Dean Drako

Learn more about the cybersecurity transformation associated to the migration to quantum-safe communications in this QED-C report. The recommended approach relies on a hybrid strategy combining post-quantum cryptography (PQC) and quantum key distribution (QKD) which simultaneously provides multiple protection layers and seeks to avoid any single point of failure. Referred to as defense-in-depth this hybrid approach will continue to be deployed to safeguard digital assets against even the most advanced attacks.

7

Another ISO27k standard ISO/IEC 27403 "Cybersecurity – IoT security and privacy – Guidelines for IoT-domotics" was published at the end of last month. “Domotics” is a neologism for smart homes. This new standard covers the cybersecurity and privacy aspects of device-device interactions (e.g. home hubs and entertainment subsystems) as well as human-device plus device-sensors/actuators that physically interact with the home (e.g. smart door locks and thermostats) and networking both within the home (e.g. WiFi, Bluetooth) and beyond (e.g. fibre or wireless broadband). The standard is aimed squarely at guiding the designers, manufacturers and security or privacy assessors of IoT domotics. It provides examples of information risks that should (in theory at least) have been identified, evaluated and addressed by IoT suppliers baking-in suitable security controls to protect their valued customers' interests. In reality, how much security and privacy do you really expect from cheap and shoddy things in a competitive market? Consumers who are as smart as their IoT things may be intrigued and concerned by the security and privacy implications of the streams of information now flowing freely around their homes and vehicles. Furthermore, IoT things also increasingly invading our workplaces, not least because we wage-slaves are wearing or carrying them in through the front door every morning. Who doesn't have a smartphone or watch these days? Some of us may even be 'concealing' them internally: smart implants are both a thing and things. Before those information streams become rivers and we find ourselves plunging headlong into the seething white water rapids in a flimsy inflatable, take a moment to ponder the information risk, security and privacy challenges ahead ... and hopefully plot a relatively safe route around the semi-submerged boulders and whirlpools. More info: https://lnkd.in/gsSEjJ38 The standard is sold through the national standard bodies, or direct from ISO and IEC.

13

There were 4 major AI-related trends I saw at ISC West this year: 1) New GPU Chip companies 2) Edge AI on the come up 3) Server-based systems offering the most compelling solutions, but with risk 4) All of this enabling the outdoor surveillance market like never before. If you want to read more, check the link in the comments.

28

2 Comments

For the last twenty years we’ve invested in software security without parallel development in firmware security. Why is that? Thomas Pace, co-founder and CEO of NetRise, returns to Error Code to discuss the need for firmware software bills of materials, and why Zero Trust is a great idea yet so poorly implemented. As in Episode 30, Tom is a straight shooter, imparting necessary truth bombs about our industry. Fortunately he’s optimistic about our future. https://lnkd.in/gFj8KGwx

7

I spent most of my week this week at RSA Conference which might be the largest gathering in the world for people interested in technology security. I literally walked the entire tradeshow floor at the Moscone Center, talked to people at 20-30 different booths, and also chatted up many attendees in Tidelift's own booth. TL;DR: !@#$%, there are a lot of companies you've never heard of building software doodads to address security issues you didn't know even existed. 😩 With all the loud booths, flashy demos, free socks, and bouncy happy fun balls from companies trying to get you to buy a software solution that improves your application security, it is easy to forget that there are also ways to improve software security that involve *supporting the work of actual humans.* Today, in The New Stack, Tidelift co-founder and general counsel Luis Villa makes the case that we need stronger public investment in our shared open source software infrastructure, just like the investments we make in airports, highways, and the electrical grid. 🛫 🛣 ⚡ From the article: "Modern governments were created in part to fund public goods like health services, transportation and energy infrastructure, yet open source software is the only public good in the world that still relies on volunteer labor to keep it safe and secure. The reality on the ground today is that unpaid developers are still the norm for open source projects, and these developers are being tasked with an ever-increasing amount of work to ensure the security of the software we all rely on as threats become more pervasive. That status quo is not sustainable, and the problem becomes more dire by the day." Read the whole article here: https://lnkd.in/gXFsqwY9

11

1 Comment

By September 2023, the situation escalated when researchers successfully sinkhole a command and control (C2) server associated with the PlugX worms. For a mere $7, they acquired a unique IP address linked to the worm variant, which revealed a staggering number of infected public IP addresses. A graphic visualizing the spread of the PlugX USB worm across the globe, with hotspots indicating areas of high infection rates. (Source: Sekoia.io) According to Sekoia.io’s findings, Despite the malware’s inception years prior, daily requests from approximately 90,000 to 100,000 unique IPs were still being sent to the sinkhole. Over six months, more than 2.5 million unique IPs connected to it, indicating the worm’s extensive reach. https://lnkd.in/eNhjSadJ

15

In an age of increasing cyber threats, it's crucial for organizations to prioritize secure technologies. Customers play a vital role in assessing the security and risks of the digital products they purchase. However, it's essential for manufacturers to prioritize secure-by-design and secure-by-default products to reduce costs related to cybersecurity.

