The Gate 15 Podcast Channel - Gate 15

· CrowdStrike: Channel File 291 Incident: Root Cause Analysis is Available. Read the findings, mitigations and technical details of the Channel File 291 incident.

· Ransomware & Data Breaches:

o Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication.

o Rapid7: Rapid7’s Ransomware Radar Report Shows Threat Actors are Evolving …Fast.

· Royal Ransomware Actors Rebrand as “BlackSuit,” FBI and CISA Release Update to Advisory

· Justice Department Disrupts North Korean Remote IT Worker Fraud Schemes Through Charges and Arrest of Nashville Facilitator

· Research Report: Internet-Connected Industrial Control Systems (Part One)

· White House working on cyber insurance policy proposal for ‘catastrophic’ incidents

· Hackers leak 2.7 billion data records with Social Security numbers

· On the Adoption of the UN Convention Against Cybercrime

· DOJ: Assault of Congregants Outside a Washington D.C. Synagogue Charged as a Federal Hate Crime

· U.S.: SEC ends probe into MOVEit attacks impacting 95 million people

· Critical Infrastructure: Rewards for Justice: CyberAv3ngers.

· White House cyber czar touts regulatory harmonization bill advancing through Congress

Nerd Out EP 50. Venue protection, 2/3 of the year awards, acolytes and dragons! Aug 12, 2024

Show notes

In the latest episode of Nerd Out, Dave and Alec looked at some recent security concerns related to venues including the cancellation of Taylor Swift concerts in Austria, and sabotage surround the Olympics. Then they moved to the 2/3 of the year awards - congratulations to our winners!

MVP. Secure by Design. https://www.cisa.gov/securebydesign
The Cobra (Sly Stallone) Award (you're the disease, and I'm the cure). Gate 15 GRIP (no shameless plugs).
The Dennis Green (they are who we thought they are). Politically motivated threat actors.
The Aldus Snow (don't forget about me). Ransomware - as if there was another.
Dumpster Fire award - CrowdStrike - despite their up front stance and taking accountability, this is still a big deal.
Scotty Doesn’t Know award (the threat that is lurking within). AI powered BEC. https://www.cnn.com/2024/02/04/asia/deepfake-cfo-scam-hong-kong-intl-hnk/index.html
Avengers Team Up award. Co-winners. Companies helping rural healthcare (https://www.healthcareitnews.com/news/microsoft-and-google-white-house-offers-cybersecurity-tools-rural-hospitals) and the Loudon County Sherrif’s office for helping faith-based organizations.
Heath Ledger Joker award. Accelerationist - they just want to watch the world burn.

Then the nerds go all in on the season and the finale's of the Acolyte and House of the Dragon.

Some of the references from the above topics include:

T Swift Plot

French Infrastructure Attacks

Weekly Security Sprint EP 76. Sabotage, Middle East escalation, check scams, and the weatherman returns Aug 06, 2024

Show notes

In this week's Security Sprint, Dave covered the following topics:

Warm Start. Sheriff's Office hosts summit focusing on safety at houses of worship

Main Topics.

French coordinated infrastructure sabotage
Middle East tensions and possibility of escalation with implications for the homeland
Writing Paper Checks Is Not Safe: Cyber Security Goes Well Beyond Your Computer or Phone - National Cybersecurity Center
Extreme heat, bone-dry vegetation and human misconduct prompting intense wildfire season
Deadly Tropical Storm Debby begins its Southeast deluge

Venue Security, The IAVM Podcast Series EP 7. Cyber Resilience, the Human Factor and Reducing Risk Aug 05, 2024

Show notes

In this episode of Venue Security, The IAVM Podcast Series, Andy Jabbour talks with Ross Girouard, Assistant General Manager, Credit Union of Texas Event Center, an over 6,000 fixed-seat multi-purpose indoor arena located in Allen, Texas, north of Dallas, and Michael McDermott, City of Allen, Texas.

Credit Union of Texas Event Center Facebook & X/Twitter
CUTXEventCenter.com

Phishing and common Concerns
Venue-specific cybersecurity considerations
Cyber Resilience!

Network Segmentation!
Phishing Simulation!
Contingency Planning!
Relationships & the Human Factor!
Understanding risk, risk prioritization and risk management!
Balancing convenience and security

Arena football war stories
The criticality of communications
More!

