Collaborate Disseminate
The news comes amid reports that a Chinese intelligence-gathering effort was behind the massive Marriott hotel data breach. Continue reading Super Micro Says Its Gear Wasn’t Bugged By Chinese Spies
My experience includes being interviewed for a colleague’s DoD clearance. They do want to know about adverse information such as DUI / alcohol abuse. As I understand it, the recent background investigation interviews for J… Continue reading Is a FBI background investigation for a DoD clearance any different than that of a Supreme Court Justice?
Recently an attack based on booby trapped web servers was blocked by Microsoft through seizure of some of the known server names used in this attack.
This attack analysis was focused to defend US midterm elections which will … Continue reading Detection and attribution of a running attack toward US elections
In the past three years, U.S. lawmakers have struggled to nail down key details of how two of the biggest data breaches in history affected the public and private sectors. “How far back does your information database go that was compromised?” former Utah Rep. Jason Chaffetz demanded of then-Office of Personnel Management director Katherine Archuleta at a June 2015 hearing. Chaffetz berated Archuleta for failing to secure OPM’s IT systems, from which alleged Chinese hackers extracted data on 22 million current and former federal workers. “I just hope we get to the bottom of this…because this is a mess,” Rep. Ben Ray Luján, D-N.M., said in October after questioning former Equifax CEO Richard Smith on when he knew hackers had struck the credit-reporting firm. The breach compromised data on 148 million people. To try to demystify future breach-related discussions on Capitol Hill, cybersecurity firm FireEye held a quiet training session for roughly […]
The post Capitol Hill staffers learn what really happens when there’s a data breach appeared first on Cyberscoop.
Continue reading Capitol Hill staffers learn what really happens when there’s a data breach
Is there an OUI-vendor database that also has historical information? Can that historical information get more-granular? Are the bits after the first 24 useable for this purpose or only the OUI portion of the MAC address?
Fo… Continue reading Historical DB for MAC Vendor OUIs and subsets [on hold]
FBI Director Christopher Wray did something Wednesday few of his recent predecessors have done: He finally provided what the bureau believes is a model for how private U.S. technology companies can comply with law enforcement requests to access encrypted data. Wray, who spoke Wednesday at a FBI conference in Boston, claimed that it’s still possible to develop a workaround for law enforcement to collect evidence on encrypted systems that is “consistent with both the rule of law and strong cybersecurity.” In prepared remarks, the FBI director specifically named Palo Alto, Calif.-based Symphony, the creator of an encrypted messaging platform that’s popular in the banking industry, as an example for how other technology companies could one day work with the FBI. “Some of you may know about the chat and messaging platform called Symphony,” Wray said Wednesday. “This was used by a group of major banks, and marketed as offering something called ‘guaranteed […]
The post The FBI Director thinks this company found an answer to ‘Going Dark’ appeared first on Cyberscoop.
Continue reading The FBI Director thinks this company found an answer to ‘Going Dark’
I’m currently trying to find indicators of compromise in order to use them with Redline. I just can’t seem to find any other sources than:
https://www.iocbucket.com/
https://openiocdb.com/
https://github.com/sroberts/awesom… Continue reading Looking for a list of indicators of compromise [on hold]
Cybercriminals are increasingly moving away from bitcoin as their preferred digital currency in favor of lesser-known cryptocurrencies because of prolonged transaction delays, surging transaction costs and general market volatility, experts tell CyberScoop. Although cybercriminals have been slowly moving away from bitcoin for months, researchers say a noticeable shift towards alternative coins — such as Monero, Dash and ZCash — occurred when bitcoin’s value skyrocketed over $19,000 for one bitcoin in mid-December. The price has drastically fluctuated between $12,000 and roughly $19,000 since then. “Many cybercriminals emulate the operational best practices of legitimate businesses in order to minimize their overhead costs and maximize returns, and in the case of high transaction costs with bitcoin, it makes perfect sense to look at other coins with smaller overheads,” said Richard Henderson, a global security strategist with endpoint cybersecurity firm Absolute. Experts say this shift does not necessarily mean that criminals’ attention is fading from bitcoin, […]
The post Bitcoin hype pushes hackers to stash their money in lesser-known cryptocurrencies appeared first on Cyberscoop.
Continue reading Bitcoin hype pushes hackers to stash their money in lesser-known cryptocurrencies
A highly advanced hacking group infected more than 2 million computers with a backdoor implant in order to reach only a select few companies in order to steal trade secrets and intellectual property, according to analysis provided to CyberScoop and new findings published by cybersecurity firms Cisco and the affected vendor, Avast. Researchers believe the hacking group may be a advanced persistent threat (APT) tied to China, although the early evidence is inconclusive. An investigation is ongoing between Avast, its subsidiary Piriform and the FBI. If the operation was in fact backed by Beijing, it would likely violate a 2015 agreement made between the U.S. and China that halted economic espionage between the two countries. Accurate attribution at this stage of the probe remains difficult, experts say. “The attack was targeting select large technology and telecommunication companies in Japan, Taiwan, UK, Germany and the U.S.,” Avast chief technology officer Ondřej Vlček wrote […]
The post CCleaner attack was focused on stealing data from top level tech firms appeared first on Cyberscoop.
Continue reading CCleaner attack was focused on stealing data from top level tech firms
With Christopher Wray being sworn into his new position, the immediate question facing the FBI director is whether he will follow the path created by his predecessor or forge a new one by implementing drastically different initiatives. Associates of Wray who spoke to him in recent weeks say they expect him to build on many of the same priorities that James Comey was known for, including efforts to strengthen the FBI’s cybercrime fighting mission. “I think what you’ll see, and this will play out eventually in [Appropriations committees] too, is that Chris understands that [cybersecurity] is important and that it’s part of everything,” said Joe Whitley, a former senior Justice Department official. “Chris I think respects and admires a lot of what [Comey] did, especially with him building up the FBI’s Cybercrime Division. He’ll build on that.” Whitley doesn’t expect Wray to take the bureau in a drastically different direction […]
The post New FBI Director will build on Comey’s cybercrime fighting efforts appeared first on Cyberscoop.
Continue reading New FBI Director will build on Comey’s cybercrime fighting efforts