Joint Tactics and Technologies

Joint Tactics and Technologies - we're everywhere 👀 🕵♀️ Interested in working with us? Connect with: Keith J - Director of Strategy (San Diego) Rick Martier - Growth Manager (Charleston) Nicole H. - Proposal Manager (San Diego and at AFCEA San Diego Chapter events)

Concerned about air-gapped security after our post last week? Mordechai Guri and his research team recently published another way to exploit air-gapped systems. A new side-channel attack they demonstrated, called PIXHELL, can exfiltrate data from air-gapped computers by exploiting the noise generated by pixels on an LCD screen. The attack uses the internal components of the LCD screen to generate acoustic signals that are detected with a high-quality smartphone microphone. The malicious code exploits the sound generated by coils and capacitors to control the frequencies emanating from the screen, using it to transmit sensitive information. The attack manipulates the pixels on the screen, limiting its use to times when personnel are away to remain undetectable. Concerned about the potential for PIXHELL? Mitigations include: 🔇Acoustic jamming 📡Audio spectrum monitoring 🔒Limiting physical access 📵Prohibiting use of smartphones 📹Video monitoring   Joint Tactics and Technologies helps our NAVWAR customers develop novel methods of cybersecurity analytics and network security. Interested in learning more about how we can work together to protect systems? Follow and reach out! #cybersecurity #airgapsecurity #sidechannelattack #pixhell #dataexfiltration

Think air-gapping your systems is enough to keep them safe? 🤨 Israeli researcher Mordechai Guri, known for researching and identifying new and concerning ways to break into "secure" systems, recently published a method for hacking air-gapped systems. The method, named RAMBO, leverages software-generated radio signals to steal data from a system's memory. RAMBO uses malware to encode the data and then transmits it via radio waves. His team was successful in accessing sensitive information such as files, encryption keys, and images. Malicious actors pose a persistent threat, even to systems that are isolated from external networks. How can you protect your air-gapped systems? 🚧Zone restrictions 🕵️Host intrusion detection systems 👩💻Hypervisor-level memory access monitoring 📻External radio monitoring 🫸Internal RAM jamming 📶External electromagnetic jamming 🥅Radio reduction/blocking Faraday enclosures Joint Tactics and Technologies' skilled cyber professionals include ISSMs, ISSEs, IA engineers, cybersecurity engineers, cyber analysts, risk analysts, pen testers, and more. Let's tackle your cybersecurity challenges together. What are your thoughts on this new attack vector? Let's discuss in the comments! #informationsecurity #cybersecurity #hacking #datatheft #RAMBO

More details on the Iranian ransomware attacks continue to be released. An Iranian hacker group, Peach Sandstorm, is using a new malware called Tickler to gather intelligence by targeting critical infrastructure in the US and UAE. They’ve also conducted password spray attacks against defense, space, education, and government organizations in the US and Australia. 👀The hackers use LinkedIn for intelligence gathering and social engineering. 👀 Here are some tips to protect your organization: 📲Implement multi-factor authentication (MFA) 🩹Regularly patch your systems 👥Educate employees about phishing and social engineering attacks 📋Have a plan for responding to a cyber attack 🔐Change default passwords and avoid using the same password across multiple systems Joint Tactics and Technologies supports Naval Information Warfare Center Pacific with vulnerability management, continuous monitoring, and incident response – protecting systems from such attacks. Reach out to learn more. #cybersecuritythreats #malware #criticalinfrastructure #securityawareness

More details on the Iranian ransomware attacks continue to be released. An Iranian hacker group, Peach Sandstorm, is using a new malware called Tickler to gather intelligence by targeting critical infrastructure in the US and UAE. They’ve also conducted password spray attacks against defense, space, education, and government organizations in the US and Australia. 👀The hackers use LinkedIn for intelligence gathering and social engineering. 👀 Here are some tips to protect your organization: 📲Implement multi-factor authentication (MFA) 🩹Regularly patch your systems 👥Educate employees about phishing and social engineering attacks 📋Have a plan for responding to a cyber attack 🔐Change default passwords and avoid using the same password across multiple systems Joint Tactics and Technologies supports Naval Information Warfare Center Pacific with vulnerability management, continuous monitoring, and incident response – protecting systems from such attacks. Reach out to learn more. #cybersecuritythreats #malware #criticalinfrastructure #securityawareness

Heads up! 🚨 CISA, the FBI, and the DoD Cyber Crime Center have released a new advisory warning about Iranian cyber actors enabling ransomware attacks against US organizations.   The ransomware attacks are targeted at exploiting U.S. and foreign organizations across a variety of sectors, including education, finance, healthcare, and defense. The hackers gain network access, then work with ransomware groups in exchange for a cut of ransom payments.   The multi-agency advisory provides Indicators of Compromise, Mitigations, and steps to validate Security Controls. Need help hardening your systems against these types of threats? Joint Tactics and Technologies has experience conducting cybersecurity engineering across multiple NAVWAR Program Offices. Reach out to learn more.   #cybersecurity #ransomware #cisa #staysafe

Heads up! 🚨 CISA, the FBI, and the DoD Cyber Crime Center have released a new advisory warning about Iranian cyber actors enabling ransomware attacks against US organizations.   The ransomware attacks are targeted at exploiting U.S. and foreign organizations across a variety of sectors, including education, finance, healthcare, and defense. The hackers gain network access, then work with ransomware groups in exchange for a cut of ransom payments.   The multi-agency advisory provides Indicators of Compromise, Mitigations, and steps to validate Security Controls. Need help hardening your systems against these types of threats? Joint Tactics and Technologies has experience conducting cybersecurity engineering across multiple NAVWAR Program Offices. Reach out to learn more.   #cybersecurity #ransomware #cisa #staysafe

🚨A bipartisan group of lawmakers are calling for an investigation into TP-Link routers due to concerns about potential Chinese access to US systems. This follows research indicating a Chinese Advanced Persistent Threat (APT) group created malicious firmware specifically targeting TP-Link devices. 🚨 The US has previously banned equipment from Chinese companies due to well-founded national security concerns. APT40, a PRC-state sponsored cyber group, has targeted organizations in various countries, including Australia and the US. APT40 possesses the ability to quickly transform and adapt vulnerability proofs of concept for targeting, reconnaissance, and exploitation operations. 🛡️Joint Tactics and Technologies supports the Naval Information Warfare Center Pacific Cybersecurity Helpdesk for all cybersecurity-related incidents, including spillages, account management, whitelisting of network devices, endpoint security troubleshooting, and DADMS support. Our highly qualified personnel help protect our nation’s assets by identifying, preventing, and remediating cyber incidents. 🛡️ 👨💻Connect with us to learn more. #cybersecurity #china #tplink

Keith J and Nicole H. will be here representing Joint Tactics and Technologies! 👋

Come meet Joint Tactics and Technologies at National Defense Industrial Association - (NDIA) Gold Coast next week! Keith J will be representing us.