‘If you have a busy IT guy during the event, you’ve got a problem…’-Michael‘Cybersecurity has to be part of your everyday team’-RossIn the discussion we address:

Weekly Security Sprint EP 75. North Korea mischief, and physical security matters Jul 30, 2024

Show notes

In this week's Security Sprint, Dave and Andy covered the following topics.

North Korea Cyber Threats to U.S. Businesses:

FBI, CISA, and Partners Release Advisory Highlighting North Korean Cyber Espionage Activity.
North Korea State-Sponsored Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs.
DOJ: North Korean Government Hacker Charged for Involvement in Ransomware Attacks Targeting U.S. Hospitals and Health Care Providers
Microsoft: Onyx Sleet uses array of malware to gather intelligence for North Korea
Google: APT45: North Korea’s Digital Military Machine.
North Korean hacking group targeted weapons blueprints, nuclear facilities in cyber campaigns
KnowBe4: How a North Korean Fake IT Worker Tried to Infiltrate Us

CISA: Resources for Onboarding and Employment Screening Fact Sheet. Resource Materials: Resources for Onboarding and Employment Screening Fact Sheet

Physical Incidents:

Quick Hits

Olympics:

CrowdStrike: Remediation And Guidance Hub: Falcon Content Update For Windows Hosts,

Donald Trump Assassination Attempt: Takeaways from FBI testimony: Trump shooter searched details of JFK assassination and flew drone near rally site

Other items that may be of interest:

Weekly Security Sprint EP 74. Information sharing and resiliency; Crowdstrike, MDM, and Health Jul 23, 2024

Show notes

In this weeks Security Sprint, Dave and Andy covered the following topics: Warm Start: · FB-ISAO Releases an All-Faiths Analysis of Attacks on U.S. Houses of Worship in 2023. · New Cyware Survey Reveals Critical Gaps in Cybersecurity Threat Intelligence Sharing and Collaboration. · Private-public partnership releases new bank resources for cloud computing adoption. o Financial Sector Cloud Outsourcing Issues and Considerations. Main Topics: CrowdStrike Outage: · CISA: Widespread IT Outage Due to CrowdStrike Update (being updated; update 9:45 a.m., EDT, July 21, 2024) · Canadian Centre for Cyber Security - Alert - Issue impacting CrowdStrike Falcon EDR · UK NCSC: Statement on major IT outage · NZ-NCSC: NCSC statement on global IT outage · CrowdStrike says significant number of devices back online after global outage. o Technical Details: Falcon Content Update for Windows Hosts, 20 Jul · Microsoft: New Recovery Tool to help with CrowdStrike issue impacting Windows endpoints · CrowdStrike CEO George Kurtz speaks out after failed tech update causes worldwide chaos at airports and banks · Microsoft says 8.5M Windows devices were affected by CrowdStrike outage · Brian Krebs: Global Microsoft Meltdown Tied to Bad Crowdstrike Update · Blue Screens Everywhere Are Latest Tech Woe for Microsoft · Don’t Fall for CrowdStrike Outage Scams Donald Trump Assassination Attempt & Associated Physical Security: · FBI, DHS warn of possible retaliation for attack on Trump. · Trump’s would-be assassin researched previous mass shooter Ethan Crumbley and his family before attack. · Gunman Might Have Scoped Out Site Six Days Before Trump Rally. · Secret Service Arrests Florida Man Threatening to Kill Joe Biden. · Roswell Man Indicted for Threatening FBI Director Christopher Wray. · Secretary Mayorkas Delivers Remarks at White House Press Briefing. · TIME: What We Know—and Don’t Know—So Far About the Trump Rally Gunman · Militias Are Recruiting Off of the Trump Shooting Misinfo: o Conspiracy theories spread wildly after the first assassination attempt on a US president in the social media age o One in Three Biden Supporters Think Trump Shooting Might Have Been Staged o 4chan post claiming Secret Service told not to fire on Trump shooter explodes into full-on TikTok conspiracy o Top Conspiracy Theories Around Trump Assassination Attempt Debunked Health: · CDC Confirms Human Cases of H5 Bird Flu Among Colorado Poultry Workers. · In 2 years since the launch of 988, 10 million contacts have been answered · Global childhood vaccination hits plateau, with 35 million not fully protected from measles · UK Covid-19 Inquiry: Resilience and preparedness (Module 1) Ransomware: · CDK hack shows SEC disclosure standards are unsettled · ReliaQuest: Ransomware and Cyber Extortion in Q2 2024 · California officials say largest trial court in US victim of ransomware attack. · Two Foreign Nationals Plead Guilty to Participating in LockBit Ransomware Group Quick Hits: · China seeks space supremacy and to exploit it ‘to our detriment’: US intelligence head · US to issue proposed rules limiting Chinese vehicle software in August · Fragmented and multiplied cybercriminal landscape, warns new Europol report · Europol: Internet Organised Crime Threat Assessment (IOCTA) 2024. · Patagonia invaded privacy by using AI to analyze customer service interactions, lawsuit alleges · CISA Releases Playbook for Infrastructure Resilience Planning. · Software Bill of Materials (SBOM) FAQ Resource. · Why the Pentagon Is Warning That ISIS Attacks Could Double This Year · US says ISIL trying ‘to reconstitute’ amid uptick in Syria, Iraq attacks · Neo-Nazi group demonstrates on Tennessee overpass

