The Armoury - July 2024

Welcome to The Armoury.

Cyber threats are getting sophisticated, and the number and style of threats are on the rise. We understand that your schedule is packed, but staying informed about cybersecurity is a top priority. With The Armoury, we've curated the most relevant and important content from trusted sources. Our team handpicks articles, news items, and tips that you need to know, saving you time and effort while ensuring you have the knowledge to protect yourself and your organisation.

If you ever decide that The Armoury no longer aligns with your needs, you can easily unsubscribe at any time.

Stay safe.

Latest Cybersecurity News

• Australia's Cybersecurity Centre Links China-Backed Hackers to Cyber Crimes. Australia's Cyber Security Centre has reported that the hacker group APT40, backed by China’s Ministry of State Security, stole usernames and passwords from two Australian networks in 2022. The group is known for its harmful cyber activities and remains a significant threat. The report, backed by international cybersecurity agencies, highlights APT40’s ongoing malicious operations. This development comes as Australia and China work to improve their strained relationship, which had deteriorated following Australia’s call for a COVID-19 investigation and China’s imposition of tariffs on Australian exports. Source: NBC News
• Australia Partners with AWS to Enhance Cybersecurity. The Australian Government has announced a $2 billion investment with Amazon Web Services (AWS) to strengthen cybersecurity over the next decade. This strategic partnership will establish a Top Secret (TS) AWS cloud in Australia for secure storage and analysis of sensitive data, supporting up to 2,000 local jobs. The TS Cloud will improve ICT resilience, enhance defence communications, and foster closer ties with allies. AWS also plans significant infrastructure investments in Australia, totalling $13.2 billion by 2027. Source: Total Telecom
• Banks Warn of Escalating Cyber Threats. Australia’s big four banks, according to NAB’s Chris Sheehan, are under relentless cyber attacks, likened to "asymmetrical warfare." These attacks come from a spectrum of sources, from casual hackers to advanced nation-state groups. Cyber crime costs Australians $3 billion annually. Banks have stopped including links in texts and expanded fraud prevention teams to combat scams. The Australian Banking Association backs these measures, highlighting ongoing investment in cutting-edge security technologies. Source: ABC.Net.Au

Cybersecurity Tips & Best Practices

• Disable Unused Ports and Services: Regularly review and disable any network ports or services that aren’t in use. Open ports and unnecessary services can be exploited by attackers, so reducing their number lowers your risk.
• Practice Secure File Sharing: Use secure methods for file sharing, such as encrypted email services or secure file-sharing platforms. Avoid sending sensitive information through unencrypted channels or storing it on unprotected cloud services.
• Limit Admin Privileges: Restrict administrative privileges to only those who need them. Users with elevated access can potentially cause more damage if their accounts are compromised, so limiting these privileges reduces the risk.

Cybersecurity awareness & education

Did you know?

The first known cyberattack on a government institution happened in 1989? A researcher named Robert Tappan Morris created what is now known as the Morris Worm. It was one of the first worms distributed via the internet, and it inadvertently caused significant disruption by exploiting vulnerabilities in UNIX systems.

Cybersecurity FAQ

Why do I need to worry about Cyber Security?

Cybersecurity is crucial for several reasons, regardless of whether you're an individual, a business, or a large organisation. Here are some key reasons why you need to worry about cybersecurity:

• Protecting Personal Data: Cyberattacks can steal sensitive information like credit card details and personal identification, leading to identity theft and financial loss.
• Securing Business Assets: For businesses, strong cybersecurity is vital to safeguard intellectual property and operational data. Breaches can result in financial losses and damage to reputation.
• Avoiding Financial Loss: Cyberattacks, such as ransomware, can cause significant financial damage through ransom payments, recovery costs, and fines for regulatory non-compliance.
• Maintaining Trust: Cybersecurity helps build and retain trust with customers and partners. A breach can erode confidence and harm your reputation.
• Ensuring Compliance: Many industries have regulations requiring specific cybersecurity measures. Failing to comply can lead to legal penalties and reputational harm.

Cybersecurity Events

Event Name: Cloudflare Connect: Sydney 2024

Date: 08 August 2024

Location: Hyatt Regency Sydney

Register Here

Event Name: TECHSPO Sydney 2024

Date: 14 August 2024

Location: Sydney, Australia

Register Here

Cybersecurity Trivia of the Month

In 2014, a security researcher named Chris Roberts claimed to have hacked into an airplane’s in-flight entertainment system while it was in the air. Roberts demonstrated how vulnerabilities in the system could potentially be exploited to interfere with the aircraft’s control systems. This revelation sparked a major debate about the security of critical aviation systems and led to increased scrutiny and improvements in how airlines secure their technology.

Recent Ransomware Breach

1.1TB of Disney’s Internal Slack Chats Allegedly Leaked

Threat actors have claimed a major breach of Disney’s internal Slack communications, involving 1.1TB of data, including messages, files, unreleased projects, and sensitive information. The breach, first reported by a hacker known as NullBulge, reportedly originated from a Club Penguin fan group. The attackers, who aim to address perceived theft issues, have suggested that the leak is much larger than initially estimated. The data includes admin credentials for various platforms and has sparked concern over corporate communication security. Disney has not yet issued a statement. Cybersecurity experts are advising enhanced security measures for internal tools like Slack to prevent similar incidents.

Source: Cyber Security News

Cybersecurity Meme of the Month

Sign up for The Armoury

Sign up for our The Armoury to get the latest updates on Cybersecurity first-hand via email.

#itbusiness #technology #cybersecurity #cybersecuritytips #cybersecurityupdates #innovation