The Gate 15 Podcast Channel - Gate 15

Latest Episodes:

Nerd Out: EP 39. The 2nd Annual Two-Thirds of the Year Awards Aug 15, 2023

Show notes

In the latest episode of Nerd Out Dave rolls out the second annual Two-Thirds of the Year Awards. The winners are: Heath Ledger Joker Award. Extreme Heat. Avengers Team Up Award. ISACs. Scotty Doesn't Know Award. Insider Threats. Dumpster Fire Award. MOVEit Aldus Snow Award. Ransomware Dennis Green "They are who we thought they were" Award. Mother Nature The Cobra Award - "You're the disease and I'm the cure". Patching MVP. eCrime

Weekly Security Sprint EP 28. The return of the weatherman, CISA strategic plans, espionage, exploited vulnerabilities and…so much more! Aug 08, 2023

Show notes

In this week's Security Sprint, Dave and Andy talk about the following topics. Hurricanes. CSU released its final forecast for the 2023 Atlantic hurricane season on Thursday, 3 August. CISA Cybersecurity Strategic Plan. CISA Cybersecurity Strategic Plan: Shifting the Arc of National Risk to Create a Safer Future. China Espionage. https://www.justice.gov/usao-sdca/pr/us-navy-sailor-arrested-and-charged-espionage More CISA. CISA, NSA, FBI, and International Partners Release Joint CSA on Top Routinely Exploited Vulnerabilities of 2022. Top 12 vulnerabilities list highlights troubling reality: many organizations still aren’t patching; The list includes well-known vulnerabilities impacting Fortinet's VPNs and Log4Shell that hackers still routinely exploit. Cloudflare: Unmasking the top exploited vulnerabilities of 2022 QH Biden-⁠Harris Administration Launches New Efforts to Strengthen America’s K-12 Schools’ Cybersecurity The Synagogue Attack Stands Alone, but Experts Say Violent Rhetoric Is Spreading Pensacola police arrest 4 teens in connection to string of antisemitic vandalism Man who allegedly fired shots at Jewish school shared grievances against it, flashbacks of father’s violent death & Former student fired gun at Jewish school, shot by police Police investigating vandalism at Utah’s oldest Black church Georgia man accused of breaking into Florida church, ‘baptizing’ himself Bomb threat shuts down OHSU clinic after anti-trans information posted online The USCP Remains Vigilant Following False Active Shooter Report The Senate went into a shelter-in-place and partial evacuation following reports of an possible active shooter on the Capitol campus. Outside of Trump’s arraignment, revelers mark dueling visions of justice Among MAGA extremists, Trump charges draw big talk, small crowds Security upped near Fulton courthouse as possible Trump indictment nears Malwarebytes: 2023 State of Ransomware Threat Intelligence. Report: Ransomware Command-and-Control Providers Unmasked by Halcyon Researchers Cloud company assisted 17 different government hacking groups -US researchers Dragos Industrial Ransomware Attack Analysis: Q2 2023 RUSI: Cyber Insurance and the Ransomware Challenge. Threat Research Analysis of Ransomware Victims from Ransom Leak Site Data August 2023 Threat Horizons Report Provides Cloud-Focused Cybersecurity Insights and Recommendations SC Magazine: No evidence organizations with cyberinsurance more likely to pay ransom How Tampa General Hospital thwarted a ransomware attack The Week in Ransomware - August 4th 2023 - Targeting VMware ESXi Additional MOVEit-related health data breaches reported 1.7 Million Oregon Health Plan Members Affected by MOVEit Hack US govt contractor Serco discloses data breach after MoveIT attacks Crozer Health’s computer systems were knocked offline Thursday by a ransomware attack Ransomware Roundup - DoDo and Proton Ransomware attacks cost manufacturing sector $46 billion in downtime since 2018, report claims CYFIRMA: RANSOMWARE TRENDS : H1 2023 – Part 1 Qilin Ransomware Gang Adopts Uncommon Payment System: All Ransom Payments Funneled through Affiliates

Weekly Security Sprint EP 27. New SEC Rules, China cyber threat foot-stomping plus anger, radicalization, political violence, the critical-ist of infrastructure and…so much more! Aug 01, 2023