The Gate 15 Interview EP 48. ENCRYPTION, part 2. A conversation with Elizabeth Nolan Brown and Jessica Dickinson Goodman: Encryption, privacy and why good intentions aren’t good enough. Jul 21, 2024

Show notes

In this episode of The Gate 15 Interview, Andy Jabbour talks with Reason Magazine’s Elizabeth Nolan Brown and Jessica Dickinson Goodman in part two of our two-part series on encryption. Jessica and Gate 15 are members of the Global Encryption Coalition.

Elizabeth Nolan Brown. Senior Editor, Reason; President, Feminists for Liberty. Elizabeth Nolan Brown is a senior editor at Reason and the author of Reason’s biweekly Sex & Tech newsletter, which covers issues surrounding sex, technology, bodily autonomy, law, and online culture. She is also co-founder of the libertarian feminist group Feminists for Liberty, and a professional affiliate of the journalism program at the University of Cincinnati. Brown has covered a broad range of political and cultural topics since starting at Reason in 2014, with special emphasis on the politics, policy, and legal issues surrounding sex, speech, tech, justice, reproductive freedom, and women’s rights. She lives in Cincinnati, Ohio, with her husband, sons, and two cats. Andy is a big fan of her cat and family pictures. Read here complete bio at Reason.

LinkedIn
You can find her on most popular social media sites as ENBrown.

Jessica Dickinson Goodman. Jessica Dickinson Goodman is the current chair of the Chapter Seeding Committee of the San Francisco Bay Area ISOC Chapter and past-President, serving in that role for three years. As Board President, encryption protection and education played a major role in her agenda. She ran a monthly tactical tech support webinar series for community members in how to use encryption tools to protect personal privacy in a post-Dobbs world, wrote and published Encryption for Babies, is featured on the front page of the Global Encryption Coalition’s YouTube channel talking about encryption.

In the discussion Liz, Jessica, and Andy discuss:

Liz and Jessica’s backgrounds.
Encryption 101 and why is it important.
What led you to join the Global Encryption Coalition.
Liz’s journalistic background covering sex, tech, privacy and related matters at Reason.
Are we too paranoid?
Law enforcement & legislation & breaking encryption.
STOP CSAM, the EARN IT Act and Section 230.
Protecting children vs. protecting privacy or protecting children and protecting privacy.
Recommendations for law enforcement and legislators.
Three Questions!
And more.

Selected Links:

Global Encryption Coalition. The Global Encryption Coalition (GEC) was founded in 2020 by the Center for Democracy & Technology, Global Partners Digital and the Internet Society and now has over 350 members. Its mission is to promote and defend encryption in key countries and multilateral fora where it is under threat. The GEC also supports efforts by companies to offer encrypted services to their users.
GEC members
Elizabeth Nolan Brown, selected writings:

Weekly Security Sprint EP 73. The importance of venue security - the assassination attempt, and Copa crisis Jul 16, 2024

