Collaborate Disseminate
Last week I passed the EC-Council Certified Ethical Hacker exam. Yay to me. I am a professional penetration tester right? Negatory. I sat the exam more as an exercise to see if I “still had it”. A boxer returni… Continue reading Cyber Security Skills in 2018
As the Atlanta city government struggled to recover from March’s ransomware attack, cybersecurity personnel from U.S. banks huddled two miles from city headquarters to practice dealing with the same type of disruptive malware. The exercise, which assembled 18 financial institutions and the industry’s threat-sharing center, simulated a bank’s computer network and tasked participants with defeating “WannaCry-like” ransomware, according to ManTech International Corp., the cybersecurity company that hosted the drill in April. Participants, including big U.S. banks, connected to ManTech’s Advanced Cyber Range Environment (ACRE), a computing facility that can test network defenses against various strains of malware. Some participated from the Federal Reserve office in midtown Atlanta, according to ManTech spokesman Jim Crawford. In this case, exercise planners mimicked the WannaCry ransomware, which struck more than 300,000 computers in 150 countries last year. The company already had practice using that virus for ACRE training “when it was still in the wild,” Brett Barraclough, a ManTech […]
The post As ransomware hobbled Atlanta, banks drilled for next iteration of attacks appeared first on Cyberscoop.
Continue reading As ransomware hobbled Atlanta, banks drilled for next iteration of attacks
When the time comes to add an object recognizer to your hack, all you need do is choose from many of the available ones and retrain it for your particular objects of interest. To help with that, [Edje Electronics] has put together a step-by-step guide to using TensorFlow to retrain Google’s Inception object recognizer. He does it for Windows 10 since there’s already plenty of documentation out there for Linux OSes.
You’re not limited to just Inception though. Inception is one of a few which are very accurate but it can take a few seconds to process each image and …read more
Continue reading Using TensorFlow To Recognize Your Own Objects
A mature anti-phishing program keeps organizations safer, claims Cofense, and offers as proof the decreasing susceptibility of their customers’ employees to mock phishing emails as well as rising reporting rates of the same. Overall, the resilien… Continue reading Certain types of content make for irresistible phishes
ScopeAR, a graduate of the Y Combinator Summer 2015 class, came to the augmented reality game very early, launching in 2011 when there was very little hardware and most people didn’t understand the technology. But it has managed to hang around long enough for the market and the hardware to finally catch with the founders’ […] Continue reading For ScopeAR, the market is finally catching up with the technology
You have started your online business, and it’s going great, which means you can sit back and enjoy the fruits of your labor. Well, not exactly. If your eBusiness is a success, you still have to work on it constantly in order to keep up with the … Continue reading Your EBusiness and Cybersecurity? How to Stay Safe?
Advanced security professionals rejoice, the new CASP exam, CAS-003, is here! Available beginning on April 2, 2018; the new CASP exam is focused on the most current knowledge and skills required of advanced security professionals. CASP Certification Ov… Continue reading 2018 CASP Exam Changes
A global cybersecurity drill hosted Tuesday by the Department of Homeland Security served to “push participants out of their comfort zone” to practice information sharing at a time of heightened risk to critical infrastructure, top DHS cybersecurity official Jeanette Manfra said. “Cyber threats to critical infrastructure continue to grow and represent one of the most serious national security challenges we must confront,” Manfra told reporters, adding that participants will respond to a simulated global threat to infrastructure over the course of the three-day exercise. This week’s exercise includes participants from the transportation and “critical manufacturing” sectors, the latter which DHS recently warned Russian government hackers were targeting in a multi-stage attack campaign. Aviation giant Boeing was hit by malware last month in an attack that stirred fears that the potent WannaCry ransomware had struck again. More than 1,000 people, including corporate executives, law enforcement, intelligence, and defense officials, are participating in this […]
The post DHS ‘Cyber Storm’ exercise tests manufacturing and transportation sectors appeared first on Cyberscoop.
Continue reading DHS ‘Cyber Storm’ exercise tests manufacturing and transportation sectors
Due to FOIA requests…
via Sam Machkovech, writing at the beloved Ars Technica, reports on the general availability of a United States Central Intelligence Agency training object for analyst assets. All due to a FOIA request filed (reportedly) a yea… Continue reading Training Gamification, CIA Board Game
As foreign hackers continue to probe the U.S. grid for weaknesses, a cyber exercise for the North American energy sector has shown that many utility personnel still lack access to the classified information needed to stay on top of the threat. Not enough utility employees had the clearances needed to share threat information for a serious cyberattack scenario rehearsed during the exercise, according to a report published Friday by regulator North American Electric Reliability Corp. (NERC). “Government should plan to quickly declassify information that utilities need to prevent or respond to attacks,” the report states. During the two-day exercise, which took place in November, government officials and utility executives worked together to respond to simulated “cyber and physical attacks” against control systems and generation and transmission facilities “that caused widespread and prolonged power outages,” the report notes. Energy industry officials have long urged the U.S. government to expedite the clearance […]
The post Electric grid hacking exercise reveals shortfalls of security clearance shortage appeared first on Cyberscoop.
Continue reading Electric grid hacking exercise reveals shortfalls of security clearance shortage