Show notes

In the week's Security Sprint, Andy and Jen talked about the following topics: Jen’s Cyber Updates SEC: SEC Adopts Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies. Final Rule; Fact Sheet. Fortinet: Cybersecurity, A Necessity for the Sustainability of Society Tenable: FAQ: What the New SEC Cybersecurity Rules Mean for Infosec Leaders Florida mandates cybersecurity training for state workers FACT SHEET: Biden-⁠Harris Administration Announces National Cyber Workforce and Education Strategy, Unleashing America’s Cyber Talent. Survey: Political Violence is Justified ‘Anger and radicalization’: rising number of Americans say political violence is justified; Survey shows a small but significant share of Americans believe in use of force to attain political goals – on both the left and the right Infrastructure Cyber Threats U.S. Hunts Chinese Malware That Could Disrupt American Military Operations; American intelligence officials believe the malware could give China the power to disrupt or slow American deployments or resupply operations, including during a Chinese move against Taiwan. ICYMI: SAVE THE DATE! H2OSecCon Powered by WaterISAC. October 19 -20 Virtual 2023. H2OSecCon is coming back for a second year and will be held virtually from October 19 20. This two-day virtual conference will focus on IT and OT cybersecurity, physical security, and resilience for the water and wastewater sector. Space: If you’ve ever heard our Gate 15 podcasts, including our interviews with the team at Space ISAC, you know we’re on board with this: Bipartisan bill designates space as critical infrastructure sector. FYSA: TAG Cyber Announces Release of 2023 Q3 Edition: Focused on Cybersecurity in Outer Space. Threats and Scams Attackers exploit Windows-based ‘search-ms’ protocol Ransomware Delivery URLs: Top Campaigns and Trends & Web browsing is the primary entry vector for ransomware infections USPS Phishing Scam Targeting iOS Users CISA and Partners Release Joint Cybersecurity Advisory on Preventing Web Application Access Control Abuse CISA Releases Analysis of FY22 Risk and Vulnerability Assessments CISA Releases Malware Analysis Reports on Barracuda Backdoors Exploitation of Recent Citrix ShareFile RCE Vulnerability Begins Known Exploited Vulnerabilities Catalog US contractor says info of up to 10 million leaked in MOVEit breach: An IT firm that provides services to Medicaid, Medicare, U.S. student loan servicers and other government programs confirmed that the information of up to 10 million people may have been accessed by hackers exploiting the MOVEit file transfer software. Quick Hits Severe Weather – this is being covered every day in the Gate 15 SUN CISA Establishes Regional Election Security Advisors to Strengthen Front Line Support to the Election Community CISA: Cybersecurity Performance Goals: Sector-Specific Goals President Biden Announces Key Nominees, including Harry Coker, Jr., Nominee for National Cyber Director. 2023 Cofense Phishing Intelligence Trends Review: Q2 CISA, USCG Publish Analysis Report on Findings During 2022 Risk and Vulnerability Assessments CISA and Partners Release Joint Cybersecurity Advisory on Preventing Web Application Access Control Abuse Ivanti Releases Security Updates for Endpoint Manager Mobile (EPMM) CVE-2023-35078 Google - The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022 Categorizing the CISA KEV by Technology Type