1

Another great Vercara solution is hitting the market today! Research shows that 40% of users will leave a website if it takes more than three seconds to load, highlighting how speed and security are key. That’s why I’m excited to share the launch of UltraEdge, a comprehensive edge platform powered by Edgio, that includes an innovative Content Delivery Network (#CDN) to deliver fast website performance, enhanced edge functionality, integrated security, and dynamic image optimization.  Here are some of the key benefits of UltraEdge:  🌐Speeds up time to market for new applications  📈Supercharges application performance  🔒Safeguards your application environment from internet-based threats With UltraEdge, Vercara is meeting customer demands for fast and secure web experiences by accelerating every interaction and ensuring websites and apps are always accessible and secure.  If you’re interested in learning more, be sure to stop by our booth at #RSAC or head to our press release announcing the news: https://lnkd.in/eumFyrqn 

46

MyPOV: post cyber attack resiliency is the moat important strategy. Find out more from ⁦‪Chirag Mehta ⁦‪Constellation Research, Inc. With Pen and Paper in Hand, Car Dealers Improvise as Cyber Outage Persists

3

This is shocking- but IoT security is one area where consumer products have a leg up on enterprise, and that's all thanks to the Matter protocol and work by Connectivity Standards Alliance. We sat down with Steve Hanna to get the inside scoop on why the Matter IoT protocol has emerged as the gold standard for IoT security. Read more about Steve below! 👇 🎙 #PacketProtector Ep. 17 What’s the Matter? Understanding the Matter Protocol https://lnkd.in/eVXzdFZN News and topics in this episode... ☑ New UK IoT security rules and US Cyber Trust Mark - are we doing enough? ☑ IBM selling cloud-based QRadar security to Palo Alto Networks and what that means for PAN clients ☑ New TunnelVision VPN attack using DHCP option 21 for sneaky routing bypass ☑ What happened to Zigbee ?? ☑ The Matter protocol for Smart Homes, and where it fits in the food chain of IoT technologies ☑ Matter over Thread, IP, and other connections ☑ The future of connected homes and businesses with Apple, Amazon, and Google living harmoniously ✅ The new CA infrastructure for Matter IoT devices and how unique device IDs may save us all About Steve Hanna - Author of numerous technical papers and standards including IETF RFCs 2730 and 5793 and Trusted Computing Group IF-IMC and IF-IMV. Leader in Matter workgroup, Trusted Computing Group, and International Society of Automation (ISA). Member of IETF's Security Area Directorate. Inventor or co-inventor on 48 issued patents. Distinguished Engineer at Infinion Technologies. #paloaltonetworks #pan #ibm #qradar #siem #xsiam #hashicorp #ai #watsonx  #tunnelvision #vpn #vulnerability  #CSA #IoT #smarthome #iotsecurity #matter #thread #cybertrustmark #apple #amazon #google #comcast #zigbee #bluetooth #connectivity #alexa #googlehome #applehome #ietf #trustedcomputing #tcg #infenion Packet Pushers Andrew Conry-Murray

29

Do you know about the first VoIP call? I'd be happy if you share some insights in the comment section below.

3

Read the customer story to learn how eSentire MDR delivered superior visibility, correlation, and protection from cloud-specific threats, 24/7 detection, and expert support that enabled Venerable to stay ahead of cyber threats. DM us to discuss how eSentire can help your organization achieve comprehensive threat response, visibility improvement and endpoint protection. @eSentire

1

Fundamental info that needs to be understood:

7

Fun Fact About Field Effect #7 – Risk reduction is a core focus of our MDR solution. Field Effect has been practicing and preaching the power of risk reduction for many years because it’s a pillar of keeping our customers safe and secure. Modern IT environments are dynamic beasts - new devices, software and services are a fact of life. Managing risk begins with knowing your environment and being able to identify where and when risk is present. Reducing risk is almost always possible and even small, simple steps can make your IT environment much more resistant to attack or accident. The challenge is knowing where those risks are and how to prioritize actions you can take to reduce them. You can install all the technology you want, but if you ignore the basics of risk reduction, you will ultimately get breached (this is why the marketing of many cybersecurity vendors, especially EDR companies, is horseshit). The best thing about risk reduction?  It’s typically a series of simple things you can do, or small steps you can take, to make your IT assets difficult to breach. The bad thing about risk reduction?  It’s typically the more mundane things - such as patching software, or making sure MFA is enabled across your set of accounts, or making sure your people know not to click on shiny links promising free stuff - that make all the difference. Fortunately, Field Effect has been working on a new feature to our MDR service that will be a game changer in a few months when it’s fully launched – the Field Effect Risk Score. This new feature captures what we’ve learned over our many years delivering MDR- where true risk resides and when action is required or when you can just chill and crack a beer. No noise, just clear and simple guidance on where you should invest your time and energy to make meaningful changes and improvements to your environment. Reducing your cyber risk is one of the best things you can do to keep your business safe, and Field Effect is about to make it even easier.

56

3 Comments

Looking for an overview of #NIST SP 800-171 Rev 2? Kelly Hood addresses common questions about the standard, clarifies its purpose, and talks about what's in it!  This video provides a great overview to help you get started with SP 800-171 Rev 2, including those starting their #CMMC journey. https://lnkd.in/e8HU9NT8

15

At BadgePass, Inc we call this problem Credential Overflow. It is the most common security issue we encounter in #accesscontrol installations and it happens anytime a facility has more active badges/credentials than active cardholders. What's the number one cause? When an employee leaves an organization and their record is not automatically deactivated in the access control system. The number two cause is lost or stolen badges not being automatically deactivated when new badges are provisioned. Easy to fix with an integrated identity and activity management system. 😉 #badgepass #credentialoverflow #security #NFL #idbadges

34

6 Comments

CrowdStrike Lessons for the Automotive Industry: Before the story of the largest IT outage in history, crippling 8.5 million devices, fades into oblivion, it is worth reflecting on the potential lessons, specifically for the transportation sector. The glitchy software update, forced a continuous reboot loop in millions of devices, rapidly causing a global outage. The chaos underscores the vulnerability of our interconnected ecosystem to a single point of failure. Imagine if those millions of devices were vehicles on the road. One might argue that vehicular software updates are still limited and the concern could be hypothetical. However, there have been recent incidents where an update for one system adversely affected other functions. In some cases, updates "bricked" the entire infotainment system. While none of these incidents were fatal and were quickly fixed, the scenario could change as more vehicles connect to the web and each other. Here are some of my observations/takeways. 📌 First, the incident highlights the importance of thorough in-house checks and controls in the software updating process, without which, an over-the-air (OTA) fix can introduce new and more serious errors. 📌 Second, the auto industry has traditionally relied on a robust physical validation process, rooted in safety, to ensure high reliability in the field. In the era of software-defined architecture, the industry must balance this automotive-grade reliability with the need for faster, more continuous software releases. Updates must be thoroughly vetted, with the same auto-grade quality assurance, and not rolled out as a so-called Beta release, with a monitoring strategy to catch errors through staged micro-rollouts. 📌 Third, the outage demonstrated the importance of having manual backup options for any autonomous capability. Businesses in Australia were particularly affected, as many had eliminated manual cash registers in favor of card or phone payments, encouraged by the government. Those still capable of manual cash transactions managed to carry on, albeit with long lines. In the US, businesses like Starbucks, which are transitioning to a cashless experience, were hit harder than those that could more easily revert to manual cash-only transactions. Ultimately the industry has to address how to balance new innovations in an increasingly connected world with system stability and cyber-resilience to prevent such chaotic outages. In the coming days, IT and security experts will determine the precise nature of the logic error and how it reached the user base. Even without those technical details, it is clear that the CrowdStrike event is not a "cry wolf" scenario. It is a serious reminder for any fully cloud-based connected system—towards which the mobility industry is heading—to develop a fully resilient process and risk management plan to avoid or mitigate large-scale outages from a single point of failure. #connectedcar #ota #safety #cloud

26

4 Comments

SEC 8-K Item 1.05: Sonic Automotive Inc. Reports Cybersecurity Incident Cybersecurity professionals, take note: Sonic Automotive Inc. (NYSE: SAH) has filed an SEC Form 8-K disclosing a material cybersecurity incident under Item 1.05. Here's what we know: • Unauthorized access to certain systems and data occurred • The breach was detected through monitoring systems • Immediate containment and mitigation efforts were initiated • Law enforcement and cybersecurity experts are involved in the investigation While specific details about the extent of the breach are limited, this filing underscores the importance of robust cybersecurity measures and prompt disclosure. For more information, you can review the full SEC filing here: https://lnkd.in/gcBAvY2u #Cybersecurity #SECFiling #DataBreach #RiskManagement

5