POPULARITY
On today's episode of The Buzz, we focus on the critical need for innovation and adaptability within the supply chain sector, particularly in the context of securing essential raw materials and addressing the challenges faced by women in the field. Welcome to The Buzz!This week, hosts Scott Luton and Koray Kose welcome the 2005 Interos.ai Women in Supply Chain award winners, Jennifer BIsceglie with Interos.ai, Jane Ganina with Telestat Canada, and Mahnoor Khokhar with Porter Airlines. Listen in as they discuss:An update on the aviation and farm equipment sectorsThe focus on securing critical raw materialsThe outstanding achievements of women in the supply chain field The importance of innovation, mentorship, and creating inclusive environments to attract and retain female talent in supply chain rolesThe strategic role of supply chain in organizations and the need for diverse skill sets to drive industry transformationJoin us as we explore actionable strategies that can reshape the future of supply chain management, ensuring resilience and inclusivity in a rapidly evolving global marketplace.Additional Links & Resources:With That Said: https://bit.ly/43HXxAkWhat Europe and North America Must Do to Avoid a Massive Critical Raw Material Shortfall: https://bit.ly/3Hm32giCheck out Easy Post's Forge: https://bit.ly/4dO1GqWThe Future of Supply Chain is Female: https://supplychaindigital.com/sustainability/parts-town-women-in-supply-chainKose Advisory: https://www.koseadvisory.com/Connect with Jennifer: https://www.linkedin.com/in/jennifer-bisceglie-3328b2Learn more about Interos.ai: https://www.interos.ai/Connect with Jane: https://www.linkedin.com/in/jane-ganina-877b8720/Learn more about Telestat Canada: https://www.telesat.com/Connect with Mahnoor: https://www.linkedin.com/in/mahnoor-khokhar-981298127/Learn more about Porter Airlines: https://www.flyporter.com/en-ca/Learn more about Supply Chain Now: https://supplychainnow.comWatch and listen to more Supply Chain Now episodes here: https://supplychainnow.com/program/supply-chain-nowSubscribe to Supply Chain Now on your favorite platform: https://supplychainnow.com/joinWork with us! Download Supply Chain Now's NEW Media Kit: https://bit.ly/3XH6OVkWEBINAR- Supply Chain Orchestration with SAP:
An AI governance framework for aerospace and defense, airlines pad flight times and improve on-time performance, record numbers of travelers over the Thanksgiving holiday, stowaways on airline flights, and executive-level cost-cutting at Boeing. Guest Tim White is the Vice President of Engineering and Technology at the Aerospace Industries Association (AIA), where he advocates for the technical workforce to policymakers. In this role, he leads AIA staff and members in identifying, developing, and executing consensus programs and activities aimed at enhancing cost savings, performance, and efficiency within the aerospace and defense industry. AIA Unveils AI Flight Plan Documenting Best Practices for AI Governance in Aerospace The AIA released the AI Flight Plan, Best Practices for AI Governance in Aerospace, a first-of-its-kind document outlining comprehensive best practices for the governance of Artificial Intelligence (AI) use for aerospace and defense. The framework outlines the elements of an AI governance program that targets three primary usages of AI in aerospace: Business operations enhancement Generative systems design and development Integration into customer-delivered products, software, and services. Tim has over 20 years of experience in operational and consulting roles within the aerospace and defense industry, having worked for companies such as Raytheon, Honeywell, and Bechtel. Throughout his career, he has contributed to commercial and defense products and held leadership positions in Engineering, Operations, Supply Chain, and Quality. Most recently, he has collaborated with advanced technology companies like Interos and Mosaic Data Sciences, focusing on delivering cutting-edge solutions in artificial intelligence, advanced analytics, and digital transformation. Tim holds a Bachelor of Science and Master of Science in Mechanical Engineering, an MBA from Brigham Young University, and a Ph.D. in Systems Engineering from George Washington University. He is also certified in Six Sigma, Root Cause Analysis, and Change Leadership. Related articles: UK CAA announces new AI strategy for aviation sector IAG: How AI is Impacting the Aviation Industry GE Aerospace Develops AI Maintenance Records Tool Aviation News Airlines Are Padding Flight Times. It's Not Your Imagination According to a NYT Upshot analysis of Bureau of Transportation Statistics data, airlines strategically add extra time to their flight schedules, effectively "padding" their flight durations. This leads to a higher percentage of flights arriving on time or early even if the actual flight time hasn't significantly changed. This improves airline on-time performance metrics. Jammed Thanksgiving Flights Push U.S. Air Travel to Record The Transportation Security Administration said it screened about 3.09 million people on Sunday, the peak of the busy Thanksgiving travel period. The previous record set in July was 3.01 million travelers. The TSA reports that their 10 busiest days were recorded in 2024. Stowaway caught after getting aboard Delta flight from New York City to Paris The woman, a U.S. resident, boarded a Delta flight from JFK to Paris Charles de Gaulle Airport and was discovered midair. She had been hiding out in the lavs and the flight attendants noticed the strange behavior. The TSA said the woman passed through a body scanner at JFK, evaded the document and ID check portion, had her bags scanned, proceeded to the gate, and snuck onto the flight. The Delta Paris Stowaway Incident Keeps Getting Stranger - The stowaway was a 57-year-old woman living in the Philadelphia area. She's a Russian national who holds a US Green Card. She requested asylum in Paris, which was rejected. The woman was placed on a return flight but pulled off after a disruptive outburst. Is Delta the Official Airline of Stowaways? - This was not the only stowaway incident involving Delta Air Lines...