Weekly Security Sprint EP 26. Jul 24, 2023

Show notes

In the week's Security Sprint, Andy and Jen talked about the following topics: Jen’s Cyberthreat Mash-Up Citrix! CISA Releases Cybersecurity Advisory on Threat Actors Exploiting Citrix CVE-2023-3519. New critical Citrix ADC and Gateway flaw exploited as zero-day Citrix Releases Security Updates for NetScaler ADC and Gateway. Citrix has released security updates to address high and critical vulnerabilities (CVE-2023-3519, CVE-2023-3466, and CVE-2023-3467) affecting NetScaler ADC and NetScaler Gateway. ACSC: Citrix Products NetScaler ADC and NetScaler Gateway Zero Day Vulnerability 2023-050: Citrix NetScaler Critical Vulnerability. PDF. MOVEit! EMSISOFT - Unpacking the MOVEit Breach: Statistics and Analysis. The tail of the MOVEit hack may be longer than we realize. Clop now leaks data stolen in MOVEit attacks on clearweb sites. Clop gang to earn over $75 million from MOVEit extortion attacks Microsoft expanding cloud logging to give customers deeper security visibility. CISA: CISA and Microsoft Partnership Expands Access to Logging Capabilities Broadly CISA: Microsoft to Offer Some Cybersecurity Free After Suspected China Hack More ransomware! Coveware Q2 Ransomware Report: Ransom Monetization Rates Fall to Record Low Despite Jump In Average Ransom Payments. Quarterly GRIT Ransomware Report – Q2 2023. Complete Q2 GRIT Ransomware Report here. “ DOJ merges cyber, cryptocurrency units to go after ransomware attacks The FBI’s Cynthia Kaiser on how the bureau fights ransomware The Week in Ransomware - July 21st 2023 - Avaddon Back as NoEscape Ransomware Roundup - Cl0p QILIN Ransomware Report Linux Ransomware Poses Significant Threat to Critical Infrastructure Between Two Nerds: Shaping ransomware group behaviour (podcast) New blog posts from CISA! CISA: Take the First Steps Towards Better Cybersecurity With these Four Goals. CISA: Evolving CDM to Transform Government Cybersecurity Operations and Enable CISA’s Approach to Interactive Cyber Defense Jen manifests her Cybersecurity Evangelist to talk scams! Called a bogus airline customer support number? Google is hustling to fix that Plane sailing for ticket scammers: How to keep your flight plans safe Increase in Tech Support Scams Targeting Older Adults and Directing Victims to Send Cash through Shipping Companies Scams Targeting the Elderly: FBI IC3 Increase in Tech Support Scams Targeting Older Adults and Directing Victims to Send Cash through Shipping Companies FBI: Tech support scams now use shipping companies to collect cash Health Preparedness! FACT SHEET: White House Launches Office of Pandemic Preparedness and Response Policy and more on severe weather, climate and health: Mosquitos Are Moving to Higher Elevations—and So Is Malaria. Tornado damage to Pfizer plant will probably create long-term shortages of some drugs hospitals need WSJ: The World Bakes Under Extreme Heat Boiling in Phoenix: City set to break U.S. record for consecutive days over 110 degrees Texas power use hits record high as heatwave lingers Heatwave brings health warnings as extreme weather grips globe The heat index reached 152 degrees in the Middle East — nearly at the limit for human survival Tokyo Heat Smashes 150-Year Trend as Extreme Weather Bakes Globe Smoke from Canadian wildfires places 60 million US residents under air quality alerts Ongoing rounds of rain to keep flash flood risk elevated in northeastern US QH: SAVE THE DATE! H2OSecCon Powered by WaterISAC. United States tops 400 mass shootings in 2023 IBM Report: Half of Breached Organizations Unwilling to Increase Security Spend Despite Soaring Breach Costs. Report overview. PDF in DB. What’s new in the 2023 Cost of a Data Breach report New CISA Products Released. CISA Develops Factsheet for Free Tools for Cloud Environments. NSA, CISA Release Guidance on Security Considerations for 5G Network Slicing. New Zealand shooter kills two ahead of Women's Soccer World Cup

The Gate 15 Interview: Dr. G. Keith Still on crowd security, drinking whisky, smashing ashtrays in Saudi Arabia, the Land of Ice and Fire, and what not to ask a Scotsman. Jul 24, 2023

Show notes

In this episode of The Gate 15 Interview, Andy Jabbour visits with Dr. G. Keith Still, Crowd Dynamic Expert, Visiting Professor of Crowd Science at University of Suffolk and Director, Crowd Risk Analysis Ltd. G. Keith Still BSc PhD FIMA FICPEM SFIIRSM FIPM FHEA MAE has a PhD in “Crowd Dynamics”. He combines risk analysis with crowd behavior in both crowd models and crowd simulations. He is a visiting Professor at University of Suffolk and teaches at Breda University of Applied Science (Holland). Keith has over 30 years of consulting experience across a range of international crowd safety and risk analysis environments and has advised on crowd behavior, crowd risks and crowd safety considerations for events of 500 people to 3,000,000 people. He has published two books on the subject of Crowd Safety and Crowd Risk Analysis “Introduction to Crowd Science” and “Applied Crowd Science.”His project/consulting work includes planning for the Royal Wedding (UK, 2011), Hajj projects, (Saudi Arabia, Jamarat 2000 - 2005, Makkah 2000 - 2013), Olympic Events (Sydney 2000, London 2014), New Year Events (London, Sydney, Dubai), Canada Day (Ottawa).

