#USCyberDefense

Washington’s Cybersecurity Storm of Complacency

by

November 14, 2024 at 10:03AM The Salt Typhoon cyber-espionage group’s breach of major US telecommunications firms highlights significant weaknesses in the nation’s cybersecurity strategy. The government’s reactionary approach and insufficient regulatory oversight allow state-backed threats to exploit vulnerabilities. Urgent reforms, including mandatory standards and a centralized defense agency, are essential to enhance national security. ### … Read more

Iranian hackers work with ransomware gangs to extort breached orgs

by

August 28, 2024 at 01:28PM Iranian hacking group Pioneer Kitten has been targeting defense, education, finance, and healthcare organizations in the US. They are collaborating with ransomware affiliates to extort victims. Based on the meeting notes, it appears that an Iran-based hacking group called Pioneer Kitten is actively breaching defense, education, finance, and healthcare organizations … Read more

MITRE: US Government Needs to Focus on Critical Infrastructure

by

June 17, 2024 at 08:45AM MITRE’s memo “Don’t Trust but Verify” outlines key priorities for the next US presidential administration in cyberspace. It emphasizes protecting critical infrastructure, implementing zero trust and SBOMs, preparing for quantum computing, and clarifying cybersecurity leadership roles. MITRE calls for specific actions and timelines to address these critical cyber defense areas. … Read more