Each year, supply chain disruptions cost the global economy trillions of dollars. In a recent McKinsey poll, nine in ten businesses said they had encountered logistics challenges over the past 12 months. Headwinds have only grown stronger as chaos reigns in key shipping corridors. Learn more about your ad choices. Visit podcastchoices.com/adchoices
*Hosted by Andrei Palamariu*In this episode, I interviewed Jennifer Bisceglie, Founder and CEO of Interos. We started the discussion with some of the highlights of Jennifer's career—starting a company 19 years ago. Jennifer emphasizes the importance of transparency in the supply chain, mentioning how technology helps. Discover more details here.Questions I asked:What makes Interos different from other players in the space?How does Interos help supply chains in terms of cost saving?How does Interos' system help in addressing disruptions like climate change and geopolitical instability?How do you address the challenges of demand forecasting and allocating inventory?How do you manage the resistance from the organization during the implementation of your solution?What advice would you give supply chain leaders in terms of risk management?Follow us on:Instagram: http://bit.ly/2Wba8v7Twitter: http://bit.ly/2WeulzXLinkedin: http://bit.ly/2w9YSQXFacebook: http://bit.ly/2HtryLd
An Apache vulnerability is being used to install ransomware. Exploitation of Citrix vulnerability in the wild. AP sustains DDoS attack. HHS reaches settlement in HIPAA data breach incident. More evidence of OSINT's reach. On the Solution Spotlight: Simone Petrella and Rick Howard speak with Ben Rothke about his article and thoughts on "Is there really an information security jobs crisis?" Andrea Little Limbago from Interos joins us to discuss SEC and the disclosure rules. And, Microsoft draws a lesson from Russia's war: cyber defense now has the advantage over cyber offense. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/12/211 Selected reading. Critical Apache ActiveMQ Vulnerability Exploited to Deliver Ransomware (SecurityWeek) HelloKitty ransomware now exploiting Apache ActiveMQ flaw in attacks (BleepingComputer) Critical Vulnerability: Exploitation of Apache ActiveMQ CVE-2023-46604 (Huntress) Suspected Exploitation of Apache ActiveMQ CVE-2023-46604 (Rapid7) HHS' Office for Civil Rights Settles Ransomware Cyber-Attack Investigation (U.S. Department of Health and Human Services) AP news site hit by apparent denial-of-service attack (AP News) Associated Press hit by Anonymous Sudan DDoS attack? (Tech Monitor) Satellites and social media offer hints about Israel's ground war strategy in Gaza (NPR) Revisiting the Gaza Hospital Explosion (New York Times) Microsoft Vows to Revamp Security Products After Repeated Hacks (Bloomberg) A new world of security: Microsoft's Secure Future Initiative (Microsoft On the Issues) Announcing Microsoft Secure Future Initiative to advance security engineering (Microsoft Security) Ukraine at D+617: Advantage defense. (CyberWire) Learn more about your ad choices. Visit megaphone.fm/adchoices
NSA and CISA release a list of the ten most common misconfigurations along with Identity and access management guidelines. The Predator Files. Cyber cooperation between Russia and North Korea. Hacktivist auxiliaries hit Australia. Hacktivists and hacktivist auxiliaries scorn the application of international humanitarian law. The direction of Russian cyber operations. Dave Bittner speaks with Andrea Little Limbago from Interos to talk about geopolitics, cyber and the C-suite. Rick Howard talks with John Hultquist, Chief Analyst at Mandiant, at the mWISE 2023 Cybersecurity Conference about cyber threat intelligence. And, finally, adventures in catphishing: “LoveGPT.” For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/12/192 Selected reading. NSA and CISA Release Advisory on Top Ten Cybersecurity Misconfigurations (Cybersecurity and Infrastructure Security Agency CISA) CISA and NSA Release New Guidance on Identity and Access Management (Cybersecurity and Infrastructure Security Agency CISA) Microsoft Digital Defense Report 2023 (Microsoft) Predator Files | EIC (European Investigative Collaborations) Meet the ‘Predator Files,' the latest investigative project looking into spyware (Washington Post) NORTH KOREA–RUSSIA SUMMIT : A NEW ALLIANCE IN CYBERSPACE? - CYFIRMA (CYFIRMA) Australia's home affairs department hit by DDoS attack claimed by pro-Russia hackers (the Guardian) Pro-Russia hacktivist group targets Australian government agencies over support for Ukraine (Cyberdaily.au) Home Affairs, Administrative Appeals Tribunal websites hit by cyber attacks (SBS News) ‘War has no rules': Hacktivists scorn Red Cross' new guidelines (Record) Espionage fuels global cyberattacks (Microsoft On the Issues) LoveGPT: How “single ladies” looking for your data upped their game with ChatGPT (Avast Threat Labs) Learn more about your ad choices. Visit megaphone.fm/adchoices
There's a new sophistication in BEC campaigns. Trends in brand impersonation–crooks still like to pretend they're from Redmond. The future of Russian influence operations in the post-Prigozhin era. Andrea Little Limbago from Interos shares insights on the new cyber workforce strategy. In our latest Threat Vector segment David Moulton of Palo Alto Networks is joined by Stephanie Ragan, Senior Consultant at Unit 42 to discuss Muddled Libra. And more on the doxing of a deputy Duma chair, who seems to have been selling hot iPhones as a side hustle (maybe). And the growing problem of Synthetic identity fraud. On this segment of Threat Vector, Stephanie Ragan, Senior Consultant at Unit 42, joins host David Moulton to discuss Muddled Libra. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/12/162 Selected reading. BEC Trends: Payroll Diversion Dominates and Sneaky Multi-Persona Attacks Emerge (Trustwave) Q2 2023 Threat Landscape Report: All Roads Lead to Supply Chain Infiltrations (Kroll) Microsoft Impersonated Most in Phishing Attacks Among Nearly 350 Brands (Abnormal Security) TransUnion Analysis Finds Synthetic Identity Fraud Growing to Record Levels (TransUnion) Ukraine at D+546: Yevgeny Prigozhin dies in a plane crash. (CyberWire) Without Prigozhin, expect some changes around the edges on Russian influence operations (Washington Post) 2023 H1 Global Threat Analysis Report (Radware) Lapsus$: Court finds teenagers carried out hacking spree (BBC News) British court convicts two teen Lapsus$ members of hacking tech firms (Record) Treasury Designates Roman Semenov, Co-Founder of Sanctioned Virtual Currency Mixer Tornado Cash (U.S. Department of the Treasury) Tornado Cash Founders Charged With Money Laundering And Sanctions Violations (U.S. Attorney for the Southern District of New York) Russian Duma leader's emails hacked and leaked (Cybernews) Ukrainian hackers expose money laundering and sanction evasion by senior Russian politician (teiss) Learn more about your ad choices. Visit megaphone.fm/adchoices
North Korean cyberespionage against a Russian aerospace firm. The Reptile rootkit is used against South Korean systems. An update on Cloudzy. Cl0p is using torrents to move data stolen in MOVEit exploitation. Andrea Little Limbago from Interos wonders about the dangers of jumping head first into new technologies? Rick Howard ponders quantum computing. And Meduza is back on Apple Podcasts. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/12/149 Selected reading. Exclusive: North Korean hackers breached top Russian missile maker (Reuters) North Korean hackers stole secrets of Russian hypersonic missile maker (Euractiv) Comrades in Arms? | North Korea Compromises Sanctioned Russian Missile Engineering Company (SentinelOne) Reptile Rootkit: Advanced Linux Malware Targeting South Korean Systems (The Hacker News) UPDATE: Cloudzy Command and Control Provider Report (Halcyon) Reptile Rootkit: Advanced Linux Malware Targeting South Korean Systems (The Hacker News) Clop ransomware now uses torrents to leak data and evade takedowns (BleepingComputer) Ukraine may be winning ‘world's first cyberwar' (The Kyiv Independent) Apple has removed Meduza's flagship news podcast ‘What Happened' from Apple Podcasts, without explaining the reason (Meduza)