Dr. Still on LinkedIn.
By email: Gkstill@me.com

In the discussion we address:

Keith’s background, teaching and current activities
The International Association of Venue Managers (IAVM) and the Academy for Venue Safety and Security (AVSS)
His visits to Saudi Arabia and experience securing the Hajj as well as smashing ashtrays and one of his favorite anecdotes
The importance of risk registers and risk assessments
The potential dangers of an attitude of “we’ve always done it this way, why should we change,” the psychology of behavior, and other ideas.
And Keith plays Three Questions to discuss travel, food, kilts and more.

Some links from our discussion include:

Nerd Out Security Panel Discussion: EP 38. ISACs, ISAOs, and the Faith-Based community with FB-ISAO Executive Director Mayya Saab Jul 17, 2023

Show notes

In the latest episode of Nerd Out, Dave welcomed Mayya Saab, the Executive Director of the Faith-Based Information Sharing and Analytics Organizations (FB-ISAO). The pair discussed Maya's path to working in security and preparedness and how it prepared her for her current role. Then Mayya talked about the importance of Information Sharing and Analytic Centers and Organizations, and specifically the FB-ISAO. Mayya, talked about how their community of faith works, and why it is important that these organizations work together with their government partners. Finally Mayya talked about the collaboration within FB-ISAO, and what's next.

Weekly Security Sprint EP 25. National Cybersecurity Strategy, Mass Killings Report, and more cybersecurity news plus quick hits Jul 17, 2023

Show notes

In this week's Security Sprint, Dave and Andy talked about the following topics: National Cybersecurity Strategy. Biden-⁠Harris Administration Publishes the National Cybersecurity Strategy Implementation Plan (PDF). With notable references to ISACs & ISAOs, some emphasis on SBOMs, and more. National Cyber Director unveils ‘roadmap’ for cyber strategy goalsTHE CYBERSECURITY 202: Court temporarily dunks water cybersecurity initiative Water Cybersecurity Plan on Pause. Biden administration water cybersecurity plan temporarily blocked https://apnews.com/article/mass-killings-record-gun-violence-0174103c37756fe4d247fd15cd3bc009 USA Today. https://www.usatoday.com/in-depth/graphics/2022/08/18/mass-killings-database-us-events-since-2006/9705311002/ Assessing the Political Motivations Behind Ransomware Attacks. https://www.karennershi.com/Assets/Assessing_Political_Motivations_Behind_Ransomware.pdf THE CYBERSECURITY 202 - What we know (and don’t know) about the government email breach Microsoft Email Hack Shows Greater Sophistication, Skill of China’s Cyberspies Chinese threat actors hacking Microsoft and through that other organizations including The Dept. of State. Analysis of Storm-0558 techniques for unauthorized email access. ‘On July 11, 2023, Microsoft published two blogs detailing a malicious campaign by a threat actor tracked as Storm-0558 that targeted customer email that we’ve detected and mitigated: Microsoft Security Response Center and Microsoft on the Issues. As we continue our investigation into this incident and deploy defense in depth measures to harden all systems involved, we’re providing this deeper analysis of the observed actor techniques for obtaining unauthorized access to email data, tools, and unique infrastructure characteristics.’ Chinese hackers breach U.S. government email through Microsoft cloud Chinese Hackers Breached Email of Commerce Secretary Raimondo, State Department Officials Targeting of State Department, Others in Microsoft Hack ‘Intentional’ Bicameral, Bipartisan Leaders Introduce Legislation To Strengthen Federal Cybersecurity Director Wray Champions FBI Before House Judiciary Committee Christopher Wray's Congress Testimony—Five Key Moments The FTC is investigating whether ChatGPT harms consumers; The agency’s demand for OpenAI’s documents about AI risks mark the company’s greatest U.S. regulatory threat to date Ordering the Selected Reserve and Certain Members of the Individual Ready Reserve of the Armed Forces to Active Duty What Is Operation Atlantic Resolve? Biden's Plan for U.S. Troops in Europe Growing reliance on satellites requires new approach to cybersecurity in space, expert says OT Cybersecurity Breach Disrupts Operations at the Port of Nagoya, Japan CISA and FBI Release Cybersecurity Advisory on Enhanced Monitoring to Detect APT Activity Targeting Outlook Online.

