Cybersecurity Essentials

Mitre ATT&CK

The cybersecurity market already top $100 billion per year and will reach $300 billion by 2024. With that kind of money at stake, this market is one of the hottest areas for IT innovation.

Top news of the week: 03.06.2021.

#cybersecurity
#infosec
#SolarWinds
#Sunburst
#ThreatIntel
#HSSEDI
#security
#mitreattack

Mitre Attack

@PatrickCMiller shared
On May 28, 2021
SolarWinds Hackers Impersonate U.S. Government Agency in New Attacks https://t.co/6i0AF1fpoI
Open
SolarWinds Hackers Impersonate U.S. Government Agency in New Attacks

SolarWinds Hackers Impersonate U.S. Government Agency in New Attacks

The Russia-linked SolarWinds hackers (Nobelium) are launching new attacks on the U.S. in a campaign that abuses a mass mailing service and impersonates a government agency.

@CSOonline shared
On Jun 2, 2021
The #Sunburst cyber-espionage campaign against #SolarWinds underscored the inherent risk of technology. One suggestion to reduce the risk: identify and secure linchpin systems. But that approach has challenges. https://t.co/AgWL9xHp7b @WendyNather @CISOHelen #cybersecurity
Open
Defining linchpins: An industry perspective on remediating Sunburst

Defining linchpins: An industry perspective on remediating Sunburst

The concept of linchpin software can be useful in assessing risk and focusing security efforts, but it comes with challenges.

@PatrickCMiller shared
On Jun 2, 2021
CISA-FBI Alert: 350 Organizations Targeted in Attack Abusing Email Marketing Service https://t.co/cUcSiXnP9V
Open
CISA-FBI Alert: 350 Organizations Targeted in Attack Abusing Email Marketing Service

CISA-FBI Alert: 350 Organizations Targeted in Attack Abusing Email Marketing Service

An alert released by the FBI and CISA warns that the SolarWinds hackers have abused an email marketing service to send malicious emails to 350 organizations.

@PatrickCMiller shared
On Jun 3, 2021
Creating a more resilient American infrastructure https://t.co/gcTHY9rjfu
Open
Creating a more resilient American infrastructure

Creating a more resilient American infrastructure

With the necessary reforms to modernize federal IT now clearer, it's critical to call out that the government has far too long relied on antiquated technologies that cannot thwart today's ...

@PatrickCMiller shared
On May 27, 2021
In-person cybersec training? Yes, it’s back on the agenda this year https://t.co/QF4WkiSX9K
Open
In-person cybersec training? Yes, it’s back on the agenda this year

In-person cybersec training? Yes, it’s back on the agenda this year

SANS brings you face to face with students and instructors – or virtually if you prefer

@hrbrmstr shared
On Jun 1, 2021
RT @adulau: We just released the first beta version (0.9) of the public API for @CycatP which provides a public API for cybersecurity resources You can easily lookup by UUID, namespace/id, relationships and keywords. #infosec #ThreatIntel https://t.co/a5ub5BMI4z https://t.co/SdpHgHBTmA
Open
CyCAT.org API services

CyCAT.org API services

CyCAT.org API back-end server including crawlers. Contribute to CyCat-project/cycat-service development by creating an account on GitHub.

@MITREcorp shared
On Jun 3, 2021
While MITRE ATT&CK is used by more than 80% of enterprises, many security professionals struggle to take full advantage of the knowledge base. #HSSEDI and @MITREattack worked with @CISAgov on this guidance about how to better use ATT&CK. https://t.co/JHrExWBQFP
Open
CISA Issues Guidance for Using MITRE ATT&CK® for Cyber Threat Intelligence

CISA Issues Guidance for Using MITRE ATT&CK® for Cyber Threat Intelligence

McLean, Va., and Bedford, Mass., June 2, 2021—The Cybersecurity and Infrastructure Security Agency (CISA) has partnered with the Homeland Security Systems Engineering and Development ...

@cybereason shared
On Jun 2, 2021
Collaboration is essential to improve cyber defenses for the global security community, which is why we have joined MITRE Engenuity's Center for Threat-Informed Defense. #mitreattack #infosec #security #cybersecurity https://t.co/XWAPUymhfe https://t.co/vWNlhvOHvY
Open
Cybereason Joins with MITRE Engenuity’s Center for Threat-Informed Defense

Cybereason Joins with MITRE Engenuity’s Center for Threat-Informed Defense

Cybereason is committed to working with the MITRE Engenuity Center for Threat-Informed Defense to develop better defense strategies that reverse the adversary advantage...