's aborted mutiny in Russia and what Putin may seek to do next https://www.nytimes.com/2023/07/04/opinion/putin-prigozhin-wagner-group-russia.html

This post offers an overview of the latest Chinese surveillance laws & identifies questions foreign companies doing business in #China should address going forward https://www.oodaloop.com/archive/2023/07/03/growing-risk-to-us-corporations-prc-laws-expand-ccp-oversight-and-surveillance-requirements/

#China’s new counterespionage law just came into effect. The law expands the definition of espionage to any documents, data, materials or any other items related to national security interests. It leaves a lot of room for interpretation giving more power to the #PRC government.

Campfire moments at #LakeTahoe

I am proud to have contributed to this analysis of the thesis of #Sandworm’s head, who is in charge of one of the most dangerous cyber actors working on the Russian government’s payroll: https://www.zdf.de/nachrichten/panorama/hacker-sandworm-evgenii-serebriakov-100.html #cyber #infosec #Russia

How #Putin managed #Prigozhin’s attempted coup: ☑️ diffuse - take back control of key territory and information space ☑️ depost - strip Prighozin of his positions ☑️ displace - send him to Belarus Any other major steps?

Bulgarian language is not Russian. Bulgaria is not Russia. We are a NATO and a EU member. Bulgaria also supports Ukraine against Russian aggression. Putting Bulgarian language in a Russian bar might have worked in the past. Now, it is an anachronistic oddity.

Welcome to BlueSky @kschake.bsky.social!

A piece of advice ➡️

Data extraction attacks from #ChatGPT are possible. Orgs should provide guidance on its use as a part of security programs. API connected to a DLP system is an option. https://open.spotify.com/episode/1RNpHWGlcxcAjb3aVWOHPY?si=P39AR2vFR2aPmXYvJd6edQ&context=spotify%3Ashow%3A2GNPgHa4J8TGf1bFkHxoiF

Max’s wisdom of the day: “we are not peace loving, we are nuke fearing.” I find it hard to argue with this statement.

Sunday adventure :)

I couldn’t agree more with Brandon Karpf’s dedication in “Cybersecurity First Principles” 😊✌️

Dam supplying water to #Crimea blown up in southern #Ukraine - I recommend checking Reuters and Meduza.io for the latest legitimate developments in the offensive https://www.reuters.com/world/europe/russia-says-it-thwarts-another-major-ukrainian-offensive-donetsk-2023-06-05/

Some takeaways from #CyCon2023: * Ukraine is winning but continuous provision of conventional weapons and cyber support needs to continue * cloud migrations of Ukraine’s essential data were mostly successful but legacy data wasn’t transferred * anti-DDoS tools at the start of the war were critical

Discussing the risks, benefits and rules of engagement for IT companies during war at #CyCon was a privilege. I am grateful to have reconnected with so many of my friends and colleagues in Estonia. Looking forward to our next discussions!

@warontherocks.bsky.social is in the house!

I made Martin smile! It’s the little victories in life 😁✌️🫡

After 20+ hours on flights this week, an evening run felt so so wonderful.

#CyCon 15 rules!

I am honored that Microsoft’s team invited me to moderate a closed-door session on the sidelines of CyCon about enterprises operating at war. I look forward to interacting with so many senior reps and discussing this critical issue. I hope to be able to share more after the session. #CyCon #cyber

#Apple Inks Multi-Billion-Dollar Deal With #Broadcom for U.S.-Made (not #China-made) Chips https://www.voanews.com/amp/apple-inks-multi-billion-dollar-deal-with-broadcom-for-u-s--made-chips/7106708.html

#Russia's network for digital control may look like a picket fence compared to #China’s Great Firewall, but it’s a powerful growing surveillance tool hurting #Russia's citizens https://apnews.com/article/russia-crackdown-surveillance-censorship-war-ukraine-internet-dab3663774feb666d6d0025bcd082fba

China bans Micron sales in China citing security concerns.Despite temporary business disruption there is value in economic decoupling in the event of conflict with Taiwan https://www.nytimes.com/2023/05/22/business/micron-technology-china-ban.html?smid=nytcore-ios-share&referringSource=articleShare

Veterans of Bluesky, how long does it take to get an invite code?

Dawn Cappelli’s professional story is so inspiring. She talks about her path on the CyberWire: https://open.spotify.com/episode/4chNhh0DBGEdR8evP38k3W?si=8GSKtArDSZ6NvnmbiDtsLA&context=spotify%3Ashow%3A1410RabA4XOqO6IV8p0gYF #cyber #Dragos #OT

Jordan Bartow (Google): #ChatGPT prompted us to pick up our game and roll out #Bard but we have been working with AI since the beginning. We are positioning Bard to be used for the enterprise with security and protections built in; ChatGPT is for the end user #InfinityFestival

We are watching a preview of the next episodes of “Hacking Google” - coming soon on YouTube. Now we are talking! Operation Aurora started Google’s Zero Trust journey - described in episode 1. #InfinityFestival #HackingGoogle #SiliconValley

Day 2 of #InfinityFestival starts strong with a #technology leadership panel on what’s next. Netflix, HP and Warner Media on stage #Google #Siliconbeach

Thankfully, the Pentagon’s strong side isn’t (ac)counting: it overvalued #Ukraine weapons aid by $3bn, which it can now send without congressional approval https://www.reuters.com/world/europe/pentagon-accounting-error-overvalued-ukraine-aid-by-3-billion-sources-2023-05-18/

“Work and work dynamics are constantly changing but people aren’t completely displaced out of their jobs. Typically if they are open to learning new skills, they adapt.” Ted Schilowitz, Paramount Pictures, speaking about how #AI is changing the movie industry #InfinityFestival #AI