Weekly Security Sprint EP 24. Hostile Events, "Cyber Punk" scams, negligent insiders and the weatherman Jul 10, 2023

Show notes

In this week's Security Sprint, Dave and Jen discussed the following topics: China Hostile Event. BBC. https://www.bbc.com/news/world-asia-china-66151247 Cyber Scams. Cyberpoint. https://blog.checkpoint.com/security/amazon-prime-day-this-year-already-started-for-cybercriminals-check-point-research-calls-online-shoppers-to-be-wary/ Pride Event Attack. Reuters. https://www.reuters.com/world/europe/anti-lgbt-protesters-break-up-pride-festival-georgia-2023-07-08/ Water-Based Insider. https://industrialcyber.co/utilities-energy-power-water-waste/former-water-contractor-employee-tampers-with-water-treatment-systems-posing-public-health-and-safety-threat/ Quick Hits. Paris Protest. https://www.reuters.com/world/europe/paris-protest-against-police-violence-banned-after-riots-2023-07-08/ Movie. https://www.bleepingcomputer.com/news/security/moveit-transfer-customers-warned-to-patch-new-critical-flaw/?utm_source=dlvr.it&utm_medium=twitter Weatherman. https://www.nbcphiladelphia.com/weather/stories-weather/sunday-storms-could-cause-evening-flooding-in-philly/3600770/

Weekly Security Sprint EP 23. Hate based attacks, was Andy in Russia, the weather report, Cyber analysis, and more. Jun 26, 2023

Show notes

In this week's Security Sprint, Dave and Andy discuss the following topics: Georgia Synagogue Incidents. Dave also touched on LGBT and Pride Month. Links relating to those and other recent faith-based incidents include: Antisemitic rally held outside of Cobb County synagogue Outrage erupts as police allow neo-Nazis to protest outside Georgia synagogue FBI: UP man accused of planning synagogue attack had guns, Nazi flag Massachusetts church vandalized after LGBTQ Pride flags removed: 'Stay Gay' Year in Review: Anti-LGBTQ+ Hate & Extremism Incidents, 2022 – 2023 White supremacists protest Pride in Perry event Sacramento children-centric LGBTQIA+ Pride event met with protesters U.S. Attorney, FBI Raise Awareness on Importance of Reporting Hate Crimes Vandalism at Fowlers United Methodist Church Annapolis church vandalized, left with $100K in damages Man dies after shooting in Meridian church parking lot NEW JERSEY JEWISH CANCER CENTER VANDALIZED WITH ANTISEMITIC GRAFFITI ANTISEMITIC 'GDL' FLYERS FOUND IN SEVERAL PENNSYLVANIA TOWNS POLICE SEARCHING FOR SUSPECT AFTER ANTISEMITIC LEAFLETS SURFACE IN PA ANTISEMITIC 'GDL' FLYERS DISCOVERED IN ST. LOUIS INDIANAPOLIS 'MOMS FOR LIBERTY' FORCED TO APOLOGIZE AFTER QUOTING HITLER ANTISEMITIC GRAFFITI DISCOVERED OUTSIDE SOUTH FLORIDA RESTAURANT Dobbs, one year later: US activists rally one year after Supreme Court allowed abortion bans A year after Roe’s fall, Women’s March returns to press for abortion access The Dobbs Decision and the End of Roe, One Year Later A Year After the End of Roe V. Wade, How Much Has Really Changed? Statement from President Joe Biden on the Anniversary of Dobbs v. Jackson Women’s Health Organization Remarks by President Biden in a Political Event with Reproductive Rights Groups Dave and Andy Discuss Andy’s Curiously-Timed Absence, Russia & Wagner Group OSAC Security Alert: Moscow (Russia), Wagner Group Fighting in Russia (24 Jun) ‘Putin humiliated’: what the papers said about the Wagner rebellion in Russia Russia: Putin accuses Wagner boss of treason in national address – video Prigozhin’s rockstar exit from Rostov shows public support for ‘traitor’ U.S. spies learned in mid-June Prigozhin was planning armed action in Russia What is the Wagner Group? A look at the mercenary group led by man accused of ‘armed mutiny’ in Russia Open rebellion against Russia may be Wagner chief Prigozhin’s last stand Russian defence minister appears in video after Wagner mutiny Russia calls for unity behind Putin after aborted mutiny Questions Swirl on Russia Truce as Leaders Stay Silent; Defense chief reappears, Kremlin media suggest Prigozhin could yet face charges Muted Response in China to Deal Halting Rebellion Soufan - Wagner Group: The Evolution Of A Private Army Russia Says Foiled Attempted Smuggling of Radioactive Material Sever Weather! Weather Report: https://www.cnn.com/2023/06/26/us/extreme-flood-risk-first-street-federal-data-climate/index.html Men die in extreme heat: https://www.cnn.com/2023/06/25/us/big-bend-national-park-deaths/index.html Cyber Force? Senate Armed Services Committee directs independent assessment for creating a Cyber Force; Quick Hits CISA Adds Six Known Exploited Vulnerabilities to Catalog. CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CISA Adds Five Known Exploited Vulnerabilities to Catalog. CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. COVID Origins ODNI RELEASES REPORT ON THE POTENTIAL LINKS BETWEEN THE WUHAN INSTITUTE OF VIROLOGY AND THE ORIGIN OF COVID-19 & THE POTENTIAL LINKS BETWEEN THE WUHAN INSTITUTE OF VIROLOGY AND THE ORIGIN OF THE COVID-19 PANDEMIC. Intelligence Community releases declassified COVID origins report, lawmakers say it ‘lends credence’ to lab leak theory

