Hetherington Group’s Post

🥊 The Transportation sector took a beating last year Cyberattacks were up 36% in 2023 for Transportation/Logistics Malware and ransomware (35% of attacks) were the prime attack vectors, exploiting third-party risks Access to company systems is being sold on dark web markets for up to $20,000 Attacks that start small can have massive implications due to supply chain relationships Navigation disruptions, fuel management issues, traffic management issues, shipping delays, inventory loss... the list goes on.. https://lnkd.in/g7bd5eVN

#Lebanon pager attack is turning connected devices to sniper killing tools. It follows the blueprints of a #supplychain attack on "connected" devices combining a cyberwarfare tools: 1️⃣ Compromise the the supply chain to prepare the infiltration of the killing pager hardware: intercept the Hezbollah order of pager in the logistic chain 2️⃣ Infiltration of malicious components: substitute the regular pager hardware in the package with the explosive enhanced pager hardware. Note: form-factor of the compromised hardware needs to be almost same than the regular pagers 3️⃣ Establish a "kill pill": compromised pagers listen to a "kill pill" message from a command and control infrastructure via pager RF network protocol 4️⃣ BOOM: the main explosive impact needs to target toward the victims to create maximum harms Conclusion:  ✅ you need a lot of intelligence to prepare the attack, manufacturing Ressource to scale the compromised devices, ✅ logistics to infiltrate the supply chain ✅ and electromagnetic warfare / cyber capabilities to trigger the kill pill over Lebanon. Watch Mirko Ross' video to find out more! #libanon #cyberangriff #supplychainattack #cyberattack #supplychain #Lieferkette #maliciousdevices #IoTdevices #pager #logistics #pagerattack #cybersecurity #cybercrime Konrad Buck | Willi Krieger | Christian Billmann | Rob van Kranenburg | Cyril Coste | Kevin O'Donovan | Antonio Vieira Santos | Olaf Classen | Angelika Lattner | Gerhard Steininger | Nora Myszkowiak | Antonio Grasso | 

Via ntd.com: US Bolsters Cybersecurity of Ports Over CCP Threat The White House on Feb. 21 announced new measures to strengthen cybersecurity of U.S. ports and maritime supply chains, following the same-day release of a Maritime Advisory report. An advisory from the U.S. Department of Transportation warned that foreign-built port equipment features vulnerabilities that may be used to impact or harm global maritime supply chains, pointing specifically to the dangers of software and hardware developed in China. https://lnkd.in/e2ty3KDM

🏢By securely destroying hard drives, organizations can prevent sensitive information about their supply chain partners from being leaked, which helps protect the entire supply chain ecosystem from potential security threats. #Shreed #EnvironmentallyFriendly #InformationSecurity #dataprivacy #databreach #harddrive #media

Evolution of cybersecurity in the supply chain with Antwan Banks | Loade… In today’s episode Antwan D. Banks, director of enterprise security at The National Motor Freight Traffic Association (NMFTA) joins us to talk about the state of cybersecurity within the supply chain. We’ll dive into the evolving threats and what they mean for the freight industry.

Kaspersky's Industrial Control Systems Cyber Emergency Response Team (ICS CERT) has outlined key cybersecurity #predictions for 2024. Some of the highlights: * Rapid automation and digitization in logistics and transport bring together cyber and traditional crimes. * Theft of cars, especially from Asian and new brands prioritizing speed over cybersecurity, is a significant concern. * Maritime piracy and logistical disruptions may occur through cyber means, targeting tracking systems and port terminals. * Cyber methods could be employed for stealing goods and smuggling, resembling tactics seen in the "#Oceans 13" case in #Antwerp. https://lnkd.in/d6jvKQXg * There's a risk of fraud in logistics, such as manipulating digital rights management for unfair competition. * Increased use of standard IT components and connections to cloud services may lead to widespread infections. * Failures in critical monitoring and control systems could happen, particularly in river, sea, truck, and emergency transport vehicles. https://lnkd.in/dNZ4iJjS

📣 U.S. Commerce Proposes Rule to Secure Connected Vehicle Supply Chains from Foreign Threats On September 23, 2024, the U.S. Department of Commerce’s Bureau of Industry and Security (BIS) proposed a new rule to secure connected vehicle supply chains from foreign adversaries, particularly China and Russia. ⛔ The rule would prohibit the sale or import of connected vehicles with Vehicle Connectivity System (VCS) and Automated Driving System (ADS) components tied to these nations. This measure aims to prevent foreign entities from accessing sensitive data or manipulating vehicles remotely. 🗓 The proposed restrictions will begin affecting software in 2027 and hardware in 2030, targeting potential threats to national security and U.S. infrastructure. Original source 👉: https://lnkd.in/ed4xDTHv #USexportcontrols #exportcontrols #exportcontrolsupdate #ConnectedVehicles #BIS #SupplyChainSecurity #CyberSecurity #VCS #ADS

The shipping sector is reportedly facing a spike in cyberattacks tied to state-sponsored hackers. The industry saw at least 64 cyber incidents last year, the Financial Times reported Saturday (July 27), citing research by the Netherlands’ NHL Stenden University of Applied Sciences. That study found that there were three such incidents in 2013 and zero in 2003. More than 80% of the incidents logged since 2001 that involved a known attacker originated in Russia, China, North Korea or Iran, the study showed. “The international rules-based order … the great system [that benefited shipping] since the second world war is under threat like never before,” Guy Platten, secretary-general at the International Chamber of Shipping, which represents shipowners controlling about 80% of the world’s commercial fleets, told the FT. The report also noted that shipping experts are warning that the industry — which has since its infancy dealt with the physical threat of pirates — is not prepared for the online variety. “IT spend in the maritime sector is pretty low,” said Stephen McCombie, a maritime IT security professor at NHL Stenden. Shipowners, McCombie added, “are looking for people with maritime knowledge and cybersecurity knowledge,” though that is not a large group. #PelionCyberSecurity #ShippingIndustry #Cyberattacks #MaritimeSecurity #WWIIThreatLevel #CyberThreats #GlobalTradeSecurity

A multi-disciplinary approach is needed to achieve supply chain security and includes input from key organizational components like Physical Security, Counterintelligence, IT, Insider Threat and more. See NCSC's new guidance for #SCRM best practices: https://lnkd.in/g64uKzRT  

Cybersecurity is a concern that extends beyond just IT to become a crucial operational consideration. In the modern shipping industry, vessels are becoming more interconnected, making them vulnerable to cyber attacks that can not only disrupt operations but also jeopardize the safety of the crew. This highlights the necessity for collaboration between operational and IT departments to establish a secure environment for ships and their crew, aligning with the evolution of maritime laws to address cybersecurity concerns.