US and Canadian agencies warn of Truebot. A look at "Operation Brainleaches." Jumpcloud resets API keys. An update on the MOVEit vulnerability exploitation. Andrea Little Limbago from Interos shares insights on rising geopolitical instability. Our guest is Mike Hamilton from Critical Insight discussing what you need to know about NIST 2.0. OSCE trains Ukrainian students in cybersecurity. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/12/128 Selected reading. CISA and Partners Release Joint Cybersecurity Advisory on Newly Identified Truebot Malware Variants (Cybersecurity and Infrastructure Security Agency CISA) Increased Truebot Activity Infects U.S. and Canada Based Networks | CISA (Cybersecurity and Infrastructure Security Agency CISA) Operation Brainleeches: Malicious npm packages fuel supply chain and phishing attacks (ReversingLabs) Mandatory JumpCloud API Key Rotation (JumpCloud) JumpCloud resets admin API keys amid ‘ongoing incident' (BleepingComputer) JumpCloud Says All API Keys Invalidated to Protect Customers (SecurityWeek) More organizations confirm MOVEit-related breaches as hackers claim to publish stolen data (TechCrunch) Important information about MOVEit Transfer cyber security incident | Shell Global (Shell Global) Shell Confirms MOVEit-Related Breach After Ransomware Group Leaks Data (SecurityWeek) OSCE helps future generation of Ukraine's law enforcers and emergency personnel build skills for safe work in cyberspace (OSCE)
Today on All Quiet, Tyler is joined by Dave Ferris, the Director of Global Public Sector Capture at Interos Inc. Interos uses AI to help companies reinvent their supply chain management. By supplying data to help Interos' AI tech helps reduce risk, avoid disruptions, and achieve superior enterprise adaptability. In this episode, Dave gives us supply chain 101 on how AI now has the power to give companies the ability to plan in advance of supply chain interferences in ways that were previously incalculable. What's Happening on the Second Front:What Dave wishes he had learned earlier in his careerLoathing the government's lack of urgency around supply chain issuesAcknowledging the recent increase of collaboration between industry and governmentHow automation helps mitigate potential supply chain disruptionsConnect with Dave:LinkedIn: Dave FerrisWebsite: interos.aiConnect with Tyler:LinkedIn: Tyler Sweatt Website: secondfront.comCatch 2F's Offset Symposium replay here. This show is produced by Soulfire Productions
ChatGPT takes an unexpectedly human turn in having its own version of hallucinations. Updates on Cl0p's ransom note, background, and recent promises. Researchers look at Instagram's role in promoting CSAM. A look at KillNet's reboot. Andrea Little Limbago from Interos shares insight on cyber's human element. Our guest is Aleksandr Yampolskiy from SecurityScorecard on how CISOs can effectively communicate cyber risk to their board. And a hacktivist auxiliary's stellar advice for protecting your data. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/12/110 Selected reading. Can you trust ChatGPT's package recommendations? (Vulcan) Ransomware group Clop issues extortion notice to ‘hundreds' of victims (The Record) MOVEit cyber attack: Cl0p sparks speculation that it's lost control of hack (ITpro) Responding to the Critical MOVEit Transfer Vulnerability (CVE-2023-34362) (Kroll) MOVEit Transfer Critical Vulnerability (May 2023) (Progress) Cybergang behind N.S. breach says it erased stolen data, but experts urge caution (CBC Canada) Most SMBs admit to paying ransomware demands - here's why (TechRadar) Instagram Connects Vast Pedophile Network (Wall Street Journal) Addressing the distribution of illicit sexual content by minors online (Stanford University) Rebooting Killnet, a New World Order and the End of the Tesla Botnet (Radware)
China's Volt Typhoon snoops into US infrastructure, with special attention paid to Guam. Iranian cybercriminals are seen conducting ops against Israeli targets. A new ransomware gang uses recycled ransomware. A persistent Brazilian campaign targets Portuguese financial institutions. A new botnet targets the gaming industry. Phishing attempts impersonate OpenAI. Pro-Russian geolocation graffiti. Andrea Little Limbago from Interos addresses the policy implications of ChatGPT. Our guest is Jon Check from Raytheon Intelligence & Space, on cybersecurity and workforce strategy for the space community. And KillNet says no to slacker hackers. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/12/101 Selected reading. People's Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection (Joint Advisory) Volt Typhoon targets US critical infrastructure with living-off-the-land techniques (Microsoft) Chinese hackers spying on US critical infrastructure, Western intelligence says (Reuters) Agrius Deploys Moneybird in Targeted Attacks Against Israeli Organizations (Check Point) Iran-linked hackers Agrius deploying new ransomware against Israeli orgs (The Record) Iranian Hackers Set Sights On Israeli Shipping & Logistics Firms (Information Security Buzz) Fata Morgana: Watering hole attack on shipping and logistics websites (ClearSky Security) Iran suspect in cyberattack targeting Israeli shipping, financial firms (Al-Monitor) Buhti: New Ransomware Operation Relies on Repurposed Payloads (Symantec) Operation Magalenha | Long-Running Campaign Pursues Portuguese Credentials and PII (SentinelOne) The Dark Frost Enigma: An Unexpectedly Prevalent Botnet Author Profile (Akamai) Fresh Phish: ChatGPT Impersonation Fuels a Clever Phishing Scam (INKY)
BlackCat (ALPHV) follows Cl0p, exploiting the GoAnywhere MFA vulnerability. The Mirai botnet exploits a vulnerability disclosed at Pwn2Own. An RSAC presentation describes US response to Russian prewar and wartime cyber operations. The US Department of Homeland Security outlines cyber priorities. Andrea Little Limbago from Interos shares insights from her RSAC 2023 panels. US indicts, sanctions DPRK operators in crypto-laundering campaign. My guest is Marc van Zadelhoff, CEO of Devo, with insights from the conference. And the latest on KillNet. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/12/79 Selected reading. BlackCat Ransomware Group Exploits GoAnywhere Vulnerability (At-Bay) Zero Day Initiative — TP-Link WAN-side Vulnerability CVE-2023-1389 Added to the Mirai Botnet Arsenal (Zero Day Initiative) Years after discovery of SolarWinds breach, Russian hackers could be struggling (Washington Post) U.S. deploys more cyber forces abroad to help fight hackers (Reuters) DHS Outlines Cyber Priorities in Release of Delayed Review (Nextgov.com) US sanctions supporters of North Korean hackers, Iranian cyberspace head (Record) North Korean Foreign Trade Bank Rep Charged for Role in Two Crypto Laundering Conspiracies (Department of Justice. U.S. Attorney's Office District of Columbia) Treasury Targets Actors Facilitating Illicit DPRK Financial Activity in Support of Weapons Programs (U.S. Department of the Treasury)
Cuba ransomware pulls in $60 million. CISA releases three ICS advisories. DDoSing the Vatican. Andrea Little Limbago from Interos on the implications of Albania cutting off diplomatic ties with Iran. Our space correspondent Maria Varmazis speaks with Brandon Bailey about Space Attack Research and Tactic Analysis matrix. And how Google supports Ukrainian startups in wartime. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/230 Selected reading. Alert (AA22-335A) #StopRansomware: Cuba Ransomware (CISA) Novel News on Cuba Ransomware: Greetings From Tropical Scorpius (Palo Alto Networks Unit 42) New ways we're supporting Ukraine (Google) 25 new startup recipients of the Ukraine Support Fund (Google) Vatican shuts down its website amid hacking attempts (Cybernews)
Election security on the eve of the US midterms. US FBI rates hacktivist contributions to Russia's war as unimportant. Microsoft accuses China of using vulnerability disclosure to develop zero-days. Andrea Little Limbago from Interos addresses accountability for breaches. Our guest is Michelle Amante from the Partnership for Public Service on their Cybersecurity Talent Initiative. And, finally, remember SIlk Road? The Feds do. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/214 Selected reading. Hacktivists Use of DDoS Activity Causes Minor Impacts (FBI) The government says it won't flag election disinformation on Twitter and other social platforms (Washington Post) What to Expect When You are Expecting an Election (CISA) Hacktivists Use of DDoS Activity Causes Minor Impacts (FBI) Nation-state cyberattacks become more brazen as authoritarian leaders ramp up aggression (Microsoft On the Issues) U.S. Attorney Announces Historic $3.36 Billion Cryptocurrency Seizure And Conviction In Connection With Silk Road Dark Web Fraud (U.S. Attorney's Office for the Southern District of New York)
Sudan closes its Internet as the country sees protests on the first anniversary of a coup. A Chinese influence campaign targets US elections. A software supply chain security study, and a look at vulnerability scanning tools. Documenting cyber war crimes in Ukraine. CISA issues eight ICS Advisories. Andrea Little Limbago from Interos on the effects of water scarcity on data centers. And if you'll indulge us, we've got some pretty exciting CyberWire news. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/206 Selected reading. Internet is shut down in Sudan on anniversary of military coup (The Record by Recorded Future) Pro-PRC DRAGONBRIDGE Influence Campaign Leverages New TTPs to Aggressively Target U.S. Interests, Including Midterm Elections (Mandiant) Rezilion Vulnerability Scanner Benchmark Report Finds Top Scanners Only 73% Accurate (PR Newswire) Four in Five Software Supply Chains Exposed to Cyberattack in the Last 12 Months (BlackBerry) Ukraine Documenting Russian Hacks, Eyeing International Charges (Bloomberg) CISA Releases Eight Industrial Control Systems Advisories (CISA)
