Cyber Defense eMagazine July 2021 Edition

More documents

Recommendations

Info

The Loud Clarion Call: As a former linguist and HUMINTer in U.S. Army intelligence with U.S. Special Forces Command during Operation Enduring Freedom and former cyber-intel initiative contributor at Lockheed, this news jumped out to me on several levels. First, NATO is acknowledging that Russia, China and other nation-states pose major cybersecurity threats, both because of direct actions and because of the third-party threat actors operating on their soil, presumably with tacit permission. The first half of 2021 has seen both an increase in commercial/industrial critical infrastructure cyberattacks, and a dramatic escalation of their potential impact - Colonial Pipeline, food processor JBL, as well as commercial sector corporations such as Fuji being just the latest example. New findings from researchers with Check Point show that ransomware attacks have increased 93% year over year. Moreover: • The number of organizations impacted by ransomware has risen to 1,210 in June 2021 alone, • Check Point Research sees a 41% increase in attacks since the beginning of 2021, contributing to the aforementioned 93% increase, and • Surprisingly, despite the high-profile U.S. entities attacked, Latin America and Europe saw the largest increase in ransomware attacks since the beginning of 2021, marking a 62% and a 59% increase, respectively. Elena Elkina, JD, CIPP/US, CIPP/E, CIPT, and Partner with corporate privacy consultants Aleada, noted that we live in a world where cyber defense is imperative for companies and countries. “In the light of the frequency, complexity, and destructive power of the most recent attacks, the only surprise is that it took NATO up to this point to make public this decision and take assertive action. The time for delicacy is over, and it is time for NATO to reaffirm its position and request other countries to act respectfully and responsibly.” Help Wanted in The Hunt for Premium Talent: This communique makes clear that the U.S. and her allies must change the urgency and economics around finding the undiscovered cyber geniuses whose innate aptitudes make them among the potential best and brightest, and then train them at a new pace and price point, and get them into the fight as soon as possible. This is a clarion call for the best talent on defense, repelling attackers at the cyber borders, and on offense, deploying cyber weapons against adversaries.” As Garret Grajek, CEO of YouAttest, observed, the open nature of the democratic nations’ networks forces the West to apply pressure on the points of origin of such attacks. “NATO’s message is a strong sign to the nations that either harbor or turn a blind-eye to attackers on its soil that these malware campaigns will be taken very seriously.” Cyber Defense eMagazine – July 2021 Edition 52 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
The number of open positions in various cyber roles exceeds the number of people that are currently in the profession today, with some suggesting that there will be another 145% growth required over the next 5 years. Our current methods of identifying talent clearly aren’t able to keep up. The industry is also suffering from a somewhat polarizing perception of being a bro-network of hackers, at the fuzzy edge of ethics and laws. To change the math and attract new entrants, the industry needs new perspectives. The sheer number of people needed in cyber jobs do not align with the 4+ year timeline of college programs. The economy requires the ability to add people into the fight with months of training vs. years. One way we get people ready in months vs. years is to focus on learners that have the highest likelihood of internalizing the training and putting it to work on cyber battlefields. Typically, cyber training has a high percentage of washouts that either don’t complete the training or fail to transition into practice. Advances in cognitive testing around cyber would allow for more efficient deployment of training resources. Additionally, the same methods can give people with no technical background or prior experience, perhaps from philosophy or criminal justice, a pathway to becoming cyber warriors. NATO’s ability to meet this enemy on the multifaceted battlefield requires that we can find, train, and equip the cyber warriors. A revolution in talent development can get us there, if we move quickly. About the Author Doug Britton is the founding CEO of Haystack Solutions. Doug drew from his years in military intelligence and years as a cyber executive to craft a better way to find cyber talent. Haystack Solutions finds cyber genius using