Show notes

In this week's Security Sprint, Dave and Andy talked about the following topics. FB-ISAO Threat Assessment Statement: Threat Levels Remain at Elevated – July 2024 FB-ISAO Updates! FB-ISAO Newsletter, v6, Issue 7 The FB-ISAO FireArms in the House Series: What Did We Learn? WaterISAC Surpasses 600 Members, Strengthening Water and Wastewater Security Nationwide Critical infrastructure organizations want CISA to dial back cyber reporting Real Estate Coalition Raises Concerns Over Cyber Reporting Requirements Briefing 23: Space Sector at Risk as Ransomware Groups and Nation State Actors Collaborate Guarding Health: Errol Weiss on Protecting the Healthcare Sector from Cyber Threats Assassination Attempt FBI, DHS warn of possible retaliation for attack on Trump FBI Update on the FBI Investigation of the Attempted Assassination of Former President Donald Trump Secretary Mayorkas Delivers Remarks at White House Press Briefing Statement From U.S. Secret Service Director Kimberly Cheatle DHS secretary says direct line of sight 'should not occur' in wake of Trump assassination attempt What We Know—and Don’t Know—So Far About the Trump Rally Gunman Rooftop where gunman shot at Trump was identified as a security vulnerability before rally: sources Secret Service investigating how gunman was able to get so close to Trump Local Cop Confronted Trump Gunman Before Shooting—but Backed Away New information emerges on Trump shooting suspect Misinfo: Misinformation spreads swiftly in hours after Trump rally shooting Social Media Platforms Deluged by Unsubstantiated Claims About Trump Rally Conspiracy theories about the Trump rally shooting flourish online Trump Assassination Attempt Sparks Antisemitic Conspiracy Theories and Violent, “Revenge” Rhetoric Far-Right Extremists Call for Violence and War After Trump Shooting Donald Trump talks unity after shooting attempt Copa America final kick-off delayed after fans struggle to enter stadium in Miami Copa America final delayed after hordes of fans climb vents, walls to ‘forcibly enter’ Hard Rock Stadium in chaotic scene Copa América final start delayed after fans rush gates Copa America security disaster ‘not a good look’ for US ahead of World Cup: Alexi Lalas Venue Security, The IAVM Podcast Series: Throwing down the gauntlet with Brendan Farley as we discuss the art and science of crowd management. The Gate 15 Interview: Dr. G. Keith Still on crowd security, drinking whisky, smashing ashtrays in Saudi Arabia, the Land of Ice and Fire, and what not to ask a Scotsman. 24 Jul 2023. Nerd Out Security Panel Discussion: EP 19. Talking Crowd Control and the Holidays – in 2 Parts! Nov 2021. Quick Hits A Globally Integrated Islamic State Tenuous Taliban control gives life to al-Qaida, Islamic State Goldman Sachs: AI Is Overhyped, Wildly Expensive, and Unreliable. Justice Department Leads Efforts Among Federal, International, and Private Sector Partners to Disrupt Covert Russian Government-Operated Social Media Bot Farm TikTok Content Farms Use AI Voiceovers to Mass-Produce Political Misinformation CSU's 2024 Atlantic seasonal hurricane forecast was released on 4 April and updated on 9 July Colorado Reports Three Presumptive Positive H5 Cases in Poultry Workers Bird flu spread to cows takes 'dangerous' step towards infecting humans through respiration, scientists warn AT&T Discloses Breach of Customer Data US and Germany foiled Russian plot to assassinate CEO of arms manufacturer sending weapons to Ukraine New Jersey Man Charged with Soliciting Destruction of Energy Facilities Victims of cyber extortion and ransomware increase in 2024 Orange Cyberdefense: Cy-Xplorer 2024 - When bits turn to blackmail - all about ransomware and cyber extortion Black man dies, crying for help, after hotel guards pin him down, video shows CISA Releases Insider Threat Reporting Templates

Nerd Out EP 49. Foreign Influence, extremism, a top 3, and the Acolyte Jul 10, 2024