Refund fraud as a service. Costs of a nuisance. Remaining on alert during a hybrid war. Renewed activity by Polonium. Andrea Little Limbago from Interos discussing quantum computing policy. CyberWire Space Correspondent Maria Varmazis speaks with Dr. Gregory Falco on lessons learned from Russia's attack on Viasat. Reflections on the Uber case's impact on security professionals. And when it comes to phishing-as-a-service, we'll take decaf. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/196 Selected reading. The Fresh Phish Market: Behind the Scenes of the Caffeine Phishing-as-a-Service Platform (Mandiant) Caffeine phishing. (CyberWire) Refund Fraud as a Service (Netacea) Amid reports of JP Morgan cyberattack, experts call Killnet unsophisticated, ‘media hungry' (SC Media) Hacktivists Force Companies to Respond to Low-Level Cyberattacks (Wall Street Journal) Nato warns Russian sabotage on Western targets 'could trigger Article 5' (The Telegraph) US Not Ruling Out Russian Cyber Offensive (VOA) Ukraine at D+230: Escalation, but unlikely to be sustainable. (CyberWire) POLONIUM targets Israel with Creepy malware (WeLiveSecurity) Hacking group POLONIUM uses ‘Creepy' malware against Israel (BleepingComputer) Security chiefs fear ‘CISO scapegoating' following Uber-Sullivan verdict (The Record) Sullivan verdict sends shockwaves through the security industry (Security Info Watch) Reflections on the Uber case's impact on security. (CyberWire)
Shifting cyber threats during Russia's war against Ukraine. A Twitter exploit may have compromised more than 5 million accounts. A Cyberattack disrupts NHS 111. Developments in the C2C market. An alleged Russian cryptocurrency exchange operator is extradited to the US. Rick Howard looks at FinTech. Andrea Little Limbago from Interos on Industrial policy and the tech divide. And a Crypto mixing service has been sanctioned by the US Treasury Department. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/150 Selected reading. ESET Threat Report T 1 2022 (WeLiveSecurity) Twitter confirms zero-day used to expose data of 5.4 million accounts (BleepingComputer) NHS 111 software outage confirmed as cyber-attack (BBC News) Ministers coordinate response after cyber-attack hits NHS 111 (the Guardian) Thousands of hackers flock to 'Dark Utilities' C2-as-a-Service (BleepingComputer) Attackers leveraging Dark Utilities "C2aaS" platform in malware campaigns (Cisco Talos) Genesis Brings Polish to Stolen-Credential Marketplaces (Sophos) Cyber-related Designation (U.S. Department of the Treasury) U.S. imposes sanctions on virtual currency mixer Tornado Cash (Reuters) Crypto Mixing Service Tornado Cash Blacklisted by US Treasury (CoinDesk) Alleged Russian Cryptocurrency Money Launderer Extradited to United States (US Department of Justice) Russian accused of money laundering and running $4B bitcoin exchange extradited to US | CNN Politics (CNN)
The minor mystery of GPS-jamming. Twitter investigates an apparent data breach. Ransomware command and control staging is discovered. Andrea Little Limbago from Interos looks at the intersection of social sciences and cyber. Our guest is Nelly Porter from Google Cloud on the emerging idea of confidential computing. A C2C offering restricted to potential privateers. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/138 Selected reading. Why Isn't Russia jamming GPS harder in Ukraine? (C4ISRNet) Twitter data breach exposes contact details for 5.4M accounts; on sale for $30k (9to5Mac) Twitter investigating authenticity of 5.4 million accounts for sale on hacking forum (The Record by Recorded Future) Russian Ransomware C2 Network Discovered in Censys Data (Censys) Researcher finds Russia-based ransomware network with foothold in U.S. (The Record by Recorded Future) New Cross-Platform 'Luna' Ransomware Only Offered to Russian Affiliates (SecurityWeek)
Killnet hits Norwegian websites. Hacktivists are tied to Russia's government. Amunet as a case study in C2C market differentiation. C2C commodification extends to script kiddies. Andrea Little Limbago from Interos examines borderless data. Rick Howard speaks with Cody Chamberlain from NetSPI on Breach Communication. Roscosmos publishes locations of Western defense facilities…and subsequently says it sustained a DDoS attack. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/125 Selected reading. Pro-Russian hacker group says it attacked Norway (The Independent Barents Observer) Cyberattack hits Norway, pro-Russian hacker group fingered (AP NEWS) Norway blames "pro-Russian group" for cyber attack (Reuters) Mandiant Finds Possible Link Between Kremlin, Pro-Russian ‘Hacktivists' (Bloomberg) Market Differentiation: Cybercriminal Forums' Unusual Features Designed To Attract Users (Digital Shadows) Minors Use Discord Servers to Earn Extra Pocket Money Through Spreading Malware (PR Newswire) Russia publishes Pentagon coordinates, says Western satellites 'work for our enemy' (Reuters) Russian Space Agency Targeted in Cyberattack (Wall Street Journal) Cyberattack hits Russian space agency site after sharing NATO photos (Jerusalem Post)
Fancy Bear sighted in Ukrainian in-boxes. Why Russian cyberattacks against Ukraine have fallen short of expectations. ToddyCat APT is active in European and Asian networks. ICEFALL ICS vulnerabilities described. CISA issues ICS vulnerability advisories. Europol makes nine collars. Andrea Little Limbago from Interos on The global state of data protection and sharing. Rick Howard speaks with Michelangelo Sidagni from NopSec on the Future of Vulnerability Management. We are shocked, shocked, to hear of corruption in the FSB For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/119 Selected reading. Ukrainian cybersecurity officials disclose two new hacking campaigns (CyberScoop) Ukraine Warns of New Malware Campaign Tied to Russian Hackers (Bloomberg Law) Russian govt hackers hit Ukraine with Cobalt Strike, CredoMap malware (BleepingComputer) Opinion How Russia's vaunted cyber capabilities were frustrated in Ukraine (Washington Post) New Toddycat APT Targets MS Exchange Servers in Europe and Asia (Infosecurity Magazine) Microsoft Exchange servers hacked by new ToddyCat APT gang (BleepingComputer) OT:ICEFALL: 56 Vulnerabilities Caused by Insecure-by-Design Practices in OT (Forescout) From Basecamp to Icefall: Secure by Design OT Makes Little Headway (SecurityWeek) Dozens of vulnerabilities threaten major OT device makers (Cybersecurity Dive) CISA releases 6 Industrial Control Systems Advisories (Cybersecurity and Infrastructure Security Agency) Phishing gang behind several million euros worth of losses busted in Belgium and the Netherlands (Europol) Подполковника УФСБ по Самарской области арестовали за кражу криптовалюты у хакера (TASS)
US officials continue to rate the threat of Russian cyberattack as high. Civilians in cyber war. Broadcast interference and propaganda. A Joint CISA/FBI warning of Chinese cyberespionage. What gets a vulnerability into the Known Exploited Vulnerabilities Catalog? Andrea Little Limbago from Interos and Mike Sentonas from Crowdstrike join us with previews of their RSA conference presentations. And, finally, some Jersey-based cyber campaigns (that's the Bailiwick, not the Garden State). For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/110 Selected reading. Russian Cyber Threat Remains High, U.S. Officials Say (Wall Street Journal) Shields Up: The New Normal (CyberScoop) Russian Government, Cybercriminal Cooperation a 'Force Multiplier' (Decipher) Opinion The U.S.-Russia conflict is heating up — in cyberspace (Washington Post) Smartphones Blur the Line Between Civilian and Combatant (Wired) Russian Cyberattack Hits Wales-Ukraine Football Broadcast (Gov Info Security) People's Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices (CISA) US agencies detail the digital ‘plumbing' used by Chinese state-sponsored hackers (The Record by Recorded Future) CISA Provides Criteria and Process for Updates to the KEV Catalog (CISA) Reducing the Significant Risk of Known Exploited Vulnerabilities (CISA) Jersey computers used in international cyber-attacks (Jersey Evening Post)
Jennifer Bisceglie, founder and CEO of Interos, joins Aileen Black on Leaders and Legends to explain how she turned a small startup into a dynamic supply chair risk management and operational resilience company.
