Asia-Pacific Development, Diplomacy & Defence Dialogue’s Post

I've got a new report out today! I couldn't believe just how many waves of mass exploitation there were this year which were targeting what should have been secure devices. I wanted to know if this was a new trend in cyber activity, or simply a trend in reporting of cyber activity, so I put my analysis hat on and dug into the numbers to see if I could prove it. Turns out that yes, based on available data there has been an increase in the number and severity of exploited edge services and infrastructure appliances in 2024. Check out the report for more specific conclusions and examples.

🔬New research!🔬 Our WithSecure Intelligence team have knocked it out of the park again. Their latest research shines a light on the trend of mass exploitation of edge services and infrastructred. The team have also put forward a number of theories as to why they have been heavily and successfully targeted by attackers. 🔗Read the full report here: https://lnkd.in/dAwiDgdn #research #intelligence

Edge services such as MOVEit, Exchange, Zimbra, ManageEngine Servicedesk, etc and Infrastructure appliances such as Ivanti ConnectSecure, Cisco ASAs, Citrix ADC, Fortiguard VPN gatewayss, PaloAlto GlobalConnect VPN gateways, etc have more severe CVEs, and they are being exploited at a growing rate compared to non-edge, non-infrastructure CVEs. That’s in short what WithSecure ‘s threat intel analyst Stephen Robinson found out in a broad analysis. #threatintelligence #research #exposuremanagement

Helsinki, Finland – June 12, 2024: The cyber threat landscape in 2023 and 2024 has been dominated by mass exploitation. A previous WithSecure report on the professionalization of cybercrime noted the growing importance of mass exploitation as an infection vector, but the volume and severity of this vector have now truly exploded.   The number of edge service and infrastructure Common Vulnerabilities and Exposures (CVEs) added to the Known Exploited Vulnerability Catalogue (KEV) per month in 2024 is 22% higher than in 2023, while the number of other CVEs added to the KEV per month has dropped 56% compared to 2023.

Artificial Intelligence is coming to South Carolina state government. Here's the goals and concerns: A new framework for artificial intelligence has guiding principles for how the bureaucracy will implement the technology into all facets of state ... http://dlvr.it/TB9Sv9

Information and knowledge are power. Big tech knows this better than most. However, as technology allows us to enjoy unparalleled access to information, we face numerous schemes to control what information we may consume and where we may obtain it. Any scheme the government justifies with fuzzy and speculative assertions of national security interests requires our courts to bring the most searching scrutiny to bear: In a free society, it is hardly ever the case that national interests should supersede individual rights in order to protect those rights. Presented with competent advocacy and nearly a century of precedent, the courts must not fail to protect our rights to consume information and reach our own conclusions. Otherwise, the state will become the arbiter of what is acceptable for people to know or think or speak about. That is a portentous step on a journey that, we have often seen, leads ineluctably to illiberality and tyranny. There are big things coming in 2025. We need to be prepared. Make a resolution to push back. Consider a year-end contribution to FIRE. https://lnkd.in/eDACV4EA

Report provides recommendations for artificial intelligence legislation | Virginia: (The Center Square) — Virginia lawmakers are working on legislation to regulate artificial intelligence technology in the commonwealth. http://dlvr.it/TGdpWv

Can Texas Set the Gold Standard for Artificial Intelligence Policy? - Dallas Express: The Texas Public Policy Foundation hosted a discussion about the future of responsible Artificial Intelligence policy. http://dlvr.it/TGTqF8

🗞 #ICYMI we recently published our newest Policy Brief: 𝙏𝙝𝙚 𝙄𝙢𝙥𝙖𝙘𝙩 𝙤𝙛 𝙎𝙥𝙖𝙘𝙚 𝙤𝙣 𝙄𝙣𝙙𝙪𝙨𝙩𝙧𝙮, 𝙀𝙘𝙤𝙣𝙤𝙢𝙞𝙘 𝙂𝙧𝙤𝙬𝙩𝙝 𝙖𝙣𝙙 𝙎𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙞𝙣 𝙩𝙝𝙚 𝙐𝙆’𝙨 𝙎𝙝𝙞𝙛𝙩𝙞𝙣𝙜 𝙋𝙤𝙡𝙞𝙩𝙞𝙘𝙖𝙡 𝙇𝙖𝙣𝙙𝙨𝙘𝙖𝙥𝙚 ✨ The UK maintains the political will and ambition to become a science and tech superpower by 2030. In light of its recent general election, our newest Policy Brief examines the question of whether this ambition will be sustained and further amplified, and of the impact it will have on the UK’s space sector. Read and download your copy here: https://lnkd.in/ec-Tt9_8  

Love this article on why we need to "rewild" the internet, the importance of preserving complex systems, and what technologists can learn from ecologists. https://lnkd.in/emUTsMpD (Via Ada Lovelace Institute)