45% of China’s urban land is rapidly sinking due to manmade development

A perfect storm is brewing for China’s most densely populated areas due to rising sea levels and subsiding land that has been accelerated beyond normal fluctuations. Scientists have sounded the alarm that, without intervention, urban areas below sea le… Continue reading 45% of China’s urban land is rapidly sinking due to manmade development

Backdoor in XZ Utils That Almost Happened

Last week, the Internet dodged a major nation-state attack that would have had catastrophic cybersecurity repercussions worldwide. It’s a catastrophe that didn’t happen, so it won’t get much attention—but it should. There’s an important moral to the story of the attack and its discovery: The security of the global Internet depends on countless obscure pieces of software written and maintained by even more obscure unpaid, distractible, and sometimes vulnerable volunteers. It’s an untenable situation, and one that is being exploited by malicious actors. Yet precious little is being done to remedy it…

Continue reading Backdoor in XZ Utils That Almost Happened

Maybe the Phone System Surveillance Vulnerabilities Will Be Fixed

It seems that the FCC might be fixing the vulnerabilities in SS7 and the Diameter protocol:

On March 27 the commission asked telecommunications providers to weigh in and detail what they are doing to prevent SS7 and Diameter vulnerabilities from being misused to track consumers’ locations.

The FCC has also asked carriers to detail any exploits of the protocols since 2018. The regulator wants to know the date(s) of the incident(s), what happened, which vulnerabilities were exploited and with which techniques, where the location tracking occurred, and ­ if known ­ the attacker’s identity…

Continue reading Maybe the Phone System Surveillance Vulnerabilities Will Be Fixed

NIST Cybersecurity Framework 2.0

NIST has released version 2.0 of the Cybersecurity Framework:

The CSF 2.0, which supports implementation of the National Cybersecurity Strategy, has an expanded scope that goes beyond protecting critical infrastructure, such as hospitals and power plants, to all organizations in any sector. It also has a new focus on governance, which encompasses how organizations make and carry out informed decisions on cybersecurity strategy. The CSF’s governance component emphasizes that cybersecurity is a major source of enterprise risk that senior leaders should consider alongside others such as finance and reputation…

Continue reading NIST Cybersecurity Framework 2.0

Roundup: Federal action that shaped cybersecurity in 2023

As 2023 draws to a close, it’s time to look back on our top five federal cyber stories of the year: a compilation of pivotal moments and key developments that have significantly shaped the landscape of cybersecurity at the federal level. These stories highlight the challenges federal agencies faced in securing digital infrastructure in the […]

The post Roundup: Federal action that shaped cybersecurity in 2023 appeared first on Security Intelligence.

Continue reading Roundup: Federal action that shaped cybersecurity in 2023

Renewable energy rides solar cycle paths through Dutch provinces

The Dutch love to cycle. So much so that there are more than 35,000 km (over 56,000 miles) of cycle paths snaking through the Netherlands. Two of those bike routes have now been topped with photovoltaic cells to produce renewable energy while they face… Continue reading Renewable energy rides solar cycle paths through Dutch provinces

What to do if your company was mentioned on Darknet?

We created a list of companies worldwide from different industries and searched through Darknet trying to find out how likely these companies have suffered a breach, what kind of data leaked, and what to do with it. Continue reading What to do if your company was mentioned on Darknet?

Sandworm, a Russian Threat Actor, Disrupted Power in Ukraine Via Cyberattack

Any company that is strategic could be targeted for the same kind of actions as this cyberattack. Follow these tips to mitigate your company’s risk to this cybersecurity threat. Continue reading Sandworm, a Russian Threat Actor, Disrupted Power in Ukraine Via Cyberattack