On this episode of the Great Indoors, Matt sits down with Andrea Little Limbago, a computational social scientist who specializes in the intersection of technology, national security and society. Andrea spent time doing computational modeling for the U.S. Department of Defense before working in cyber security at various startups for about a decade. Her experience has culminated in her current role as the Vice President of Research and Analysis at Interos, where she leads the team that models the range of supply chain risks. Andrea has also earned a Ph.D. in Political Science from the University of Colorado at Boulder. During the episode, she explains why the supply chain has seen so much disruption in recent years, why this is such a major problem for people around the world, and how we might overcome these issues in the future. Andrea also provides an overview of the term digital authoritarianism, what it means, and its implications for our society.This podcast episode was produced by Quill.
Ian King speaks to the CEO of the employee benefits provider Unum UK about how vacancies have risen to a record high. Plus, hear from the founder of supply chain risk management company, Interos, about how the war in Ukraine has caused major disruption. And chair of literacy charity Bookmark joins the show to discuss how it's trying to supply 5,000 book boxes to Ukrainian children arriving in the UK.
MLOps Coffee Sessions #91 with Joseph Haaga, The Shipyard: Lessons Learned While Building an ML Platform / Automating Adherence. // Abstract Joseph Haaga and the Interos team walk us through their design decisions in building an internal data platform. Joseph talks about why their use case wasn't a fit for off the self solutions, what their internal tool snitch does, and how they use git as a model registry. Shipyard blogpost series: https://medium.com/interos-engineering. // Bio Joseph leads the ML Platform team at Interos, the operational resilience company. He was introduced to ML Ops while working as a Senior Data Engineer and has spent the past year building a platform for experimentation and serving. He lives in Washington, DC, with his dog Cheese. // MLOps Jobs board https://mlops.pallet.xyz/jobs // Related Links Website: https://joehaaga.xyz Medium: https://medium.com/interos-engineering Shipyard blogpost series: https://medium.com/interos-engineering --------------- ✌️Connect With Us ✌️ ------------- Join our slack community: https://go.mlops.community/slack Follow us on Twitter: @mlopscommunity Sign up for the next meetup: https://go.mlops.community/register Catch all episodes, blogs, newsletters, and more: https://mlops.community/ Connect with Demetrios on LinkedIn: https://www.linkedin.com/in/dpbrinkm/ Connect with Vishnu on LinkedIn: https://www.linkedin.com/in/vrachakonda/ Connect with Joseph on LinkedIn: https://www.linkedin.com/in/joseph-haaga/ Timestamps: [00:00] Introduction to Joseph Haaga [02:07] Please subscribe, follow, like, rate, review our Spotify and Youtube channels [02:31] New! Best of Slack Weekly Newsletter [03:03] Interos [04:33] Global supply chain [05:45] Machine Learning use cases of Interos [06:17] Forecasting and optimization of routes [07:14] Build, buy, open-source decision making [10:06] Experiences with Kubeflow [11:05] Creating standards and rules when creating the platform [13:29] Snitches [14:10] Inter-team discussions when processes fall apart [16:56] Examples of the development process on the feedback of ML engineers and data scientists [20:35] Preserving flexibility when introducing new models and formats [21:37] Organizational structure of Interos [23:40] Surface area for product [24:46] Use of Git Ops to manage boarding pass [28:04] Cultural emphasis [30:02] Naming conventions [32:28] Benefit of a clean slate [33:16] One-size-fits-all choice [37:34] Wrap up
Interos is the operational resilience company, reinventing how companies manage their supply chains and business relationships. We had the pleasure to talk with Stuart Phillips, Product Marketing Director, Cybersecurity to discuss all the attention around supply chain security, greatest threats, and the key issue when it comes to security throughout the supply chain. Stuart shares how organizations can build a holistic approach to security, and has some interesting predictions for what's ahead.
Russia's invasion of Ukraine, and the sanctions that followed, have radically impacted supply chains around the world — with high-tech supply chains at particular risk. Jennifer Bisceglie, CEO of Interos, a risk-management firm focused on supply chains, has seen her company's risk dashboards light up in new and far-reaching ways. Many businesses are more exposed than they realize, she says. Driven by this disruption, a more sophisticated supply chain is coming together in real-time. Those who get on board now, she says, will have a competitive advantage in the long run.Read a transcript of this episode: https://mastersofscale.comSubscribe to the Masters of Scale weekly newsletter: http://eepurl.com/dlirtXSee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
Russia's invasion of Ukraine, and the sanctions that followed, have radically impacted supply chains around the world — with high-tech supply chains at particular risk. Jennifer Bisceglie, CEO of Interos, a risk-management firm focused on supply chains, has seen her company's risk dashboards light up in new and far-reaching ways. Many businesses are more exposed than they realize, she says. Driven by this disruption, a more sophisticated supply chain is coming together in real-time. Those who get on board now, she says, will have a competitive advantage in the long run.Read a transcript of this episode: https://mastersofscale.comSubscribe to the Masters of Scale weekly newsletter: http://eepurl.com/dlirtXSee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
Attempting to evolve rules of cyber conduct during a hot hybrid war. Waiting for major Russian cyber operations. Viasat terminals were hit by wiper malware. Patches and detection scripts for Spring4shell. Warning of ransomware threat to local governments. Emergency data requests under Senatorial scrutiny. NSA employee charged with mishandling classified material. Andrea Little Limbago from Interos on Bots, Warriors and Trolls. Rick Howard speaks with Maretta Morovitz on cyber deception. And no April Foolin' here For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/63 Selected reading. Russia's War Lacks a Battlefield Commander, U.S. Officials Say (New York Times) Putin may be self-isolating from his military advisers, says White House (The Telegraph) Confronting Russian Cyber Censorship (Wilson Center) Zelensky Fires Two Generals (Wall Street Journal) French intelligence chief Vidaud fired over Russian war failings (BBC News) Cyber War Talks Heat Up at UN With Russia at Table (Bloomberg.com) Foreign Ministry statement on continued cyberattack by the “collective West” (Ministry of Foreign Affairs of the Russian Federation) New Protestware Found Lurking in Highly Popular NPM Package (Checkmarx.com) Russia targeting Ukraine, countries opposing war in cyberspace (Jerusalem Post) Conti Leaks: Examining the Panama Papers of Ransomware (Trellix) British intelligence agencies: Moscow continuously attacks Ukraine in cyberspace (The Times Hub) AcidRain | A Modem Wiper Rains Down on Europe (SentinelOne) SentinelOne finds ties between Viasat hack and Russian actor (SC Magazine) ExtraHop CEO: Expect a Russian cyber response to sanctions (Register) Treasury sanctions Russian research center blamed for Trisis malware (CyberScoop) Treasury Targets Sanctions Evasion Networks and Russian Technology Companies Enabling Putin's War (U.S. Department of the Treasury) Evgeny Viktorovich Gladkikh – Rewards For JusticeArtboard 4Artboard 4 (Rewards for Justice) Spring confirms ‘Spring4Shell' zero-day, releases patched update (The Record by Recorded Future) Spring4Shell (CVE-2022-22965): Are you vulnerable to this Zero Day? (Cyber Security Works) Ransomware Attacks Straining Local US Governments and Public Services (IC3) Senate's Wyden Probes Use of Forged Legal Requests by Hackers (Bloomberg) NSA Employee Charged with Mishandling Classified Material (Military.com) National Security Agency Employee Indicted for Willful Transmission and Retention of National Defense Information (US Department of Justice) National Security Agency Employee Facing Federal Indictment for Willful Transmission and Retention of National Defense Information (US Department of Justice)
