Loading summary
Transcript1 lines
- [00:05]
A
A cyber attack disrupts European airports A scattered SPIDER member turns himself in to US authorities the Pentagon hires a new cyber policy leader and two Russian APTs work together for the first time. This is the Risky Bulletin prepared by Catalyn Kim Panu and read by me, Claire aird. Today is the 22nd of September and this podcast episode is brought to you by Spectrops, the experts in attack path management A cyber attack has disrupted multiple European airports. The attack this weekend brought down self service check in kiosks that are used to check in drop luggage and print boarding passes. Hundreds of flights have been delayed or cancelled. Affected airports include London's Heathrow, Berlin's Brandenburg and Brussels Airport. The incident impacted VMU's kiosks operated by Collins Aerospace. Disruptions are still ongoing. It's unclear who was behind the attack. In other news, U.S. immigration and Customs Enforcement has signed a $5 million contract with surveillance company Cobwebs. It provides tools to track activity on social media and the dark web. ICE also has active contracts with surveillance vendors Clearview, AI Paragon Solutions and Magnet Forensics. The US Senate has named Katherine Sutton as the next Assistant Secretary of Defence for Cyber Policy. Sutton replaces Laurie Buckhout, the only other person to hold the role after it was created in March last year. The position is a civilian role that advises the Department of Defence on cyber policy. The Pentagon wants to reduce its cybersecurity hiring window to 25 days. The department currently averages 670 days to hire new cyber employees. The acceleration in hiring efforts comes as the DoD says it's short almost 20,000 cyber professionals. A recent GAO report revealed that The Department of Defence's cyber workforce already totals more than 70,000 civilian and military staff. CISA wants international partners to contribute to the CVE Vulnerability management program. It didn't clarify what this would entail. Cisco CISA recently said it was looking to expand community partnerships for managing CVEs. The CVE database is run by the MITRE Corporation. CISA's funding lapsed briefly in April before being extended until March 2026. The EU is moving to exclude US tech companies from the Union's new financial data sharing system. Under a German proposal, companies like Amazon, Apple, Google and Meta will be barred from accessing this shared data. The Financial Data Access Regulation Framework is design to improve the sharing of data between financial entities. According to the Financial Times, US tech firms are unlikely to be successful in attempts to be granted access. The ban is part of the EU's new push for digital sovereignty. The Chinese government has ordered local companies to stop buying Nvidia chips, according to the Financial Times. Companies were told to stop tests and cancel future orders. The move is part of Beijing's efforts to boost the local semiconductor sector and reduce dependence on US suppliers. Last month, Chinese officials accused the US of trying to sneak backdoors into Nvidia chips. South Korea's second largest mobile operator has reported a recent security breach to authorities. Unknown individuals allegedly used two fake cell towers to collect data on more than 5,500 subscribers. Korea Telecom said attackers harvested IMSI and IMEI codes, as well as the phone numbers of nearby customers. KT discovered the breach after receiving reports of fraudulent micropayments from affected users. Canadian authorities have seized the cryptocurrency platform Trade Ogre. Authorities received a tip from Europol about the platform in 2024. Trade Ogre allegedly failed to register with authorities or identify its users, which enabled money laundering. Officials say they seized $40 million and plan to investigate transaction data. This is the first time that Canadian authorities have dismantled a cryptocurrency exchange platform. A member of the Scattered Spider hacking group has turned himself in to Las Vegas police. The teenage suspect was allegedly involved in hacking several Las Vegas casinos and hotels in 2023. He faces six felony charges. Two Russian cyber espionage groups have been seen working together for the first time. Both groups operate under the Russian FSB intelligence service, but within different regions. Gamaratin operates from Crimea, while Turla from Moscow. Cybersecurity firm ESET has seen one group's malware drop or restart the other group's payloads. Researchers believe. Gama Reddin is now working as an initial access provider for more complex Tirla operations. An Iranian cyber espionage group is targeting employees of EU telcos and defence organisations with failure fake jobs on LinkedIn, according to security firm Prodaft. One of the group's Recent campaigns infected 34 devices across 11 organisations. PRODAFT linked the attacks to a group it tracks, a subtle snail. The group has been active since at least 2022 and is believed to be part of the larger Charming Kitten operation. Fortra has patched a critical vulnerability in its Go Anywhere file transfer application. The vulnerability allows threat actors with a forged license response signature to execute deserial serialization attacks and run malicious commands on remote systems, according to Vulnchek. The flaw is almost identical to the Go Anywhere bug exploited by ransomware and extortion gangs in 2023. Fortra has urged customers to take their admin console offline and patch. The vulnerability has a severity rating of 10 and finally, LinkedIn will resume using the data of EU, Canadian and UK users to train its AI models. Late last year, the company halted using the data following pressure from EU privacy watchdogs. LinkedIn has updated its Terms of Service to state that data will be used from November 3rd. LinkedIn has been training its AI on US user data for almost a year. Users can opt out from having their data used and that is all for this podcast edition. Today's show was brought to you by our sponsor, Spectropps. Find them@Spectropsio. Thanks to your company.