dyami | security intelligence’s Post

The important takeaway, I believe, with these powerful state actors in Cyberspace is not that they're constantly on the attack, but that they're already ever-present. While I'm relatively new to the field, it seems to me that the key to resiliency is empowering every worker and informing them about best practices on an individual level-both in and out of your organization. The same tools and skills that can protect you from big tech overreach can greatly assist in protecting you (and by effect, your organization) from state actors.

Chinese cyber operations have escalated recently, with both state-linked and criminal actors intensifying their activities. Key developments include the formation of China's Information Support Force, major warnings from U.S. and German authorities about threats to critical infrastructure and sensitive data, and the detection of advanced spyware in Southeast Asia. These activities are part of a broader strategy to enhance China's cyber capabilities and geopolitical influence, amid increasing international cybersecurity cooperation and tensions. The situation highlights the growing complexity and reach of China's cyber operations, influencing global cybersecurity dynamics. #CyberSecurity #APT #InfoSec #ChinaCyberOps dyami | security intelligence | count on us https://lnkd.in/eBDaKTgn

Leaked documents from Chinese cybersecurity firm iSOON reveal into the strategies, targets, and customers of China's cyberespionage activities. Read our Intel Brief and analysis below for more information on how #China's cybersecurity firms are employed by China's state security services. dyami | security intelligence | count on us #cybersecurity #cyberespionage #isoonleaks #geopolitics #travelsecurity #dyami https://lnkd.in/eRdbxnKQ

Leaked documents from Chinese cybersecurity firm iSOON reveal into the strategies, targets, and customers of China's cyberespionage activities. Read our Intel Brief and analysis below for more information on how #China's cybersecurity firms are employed by China's state security services. dyami | security intelligence | count on us #cybersecurity #cyberespionage #isoonleaks #geopolitics #travelsecurity #dyami https://lnkd.in/en7GMGpJ

IBM's threat intelligence "X-Force" identified a phishing campaign dubbed "ITG05", attributed to the Russian state-backed hacking group, Fancy Bear (APT28). It was found targeting NGOs and governments worldwide. The campaign aims to steal sensitive information and establish network backdoors across several continents including Europe, Asia, and the Americas. #ITG05 #APT28 #CyberSecurity #PhishingCampaign #GlobalEspionage #RussianGRU #CyberThreatIntelligence #StateSponsoredHacking https://lnkd.in/eAJuUzYq

Don't miss out on our upcoming webinar: "IACS URs E26 & E27: Bridging the gap between regulation and implementation" [https://lnkd.in/dAbhdFhR], in association with Inmarsat.   📅 Date: Wednesday 19 June 🕒 Time: 08:00 - 09:00 BST   #IACS Unified Requirements E26 and E27 become mandatory on July 1, 2024. All newbuild #vessels contracted for construction after this date must comply. This webinar will guide you on how to avoid delays and non-compliance.   Panellists: 👤Kostas G., Information Security Officer, Angelicoussis Group 👤Makiko T., Deputy Manager, Cyber Security Team, ClassNK - Nippon Kaiji Kyokai 👤Laurie Eve, Chief of Staff, INMARSAT   🎟️ REGISTER FREE HERE: https://lnkd.in/dAbhdFhR   This webinar is a unique opportunity to: 💡 Gain insights from experts relevant to your business 🤝 Connect with professionals in your industry on a global scale. 🚀 Stay up-to-date with the current trends and advancements in your field #RivieraMaritimeMedia #maritimewebinar #maritimesecurity #webinar #maritimesafety #regulationimplementation #vesselcompliance #shipowners #shipyards #cyberchallenges

🚢 New Report: Cyber Threats to Sea Ports and Global Supply Chain 🌍 Our team just published a deep dive into the rising cyber threats facing maritime infrastructure. Here's what we found: 1. Ransomware continues to dominate, but we're seeing a concerning uptick in geopolitically-motivated attacks. 2. There's a stark contrast in cyber security readiness across ports globally. This gap affects recovery times and overall resilience. 3. Addressing vulnerabilities is no longer optional - it's crucial for safeguarding global trade. The potential for these attacks to disrupt entire industries is real and growing. With global trade hanging in the balance, the question is no longer if we will face disruption, but how prepared we are to withstand it. Read the report here: 🔗 https://lnkd.in/d8UZ53Kf

The German air traffic control agency, Deutsche Flugsicherung, recently confirmed it was targeted by a cyber attack... While its operations were unaffected, this incident is a clear reminder that no system is immune to external threats — not even critical infrastructure. This is why I find myself scratching my head this morning after reading about it… - The attack compromised the administrative/internal IT infrastructure and systems, and the extent of how much data was accessed is still under investigation. - The Federal Office for Information Security (BSI) is actively managing the incident which is great, but the suspected involvement of APT28, a group attributed to Russia’s military intelligence service, the GRU, raises a lot of concern. To all the leaders in the Cyber Security world…with sophisticated threats like these, are we truly prepared? How are you reinforcing your defenses against state-sponsored attacks? (please no spoilers/things that might compromise!) What measures are you implementing to protect your organization? How do you assess your resilience against threats that target not just operational but also administrative layers? And finally, how do you communicate with senior stakeholders in your businesses the importance of implementing change and making them aware of issues such as securing critical infrastructure? Let me know in the comments below. Photo credit: Kevin Hackert #cybersecurity #infosec #APT28 #cyberdefence #dataprotection #germany

Four simple steps to staying safer online include: 1. Using 2-factor authentication on all accounts 2. Recognizing phishing / email scams 3. Create Strong passwords and use a password manager 4. Software updates - look for them on your networked devices and implement them

Very interesting article! It’s time to act now to secure our nations critical infrastructure!