Las cadenas de suministro globales han vuelto a tensionarse con la invasión de Ucrania. La guerra provocada por Rusia y el mantenimiento por parte de China de su política Zero Covid han avivado el atasco marítimo, del que el comercio global no había terminado de recuperarse. De acuerdo con los cálculos de Interos, empresa estadounidense dedicada a la gestión de riesgos en la cadena de suministros, pese a que Rusia apenas representa el 5% del comercio marítimo total, sus relaciones con otros países convierten el conflicto y las sanciones a Moscú en un motivo de preocupación adicional. +++MÚSICA: 🎧 'Walking'. Infraction. Inaudio https://inaudio.org/track/walking-cinematic/ 🎧 'Leaf'. Infraction. Inaudio https://inaudio.org/track/leaf-documentary/
Concerns persist that President Putin will take his revenge in cyberspace for sanctions. Wiper attacks reported continuing in Ukraine. Russia also sustains cyberattacks. Lapsus$--living at home, with Mom. A carder kingpin finds his way onto the FBI's Most Wanted List. Andrea Little Limbago from Interos on collective resilience. Our guest is Amit Shaked from Laminar Security on shadow data. Anonymous says it hit Nestlé, but Nestlé says it never happened. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/57 Selected reading. As Ukraine invasion stalls, Putin looks to cyber for revenge attack on US (Newsweek) Threat looms of Russian attack on undersea cables to shut down West's internet (France 24) A Mysterious Satellite Hack Has Victims Far Beyond Ukraine (Wired) Anonymous hacks unsecured printers to send anti-war messages across Russia (HackRead) 'We want them to go to the Stone Age': Ukrainian coders are splitting their time between work and cyber warfare (CNBC) Teen Suspected by Cyber Researchers of Being Lapsus$ Mastermind (Bloomberg) Nestlé denies Anonymous hack, claiming it accidentally leaked data dump itself (Fortune) Nestlé says 'Anonymous' data leak actually a self-own (Register) Nestlé: You Can't Hack Us, We Leaked Our Own Data (Gizmodo) FBI adds Russian cybercrime market owner to most wanted list (BleepingComputer) United States of America v. Igor Dekhtyar (US District Court for the Eastern District of Texas)
Updates from the UK's Ministry of Defense on Russia's War in Ukraine. Influence operations: the advantage still seems to go to Ukraine, as Russian efforts look inward. Assessing the effects of hacktivism and cyber operations in the hybrid war. Privateering: Conti, Ragnar Locker, and (probably) others. Mustang Panda rears up in European diplomatic networks. Ransomware hits a Romanian fuel distributor. Andrea Little Limbago from Interos on data traps. Carole Theriault tracks the fight against deepfakes. Vulnerabilities found in UPS devices. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/45
Companies continue to withdraw their services from Russia, as it continues its invasion of Ukraine. American Express, Netflix and Tik Tok have limited Russia's access to their platforms – we speak with Ukrainian analyst Liana Semchuk from risk consultancy Sibylline about how she is advising companies operating in the region. As the repercussions of the crisis spreads globally, economist Michael Hughes tells us which economic regions and upcoming data will be most affected. And how does business continue amidst a conflict? Co-founder of Ukraine's Monobank, Misha Rogalskiy, tells us how financial industries are staying afloat. Finally, using high-tech solutions to visualise the supply disruption from the conflict is US-based Interos – its CEO Jennifer Bisceglie speaks to us about what they're seeing.
Welcome to the CANA Connection Podcast. Today we are happy to re-broadcast one of the interview sessions from the Association of Marine Corps Logisticians Symposium in October 2021. In this session our very own Host of the CANA Connection, President, and COO of CANA, Mr. Rob Cranston is joined by Interos CEO and Founder Jennifer Bisceglie. Join them as they talk about how Interos is radically reinventing supply chain management with an AI-powered SaaS platform that maps and models a live global view of your business ecosystem. To learn more about Interos visit https://www.interos.ai/ Host Rob Cranston President and COO, CANA LLC https://www.linkedin.com/in/rob-cranston-ab8aba/ https://canallc.com We hope you enjoyed this re-Broadcast of this session from the AMCL Symposium. A big thank you to their guests. You can find the various links in the description. If you would like to hear more of the CANA Connection podcast you can find us on most of the popular Podcast streaming platforms like itunes, spotify, google podcasts and other popular podcast sites. Or you can visit us on our website at CANALLC.com. While you are there consider signing up for our newsletter or joining our community forums. Once again this is Koa Beam signing off for Rob Cranston and the rest of the CANA Connection Podcast crew. And as always remember to Analyze, Assess and Execute! We will see you next time. #amcl #amclsymposium #canaconnection #interos #supplychainmanagement #SaaS #AI
Covid-19 has disrupted global supply chains in everything from semiconductors to vaccines. Jennifer Bisceglie, the CEO and founder of supply chain risk company Interos, has spent over two decades helping organisations reduce risk and avoid disruption in their supply chains.From her base in Arlington, Virginia, Ms Bisceglie joins fDi's regular start-up podcast to discuss global supply chains and Interos' recent crowning as a unicorn, or private company valued above $1bn. Listeners can expect a candid discussion on how businesses can manage supply chain disruption, what is needed to empower female entrepreneurs in the US and the reality of being a founder in Arlington. This episode was recorded on November 11 2021. See acast.com/privacy for privacy and opt-out information.
Aquatic Panda has been found working Log4shell exploits against an academic institution. Apache fixes new Log4j issues reported last week, and Microsoft also updates Windows Defender to address Log4j risks. Cyberattacks, criminal or hacktivist in motivation, hit news outlets around the new year. Microsoft works on fixing a Y2K22 bug in on-premise Exchange Server. Andrea Little Limbago from Interos on technology spheres of influence. Our guest is Mark Dehus from Lumen's Black Lotus Labs with DDoS insights. And CISA issues some ICS security advisories. For links to all of today's stories check out our CyberWire daily news briefing: https://www.thecyberwire.com/newsletters/daily-briefing/11/1
Lean Six Sigma is a lot like a swiss army knife. It provides the tools to handle just about any challenge that a business can throw at you. The framework can help you tackle anything from sales enablement to goal setting to large-scale organizational issues. In this episode, special co-host Kairo Dilla, BDR at scaleMatters, and I talk with Britt Heaps, Sr. Director of Sales Ops at Interos, about the benefits of embracing Lean Six Sigma principles in revenue operations. We discuss: - How Lean Six Sigma helps reduce friction in an organization - How to find cohesion between marketing, sales, and customer success - How to choose what metrics to follow at each stage of the sales cycle - How to stop over-brainstorming and start executing - The value RevOps brings to the C-suite Have an idea for a guest or show topic? Email me at dan@scaleMatters.com. Hear more go-to-market excellence by subscribing in Apple Podcasts, Spotify, or wherever you listen to podcasts. Listening on a desktop & can't see the links? Just search for Go-to-Market Excellence in your favorite podcast player.