Show notes

In the latest episode of Nerd Out, Dave and Alec went through the recent news talking about the foreign influence that is creating security concerns around the world. Then they looked at the latest extremist news before getting into a new segment that talks to three of their considerations for building a security program. Then they wrapped up digging into the happenings of the Acolyte and what they think may happen in the finale. Some of the articles referenced in the pod include: State sponsor. https://amp.cnn.com/cnn/2024/07/09/politics/intelligence-russian-sabotage-threat-us-bases-europe https://www.cnn.com/2024/06/30/europe/russia-hybrid-war-nato/index.html https://www.atlanticcouncil.org/commentary/testimony/the-urgent-threats-posed-by-the-ira[…]stify-before-the-us-house-committee-on-homeland-security/ https://extremism.gwu.edu/sites/g/files/zaxdzs5746/files/Hezbollah's_Operations_and_Networks_in_the_United_States_June30_2022.pdf Protests. https://abcnews.go.com/US/wireStory/iran-encourages-gaza-war-protests-us-stoke-outrage-111792439 https://www.jpost.com/international/article-807189 https://www.policemag.com/vehicle-ops/news/15670549/group-burns-portland-police-vehicles-over-propalestinian-protests FTO/HVE. https://abcnews.go.com/Politics/foreign-terrorists-targeting-us-increasingly-fbi-director/story?id=109045112 https://www.washingtonpost.com/national-security/2024/07/05/gaza-terrorism-israel-us-intelligence/ https://www.voanews.com/a/new-migration-patterns-fuel-islamic-state-s-plans-for-the-us-/7676413.html https://gnet-research.org/2024/07/04/the-digital-weaponry-of-radicalisation-ai-and-the-recruitment-nexus/ https://www.cbsnews.com/news/more-information-emerges-about-8-tajikistani-men-arrested-for-suspected-isis-ties/ https://nypost.com/2024/07/09/us-news/suspected-jihadist-caught-with-weapons-outside-laguardia-indicted/#:~:text=A%20suspected%20Jihadist%20from%20Queens,with%20his%20license%20plate%20covered. DVE. https://www.militarytimes.com/news/your-military/2024/07/03/toxic-politics-increase-terrorism-extremism-risk-dhs-official-says/ https://abcnews.go.com/US/yellowstone-national-park-shooting-update/story?id=111794858 https://www.cbsnews.com/sanfrancisco/news/san-jose-explosives-arrest-ridder-park-drive/

Weekly Security Sprint EP 72. Sequel week - hurricanes, FBI reports, ransomware Jul 09, 2024

Show notes

In this week's Security Sprint, Dave and Andy covered the following topics: DHS Announces $18.2 Million In First-Ever Tribal Cybersecurity Grant Program Awards. “For far too long, Tribal Nations have faced digital and cybersecurity threats without the resources necessary to build resilience,” said Secretary of Homeland Security Alejandro N. Mayorkas. Main Topics: Beryl!! & Hurricane Preparedness. Port of Corpus Christi announcement. https://portofcc.com/hurricane-beryl-impact-to-the-port-fully-transitioned-to-post-storm-recovery/ Airline impacts. https://www.cbsnews.com/news/hurricane-beryl-houston-texas-travel-flights-airlines/ Ransomware Ransomware Attack Demands Reach a Staggering $5.2m in 2024 Risky Biz News: Ransomware attacks increase hospital mortality rates Risky Biz News: A ransomware attack is putting lives at risk across South Africa Halcyon Whitepaper: What CFOs Should Know about Ransomware FBI Helps Public to Recognize Signs of Concerning Behavior https://www.fbi.gov/news/stories/behavioral-analysis-unit-asks-public-to-talk-to-someone-you-trust-if-you-notice-concerning-behaviors Microsoft: Combatting AI Deepfakes: Our Participation in the 2024 Political Conventions CDC Reports Fourth Human Case of H5 Bird Flu Tied to Dairy Cow Outbreak Quick Hits: Another far right group marches through downtown Nashville Pa. Capitol evacuated over emailed bomb threat 'Local Residents' Terrorizing City Council Meetings Were Actually Overseas, Feds Allege Europol: Taking action against antisemitism – close to 2 000 pieces of content flagged for removal Fifty violent attacks shock France ahead of crunch vote A Hacker Stole OpenAI Secrets, Raising Fears That China Could, Too Europol coordinates global action against criminal abuse of Cobalt Strike CISA: Guide to Operational Security for Election Officials

Our TOPPODCAST Picks

Follow Us

Stay Connected

The Gate 15 Podcast Channel – Gate 15

Related Podcasts

Links

Stay Connected