test methods developed for the US intelligence community and DOD, transferred out of the University of Maryland. Additionally, Doug is the CTO and a Director of RunSafe Security. As RunSafe’s CTO, Doug plays an essential role in showcasing how RunSafe’s technology changes the economics of cyber defense, and he has been instrumental in driving the RunSafe technology strategy and roadmap, the development of its patent portfolio and IP strategy, managing software development teams, and building a world-class security research team. Prior to RunSafe Security, Doug founded Kaprica Security which sold its Tachyon business to Samsung. He has also managed large-scale security research, reverse engineering, and exploit development programs for Lockheed Martin and SAIC. A trained computer scientist, Doug started his career in the National Center for Supercomputing Applications at the University of Illinois, before serving as a Russian Linguist and Interrogator in the US Army. He has also earned an MBA from the University of Maryland and mentors several entrepreneurs and students launching their business. Doug can be reached online at @CATA_Haystacks and at our company website http://www.haystacksolutions.com/ Cyber Defense eMagazine – July 2021 Edition 53 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2: Colonial Key Business Pipeline, Les
Page 3 and 4: Ransomware, the Ultimate Cyber Thre
Page 5 and 6: @MILIEFSKY From the Publisher… Ne
Page 7 and 8: Welcome to CDM’s July 2021 Issue
Page 9 and 10: Cyber Defense eMagazine - July 2021
Page 33 and 34: Colonial Pipeline, JBS Cyber Attack
Page 35 and 36: is clear: Cyberattacks will continu
Page 37 and 38: of management complexity for any bu
Page 39 and 40: Flipping the Cyber Script Getting A
Page 41 and 42: Trust strategies, they will prevent
Page 43 and 44: The growing threat In the last 12 m
Page 45 and 46: Common Sense Cybersecurity Steps fo
Page 47 and 48: The next big thing: addressing remo
Page 49 and 50: Applying PR tactics is a new page i
Page 51: NATO to Consider Military Response
Page 55 and 56: 3. Delivery - Transmission of the p
Page 57 and 58: Uncovering the Dark Side of the Col
Page 59 and 60: Energy and Utilities - You Have No
Page 61 and 62: a cyberattack that shut down approx
Page 63 and 64: Ransomware and the Cybersecurity In
Page 65 and 66: About the Author Jack Blount is Pre
Page 67 and 68: The airline industry’s poor recor
Page 69 and 70: Ransomware, the Ultimate Cyber Thre
Page 71 and 72: About the Author Yehudah Sunshine,
Page 73 and 74: A second reason for the increase in
Page 75 and 76: A Case of Identity: A New Approach
Page 77 and 78: Implementing a digital trust ecosys
Page 79 and 80: A 3-Part Plan for Getting Started w
Page 81 and 82: As threats continue to evolve, it
Page 83 and 84: 1. Endpoint and user protection Des
Page 85 and 86: The Risks of The Vulnerable Iot Dev
Page 87 and 88: Insecure Data Transfer and Storage
Page 89 and 90: Three Steps to Building Email Cyber
Page 91 and 92: Plan Ahead and Avoid Disaster The H
Page 93 and 94: NDR technology is built on three pr
Page 95 and 96: Hardware Trojan Detection By Sylvai
Page 97 and 98: the properties (user mode, memory a
Page 99 and 100: About the Author My Name is Sylvain
Page 101 and 102: outside coaches - to help them impr
Page 103 and 104:
Tips for Avoiding Online Scams Duri
Page 105 and 106:
Phishing Example 1 Phishing refers
Page 107 and 108:
About the Author Cindy Murphy is th
Page 109 and 110:
The recent Feedzai report confirms
Page 111 and 112:
Why Cyber Risk Is the Top Concern o
Page 113 and 114:
(BEC) attacks, also known as “fak
Page 115 and 116:
What Educational Institutions Need
Page 117 and 118:
Firewall Security VPN connectivity,
Page 119 and 120:
Business Continuity: Where InfoSec
Page 121 and 122:
● ● ● ● How educated are em
Page 123 and 124:
Biometrics Challenges By Milica D.
Page 125 and 126:
Epic V. Apple Trial - Impact of Big
Page 127 and 128:
About the Author Brad Ree is the Ch
Page 129 and 130:
eaches because large amounts of hig
Page 131 and 132:
• securing mobile and remote work
Page 133 and 134:
This topic has great relevance beca
Page 135 and 136:
I recommend that leaders of private
Page 137 and 138:
fail that promptly. After, say, sev
Page 139 and 140:
1. Infosecurity Europe Where: Olymp
Page 141 and 142:
leaders, and help each other advanc
Page 143 and 144:
Cyber Defense eMagazine - July 2021
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
You asked, and it’s finally here
Page 155 and 156:
9 Years in The Making… Thank You
Page 157 and 158:
show all

Cyber Defense eMagazine July 2021 Edition

Create successful ePaper yourself

Delete template?

Save as template?