A second vulnerability is found and fixed in Log4j as both criminals and nation-state intelligence services increase their exploitation of Log4shell. Iranian intelligence services have been actively conducting cyberespionage against a range of targets in the Middle East and Asia. Andrea Little Limbago from Interos checks in on supply chain issues. Our guest is Suzy Greenberg from Intel with a look ahead toward the coming year. A quick look back at Patch Tuesday, and, finally, some musing on literacy, orality, and the way you pronounce stuff people tweet about... For links to all of today's stories check out our CyberWire daily news briefing: https://www.thecyberwire.com/newsletters/daily-briefing/10/239
One of the biggest, most visible impacts of the pandemic was the massive disruption of supply chains across the globe. It led to shipment delays and product shortages across multiple industries. The problem is that this data can be hard to visualize when you're trying to solve complicated disruptions. We're sitting down with a dynamic woman leading a dynamic company doing incredibly relevant work in the tech space, Jennifer Bisceglie. She's the founder and CEO of Interos, a supply chain management company that developed powerful artificial intelligence tools which empower companies to quickly identify and respond to rapid changes in their supply chains. Instead of endless spreadsheets, Interos provides clients with a live, global visualization of their supply chains, making it that much easier to protect and improve them. We get her perspective on everything from modern logistical challenges, to what makes a successful leader, to women in technology. We also discuss Interos' recent successful funding event where they raised $100 million in investments. Resources: interos.ai LinkedIn: linkedin.com/in/jennifer-bisceglie-3328b2 Learn more and get the full show notes at: 3PillarGlobal.com
Sudan is under a blackout as a military junta consolidates control over the government. Iran says a cyberattack--unattributed so far--was responsible for disrupting fuel distribution in that country. A novel loader is discovered. Operation Dark HunTor takes down a darkweb contraband market. The US FTC is looking into Facebook's privacy settlement. The LockBit gang talks, and it's insufferable. Andrea Little Limbago from Interos on government internet interventions. Carole Theriault weighs in on Facebook glasses. And Halloween is another day closer. For links to all of today's stories check out our CyberWire daily news briefing: https://www.thecyberwire.com/newsletters/daily-briefing/10/207
A CISA-issued Joint Advisory warns of threats and vulnerabilities at water and wastewater treatment facilities. CISA issues twenty-two other industrial control system advisories. Andrea Little Limbago from Interos on trends in the human element of security. Our guest is Gidi Cohen from Skybox with Vulnerability and Threat Trends. And the Governor of Missouri intends to prosecute the Saint Louis Post-Dispatch to the fullest extent of whatever the law turns out to be. For links to all of today's stories check out our CyberWire daily news briefing: https://www.thecyberwire.com/newsletters/daily-briefing/10/199
The Pandora Papers leak erstwhile private financial transactions by the rich and well-connected (and it's 150 mainstream news organizations who cooperated in bringing them to light). Flubot is using itself to scare victims into installing Flubot. Coinbase thieves exploited account recovery systems to obtain 2FA credentials. The US plans to convene an international conference on fighting cybercrime. Conti warns its victims not to talk to reporters. Andrea Little Limbago from Interos on modeling cyber risk. Carole Theriault has thoughts on facial recognition software. And a ransomware bust in Ukraine leads us to ask, why Capri Sun. (Think about it, kids.) For links to all of today's stories check out our CyberWire daily news briefing: https://www.thecyberwire.com/newsletters/daily-briefing/10/191
CISA announces a new public-private cybersecurity initiative. Prometheus TDS and Prophet Spider take their places in the C2C market. The money points to BlackMatter being a rebranded DarkSide. Andrea Little Limbago from Interos on Divergent trends of federal data privacy laws and government surveillance. Tonia Dudley from CoFense checks in from the BlackHat show floor. Our guest is Simon Maple from Snyk with a look at Cloud Native Application Security. And where some see naiveté, others see cautious optimism about putting fear in the hearts of ransomware gangs. For links to all of today's stories check out our CyberWire daily news briefing: https://www.thecyberwire.com/newsletters/daily-briefing/10/150
Cozy Bear's active command-and-control servers are found, and people conclude that Moscow's not too worried about American retaliation after all. Spyware found in an app for companies doing business in China. What to make (and not make) of the Iranian documents Sky News received. Phishing with Crimean bait. HTML smuggling may be enjoying a moderate surge. DoppelPaymer rebrands. Andrea Little Limbago from Interos on growing the next-gen of cyber. Our guest is Jamil Jaffer from IronNet Cybersecurity protecting the BlackHat Network Operations Center. And good news--that blackmailing bot really doesn't know what you did this summer. For links to all of today's stories check out our CyberWire daily news briefing: https://www.thecyberwire.com/newsletters/daily-briefing/10/146
YOOBIC has raised $50M in Series C funding from Highland Capital to continue its growth, increase its headcount to 350 by 2020 by hiring across technology, sales and engineering, and enhance its R7D efforts to cement its position as a leader in the market.Interos, a supply chain risk management SaaS provider, has turned unicorn raising $100M in Series C funding from NightDragon. It works towards mitigating supply chain disruptions, both cyber and physical.AuthenticID has raised $100M in minority growth investment from Long Ridge Equity Partners to support the development of solutions for extended identity verification and fraud detection use cases.Israel's Tailor Brands, which provides a platform for automating brand design and marketing processes for small businesses, has raised $50 million in Series C funding led by GoDaddy, reports state. Galvanize, a software platform for SaaS governance, risk, and compliance (GRC), has announced a strategic partnership with Waymark Tech, a regulatory and legal intelligence supplier to financial services. TPG Capital will get $2.25 billion from Uber Freight for Transplace. Uber Freight's company will grow due to this purchase as it seeks to carve out market share in existing regions and expand into Mexico. According to the company, Uber Freight's brokerage would be kept independent from Transplace's services.Gravitee dot i o an open-source API management platform, has raised $11M in a Series A round, led by Oxx and AlbionVC, to expand its development, sales, and marketing teams. Tide, Auchan, and other firms use Gravitee dot i o's main API administration tool.CloudServer, a SaaS-based, cloud-hosted RPA service, has been introduced by OpenBots, an open-source RPA platform. The new CloudServer is cloud-based, making it a dependable, scalable, and secure option. Its usage-based approach saves clients money by charging per-minute use rather than per-bot or per number of machines or users.Mailmodo, a no-code email marketing company, has raised $2 million in early funding to help with product development and market expansion. Mailmodo was one of the companies in the fifth batch of Sequoia Capital India's Surge program. According to Mailmodo, using AMP emails shortens the user experience.
