Ron Eddings

Extortion is a form of terrorism. So when are we going to start treating terrorists like terrorists and deal with them the same way we dealt with the Baader–Meinhof Gang, IS, or Al-Qaeda? Just because its a 'cyber' crime doesn't mean its not a crime or is some how something lesser. The Port of Seattle is confronting a severe cybersecurity crisis as the Rhysida ransomware group demands a ransom of 100 bitcoins (approximately $5.9 million). Rhysida, which has gained notoriety for targeting organizations worldwide, released screenshots of stolen documents, claiming they possess sensitive data such as scanned U.S. passports, Social Security numbers, and tax forms. The group has threatened to sell this data on the dark web if their ransom demands are not met within a week. In a joint statement with Seattle-Tacoma International Airport, the Port of Seattle has made it clear they will not pay the ransom, despite threats to publicly release the stolen data. A Port spokesperson emphasized that refusing to comply is part of their firm stance against negotiating with cybercriminals. The extent of the data breach is still under investigation, but Rhysida’s involvement suggests a sophisticated attack that exploited vulnerabilities in the port’s systems. The attack was initially detected on August 24, leading to widespread service disruptions. https://lnkd.in/gxKHV5Yj

15

5 Comments

A few weeks ago, I wrote a post sharing research breaking down exposures across enterprise and cloud infrastructure. By volume, the majority of exposures affected Active Directory but the most critical exposures were found in cloud environments. (see https://lnkd.in/euvfKvGJ) I wanted to follow that up with a similar view comparing the distribution of critical exposures among different industries. Per the attached chart, about half of the industries shown follow the overall pattern of Cloud > Active Directory > IT/Network devices. But there’s quite a bit of variation and some sectors buck that trend entirely. For example, very few of the critical asset exposures affecting the Energy, Transportation, and Healthcare sectors are in the cloud. On the other hand, the share of critical exposures in cloud environments is much higher than average in the Agriculture and Manufacturing industries. I share this because the diversity and sprawl of the modern attack surface make it difficult to answer seemingly simple questions like "Where are our critical exposures?" And the fact that every industry's or organization's answers will vary makes answering it all the more difficult and important. If you'd like to see more on what we learned from analyzing exposures from tens of thousands of attack path assessments, download the full report from Cyentia Institute and XM Cyber here: https://lnkd.in/dPfqXG7y #exposuremanagement #vulnerabilitymanagement #cyberrisk

40

3 Comments

CyberRatings.org just released their real-world test results for Versa Security Service Edge (SSE) and we earned the highest possible AAA rating. This rigorous independent testing evaluated Versa SSE against a comprehensive suite of advanced security threats. In the report, you'll find the details about these specific results: 1. Threat Protection: Versa SSE blocked 100% of 205 exploits and over 7,100 malware samples, demonstrating its strong protection. 2. Encrypted Traffic Management: 100% visibility and defense across TLS 1.2 and TLS 1.3 encrypted traffic. 3. Evasion Resistance: 100% success in countering over 1,000 evasions, ensuring that advanced attack techniques are neutralized. 4. Real-World Performance: Versa SSE delivers solid performance across various traffic conditions, balancing security and speed without compromise. extremely high HTTP and HTTPS performance, with HTTPS throughput peaking at 3,108 Mbps. Click here to download the full report: https://lnkd.in/dTTC6NCF #VersaNetworks #CyberSecurity #SSE #CyberRatings2024 #CloudSecurity #Encryption #Channelpartners

5

I have fun writing unique intros for every episode of Application Security Weekly. Here's what I crafted for episode 283. ---- What if #appsec wrote aviation safety scripts? Welcome to flight ASW 283. The captain has turned on the password strength sign, which means that your password must meet an annoying list of requirements as this flight is not equipped for passkeys. There are several emergency exits on this aircraft. Take a moment to locate the exit nearest you, keeping in mind that the default choice is probably insecure. If there is a loss of cabin pressure, memory safety masks will drop down. To start the flow of code, pull the mask towards you. To tighten the fit, address all the web app vulns that have nothing to do with unsafe memory. In the unlikely event of a water landing, check beneath your seat for a top 10 list of aquatic dangers. Thank you. And please use caution when opening overhead dependencies, as contents may have shifted maintainers. ---- Check out this episode at https://lnkd.in/gnTj6RYW To find more of these intros, check out https://lnkd.in/gMHi9QRk

6