The Gate 15 Interview EP 36: Chris Anderson, Lumen Technologies on ‘working hard, trying to make a difference,’ the wild west days of DHS, private-public partnership, the glory of coffee, and more! Jun 25, 2023

Show notes

In this episode of The Gate 15 Interview, Andy Jabbour visits with Chris Anderson, Principal Advisor, National Security & Emergency Preparedness, Lumen Technologies. Chris Anderson is an incident management and infrastructure protection expert with three decades of government, military, and private sector experience. He is currently the Principal Advisor for National Security & Emergency Preparedness at Lumen. In addition to his role at Lumen, he is the 2023 Industry Chair of the Communications Sector Information Sharing and Analysis Center.Chris previously held a variety of emergency management and national security positions at the Federal Communications Commission and US Department of Homeland Security. He served as the FCC’s Chief of Operations and Emergency Management, leading the Commission’s incident management activities, operations centers, national security coordination, and Continuity of Operations programs. Prior to joining the Commission, Chris worked in critical infrastructure protection at the Department of Homeland Security, serving in a variety of leadership positions in the Office of Infrastructure Protection, including serving as Director of the National Infrastructure Coordinating Center. Chris began his career with a decade on active duty in the U.S. Navy as a helicopter pilot and retired from the Navy Reserve in 2016.Chris is a 2010 graduate of the National War College with a master’s degree in National Security Strategy; he holds a second master’s degree in Management Information Systems from Bowie State University and received his undergraduate degree from the University of Virginia.

Chris’s background, in the Navy, at DHS, at the FCC and today with Lumen.
The wild west days of DHS and what has become CISA
‘working hard, trying to make a difference’
Incident response
Working in the public and private sector.
Chris’s thoughts on CISA and improving the private-public partnership
Working with NATO.
With shout outs to some great leaders and old friends including Bob Stephan, Linda Solheim, Bob Kolasky, Caitlin Durkovich, Steve Bieber, and others
4th of July celebrations, the glorious drink that is coffee, saving the world, and more!

Our TOPPODCAST Picks

Follow Us

Stay Connected

The Gate 15 Podcast Channel – Gate 15

Related Podcasts

Links

Stay Connected