Kaseya continues to work through remediation of the VSA vulnerability exploited by REvil, with completion expected Sunday afternoon. And while REvil has made a nuisance of itself, this time they may not have seen a big payday, or at least not yet. The US is still considering its retaliatory and other options in the big ransomware case. China's MSS is active against targets in Asia. Andrea Little Limbago from Interos looks at Government access to data analysis. Our guest is Leon Gilbert from Unisys with data from their Digital Workplace Insights report. And scammers are baiting their hooks with Black Widow lures. For links to all of today's stories check out our CyberWire daily news briefing: https://www.thecyberwire.com/newsletters/daily-briefing/10/131
The US-Russian summit took up cyber conflict, cyber privateering, and cyber deterrence, ending with the prospect of further discussions. Ferocious Kitten's domestic surveillance. Ransomware gangs are using a lot of initial access brokers. The Molerats are back. Troubleshooting a wave of intermittent Internet interruptions. NSA offers advice on securing business communication tools. Ukrainian police arrest six alleged Clop gangsters. Andrea Little Limbago from Interos on bringing the private sector back into the defense equation. Our guest is Charles Herring of WitFoo, with the case for cybersecurity as an extension of law enforcement. Nine alleged ransomware hoods collared in Seoul. For links to all of today's stories check out our CyberWire daily news brief: https://www.thecyberwire.com/newsletters/daily-briefing/10/116
OVERVIEW Full show notes: https://matthewdoan.com/podcast/2 Here, we talk with Dr. Andrea Little Limbago (VP of Research and Analysis at Interos) about what it takes for tech experts (usually considered introverts) to elevate into leadership positions. Andrea also shares how her unique background in the social sciences enabled her own growth in the cybersecurity field. Finally, she and Matthew discuss how to think about professional networking and why tech leaders need to operate "human-first" in driving organizational progress. For weekly digital leadership and career advice, join Wednesday Wisdom at https://matthewdoan.com/newsletter TAKEAWAYS For tech experts to find their place in leadership roles, they need to: (1) decide if it's for them, (2) sharpen their communication skills, and (3) be influential team players. Cybersecurity is still stuck with the notion that humans are the weakest link. But at the end of the day, if technology doesn't work with humans in it, it doesn't work. To build key relationships, think like a social scientist. Connect with key individuals that get you closer to your goal without being self-serving with your personal agenda. The leadership myths that need busting: (1) you have to be an extrovert to be a leader, (2) leave the people component to HR, and (3) bring solutions, not problems. Having a professional "squad" is vital to your professional and social health. RESOURCES Connect w/ Andrea on LinkedIn: https://www.linkedin.com/in/andrea-little-limbago/ Connect w/ Matthew on LinkedIn: https://www.linkedin.com/in/matthewdoan/ Follow Matthew on Twitter: https://twitter.com/MatthewRDoan Check the show on YouTube: https://www.youtube.com/channel/UCZeCjHjtq3g7mIuPwvKRrjw
Evil, your name is REvil, except when it’s Sodinokibi. That’s what the Bureau says about the JBS ransomware attack, anyway. The US is expected to make strong objections to Russian cyber privateering at the upcoming summit. Other ransomware incidents are disclosed by regional transportation operators. A possible Mustang Panda sighting. Andrea Little Limbago from Interos on cyber related executive orders. Our guest is Terry Halvorsen from IBM on the need for investment, research and collaboration in preventing quantum cyberattacks. And mommas, don’t let your babies grow up to be DDoS jockeys. For links to all of today's stories check out our CyberWire daily news brief: https://www.thecyberwire.com/newsletters/daily-briefing/10/106
Ellevate Podcast: Conversations With Women Changing the Face of Business
On this week's episode, we chat with Jennifer Bisceglie, Founder and CEO of Interos, as she takes us through her fascinating journey starting out as one of the very few women in the tech industry. She gives us a breakdown of the global supply chain industry, discusses artificial intelligence and the impact of it in the workplace, and explains how companies are in a global economy with each other's suppliers and customers. Jennifer tells us how we can intentionally give back to our communities and in turn, give back to the world.
On this episode of What Lies Beneath, we're featuring a conversation from Interos' 2020 summit for the Financial Services Industry (FSI) featuring Richard Haass, President of the Council on Foreign Relations, in conversation with Nick Beim from Venrock. Richard is the president of the Council on Foreign Relations and one of the leading voices on American foreign policy and the changing nature of the global order. He served in the Pentagon and the State Department, where he was the Director of Policy planning. He's the author of 14 books on American foreign policy, most recently The World in Disarray and The World: A Brief Introduction. Building on his decades as a global diplomat and leading voice in American foreign policy, Richard provides a glimpse into the future. Our discussion included: Core technological shifts as they relate to the future of globalization The impact those shifts will have on the industry as a whole What most discussions centered on the future seem to miss The American relationship with China and why it's more important now than ever before All guests' participation in our summit was purely as a public service and is in no way an endorsement of Interos.
On this episode of What Lies Beneath, we're featuring a conversation from Interos' 2020 summit for the Financial Services Industry (FSI) featuring Valerie Abend from Accenture and Jason Harrell from DTCC. How can the financial service industry build greater resiliency in a time of such uncertainty and unprecedented disruption? What are the greatest risks to resilience? In this session Valerie and Jason detail the core considerations that should drive supply chain risk management strategy. As part of the summit, the panel discussed: What financial services professionals need to be thinking about in terms of third party resilience and risk management The positive things that have come out of the COVID-19 pandemic The supervisory and regulatory role in enhancing financial institutions resilience How COVID-19 has impacted cyber resilience All guests' participation in our summit was purely as a public service and is in no way an endorsement of Interos.
On this episode of What Lies Beneath, we're featuring a conversation from Interos' 2020 summit for the Financial Services Industry (FSI) featuring Meg Anderson from Principal Financial Group, Jim Routh from MassMutual, and Phil Venables from Goldman Sachs, in conversation with Kevin Mandia, CEO of FireEye. With decades of experience in digital risk, they provide lessons learned on how to integrate into C-suite and Board conversations and priorities to help improve enterprise resilience against epic business disruptions. As part of the summit, the panel discussed: The biggest supply chain risks facing companies as a result of the COVID pandemic What we worry about in the supply chain, and how to address those supply chain risks The new normal that we're all facing as we navigate through a global pandemic Some of the challenges facing those in the cybersecurity industry are facing at this point, and how they're protecting enterprise operations in the midst of it all. All guests' participation in our summit was purely as a public service and is in no way an endorsement of Interos.
For more than a decade, Interos relied on human experts to assess supply chain risk. Then came AI - and COVID-19. Watch CEO Jennifer Bisceglie on #MachineMeetsWorld. --- Email the show: mmw@infiniaml.com --- Transcript: https://bit.ly/33REZzi
On this episode of What Lies Beneath, we're featuring a conversation from Interos' 2020 summit for the Financial Services Industry (FSI) featuring Manuel Rios from Fidelity in conversation with EVP of Risk Recon, Pete Kobs. Cyber risk in digital supply chains is widely acknowledged as a major source of disruption to enterprise resilience yet much of it remains hidden deep in enterprise digital supply chains. Pete Kobs and Manny Rios discuss their experience working with assessment and operations managers in enterprises and their suppliers to mitigate those risks. As part of the summit, Mr Kobs and Mr. Rios discussed: The number one requirement to having a robust readiness plan The role of supply chain risk management moving forward, and and the best practices in that space What challenges people across the cybersecurity industry are dealing with in the wake of the COVID crisis How to work with a physical security vendor that you can't physically interact with. Both guests' participation in our summit was purely as a public service and is in no way an endorsement of Interos.
On this episode of What Lies Beneath, we're featuring a conversation from Interos' 2020 summit for the Financial Services Industry (FSI) featuring Senator Mark Warner in conversation with investor Ted Schlein. A former investor & venture capitalist, Sen. Warner is intimately familiar with the intersection of business, technology, & government. As a part of his official duties, Sen. Warner serves on the Senate Finance & Banking Committees. As part of the summit, Mr. Schlein and Sen. Warner discussed: The history of American investment in technology The United States' increasingly tense relationship with China Why we need to do a better job of explaining decoupling from China to our allies, or risk alienating them The perception generated by differing approaches to industrial policy Sen. Warner's participation in our summit was purely as a public service and is in no way an endorsement of Interos.
How well do you understand your organization's supply chain structure? You're likely familiar with your “first-tier” suppliers. You've probably got legal contracts, or even a physical relationship in place with them. But how familiar are you with those suppliers down the chain? What at Interos, we like to call the “N-th tier suppliers.” The less you focus on understanding them, the more you get lulled into a false sense of security in thinking that you've got your supply chain security figured out, integrated, and fully understood. And frankly, at least according to our most recent podcast guest, Mark Weatherford, most organizations do a very poor job of understanding even their first-tier suppliers, let alone those n-th tier ones. Mark joined us on a recent episode of the What Lies Beneath? Podcast, to talk all about: The difference in policy & standards development as it relates to government vs. the private sector What companies need to be doing to invest in their supply chain security Why it's become a priority for every company to invest in supply chain security right now