Short Takes – 12-1-22
Lockheed Martin’s Army cyber training platform goes civilian. TheRegister.com article. Not much detail. Pull quote: “MR2 is also able to synchronize data between the military’s segmented classified and non-classified communication…
Review – Reader Comment – Bedrock Crushed?
Earlier this week, a long-time (near original CFSN Detailed Analysis subscriber) left me a message on LinkedIn about a small ICS supplier, Bedrock Automation, and its apparent going out of…
House Passes Rail Strike Legislation
Yesterday the House passed both HJ Res 100 and H Con Res 119, the two resolutions that would stop the railroad unions starting a strike on December 6th. HJ Res…
Review – 3 Advisories Published – 12-1-22
Today, CISA’s NCCIC-ICS published two control system security advisories for products from Horner Automation and Mitsubishi Electric. They also published a medical device security advisory for products from BD. Horner…
Altruism in Information Security, Part 2: Identifying Hurdles Along the Path
Originally published by Tentacle. Written by Matt Combs, Tentacle. Welcome back! If you’re joining me for the second part of this series, I’m assuming I didn’t turn you off with…
Advisory: Persistent MFA Circumvention in an Advanced BEC Campaign on Microsoft 365 Targets
Originally published by Mitiga. Written by Mitiga’s Research Team. Mitiga spotted a sophisticated, advanced business email compromise campaign, targeting Microsoft 365 organizations, leveraging inherent weaknesses in Microsoft 365 MFA, Microsoft…
Definitive Guide to Hybrid Clouds, Chapter 2: Exploring the Roles of NetOps, CloudOps, and SecOps
Originally published by Gigamon. Written by Stephen Goudreault, Gigamon. This post explores Chapter 2 of the “Definitive Guide™ to Network Visibility and Analytics in the Hybrid Cloud.” Read Chapter 1…
The Right Endpoint Detection and Response Solutions for a Post-Perimeter World
The Right Endpoint Detection and Response Solutions for a Post-Perimeter World The endpoint isn’t the end anymore. It’s time to rethink how you’re defending it. Endpoint detection and response solutions…
Visual Studio Code: Remote Code Execution
submitted by /u/Zemnmez [link] [comments]
Platform certificates used to sign Android malware
submitted by /u/ScottContini [link] [comments]