Steven S.’s Post

💻 Russian Hackers Linked to 'Largest Ever Cyber Attack' on Danish Critical Infrastructure 🏭 🔑 Key Excerpt: Russian threat actors have been possibly linked to what's been described as the "largest cyber attack against Danish critical infrastructure," in which 22 companies associated with the operation of the country's energy sector were targeted in May 2023. "22 simultaneous, successful cyberattacks against Danish critical infrastructure are not commonplace," Denmark's SektorCERT said [PDF]. "The attackers knew in advance who they were going to target and got it right every time. Not once did a shot miss the target." The agency said it found evidence connecting one or more attacks to Russia's GRU military intelligence agency, which is also tracked under the name Sandworm and has a track record of orchestrating disruptive cyber assaults on industrial control systems. This assessment is based on artifacts communicating with IP addresses that have been traced to the hacking crew... 🔗 Link to Article in Comments 👇

'The hard reality is that Japan must first address its cybersecurity deficiencies before deeper integration into the AUKUS pact is possible. 'Japanese insights into the future of the global technology supply chain are valuable to AUKUS partners wishing to understand how to target and protect everything from energy grids to missile guidance systems to manufacturing facilities'. Putting aside the use of 'cyberweapons' (when the author means 'exploits') and using the word 'deterrence' in a cyber context, a really interesting piece. I add that not all exploits leverage 0day and not all CNA leverages bugs (you could just log into the victim's machine/phish). https://lnkd.in/gQSJvBAc

To prove itself a formidable competitor in space, Russia is turning to space warfare. This includes anti-satellite tactics using cyber. Even in terrestrial cyber conflicts, Russia possesses the ability to engage in advanced denial-of-service, ransomware, and other types of malware attacks. While no single agency oversees Russian cyberattacks, the amount of personnel involved in these operations continues to increase. Senior Fellow with the National Institute for Deterrence Studies, Alexis Schlotterback, talks about the challenges faced by the United States policy makers and cyber defense organizations. #hackasat #satellites #cyberattacks #space

In my newest commentary for our Advancing Government series, I highlight the important work of the Defense Business Board and their recent report detailing the necessity of a common digital ecosystem for the DoD.    While the advent of AI and transformational software-enabled tools hold tremendous promise for our national security efforts, we risk ceding ground to geopolitical adversaries absent a broad and consistent framework and application of these technologies to solve some of our most pressing national security challenges.

The urgency is undeniable: developing a comprehensive digital ecosystem is mission-critical for the future of national security. With the rapid advancement of artificial intelligence technologies, the rise of sophisticated cyber threats, and the resurgence of geopolitical adversaries, the United States Department of Defense (DoD) must leverage cutting-edge digital capabilities to maintain strategic superiority. Despite widespread recognition of the need for a digital ecosystem within government and the defense industry, the current pace of adoption does not meet the pressing demands of our time. Accelerating the implementation of these technologies is essential for the DoD to ensure national security and maintain a competitive edge. Read more about what the DoD can do to implement an enterprise digital framework in SGT President and CEO John Ustica's newest article in the Advancing Government series: https://bit.ly/3Sd3MHm #SGT #Siemens #SiemensGovernmentTechnologies #AdvancingGovernment #DepartmentOfDefense #Digitalization #DigitalEcosystem

Cyberattacks are continually reshaping global warfare, tracing back to significant incidents since 2007. In recent developments, Russia has intensified its cyber-attacks on Ukraine, leveraging malware to target Ukrainian military Android devices, marking a decade-long cyber campaign that has seen Ukraine bolster its cyber defenses significantly. Meanwhile, China's rising cyber warfare activities are linked to its geopolitical interests, including tensions with the US, with predictions of increased aggressive cyber threats in the future. North Korea is notably utilizing cyber espionage and cryptocurrency thefts, amassing $1.7 billion in 2022 alone, to fund its military ambitions. As nations increasingly adopt cyber warfare as a cost-effective tool to further their agendas, it brings profound impacts across various sectors globally, affecting civilians both directly and indirectly. This digital transformation in warfare indicates a new world order, with cyber capabilities significantly influencing power dynamics and international relations. The evolving scenario underscores a permanent shift in global politics, with the future of international relations heavily reliant on the advancements in cyber warfare. #threatintelligence #cybersecurity #cyberwarfare #osint

#Sandworm #malware #backdoor #APT44 #UkraineRussiaWar #infosecurity #Kapeka The latest blog post is a translation of the UA-CERT article "UAC-0133 (Sandworm) plans for cyber sabotage at almost 20 critical infrastructure" yesterday. The Backdoor QUEUESEED is technically the same like Kapeka in June 2022 (same hash). "CERT-UA assumes that unauthorized access to ICS for a significant number of heat, water and energy supply facilities should have been used to enhance the effect of missile strikes on infrastructure facilities in Ukraine in the spring of 2024." #Mandiant describes SIX Phases of APT44 disruptive operations during the 2022 war in Ukraine and now the 7th phase would potentially be the non-kinetic attempt to disrupt again with the same backdoors like KAPEKA from June 2022 which was used with SDELETE. Exact the same hash we see now in this UA-CERT article for UAC-0133 the QUEUESEED backdoor with the same technical behavior also using SDELETE. It is important to understand such backdoors and tools in case of further attacks on NATO countries. If Russia would potentially try to attack our critical infrastructure this would be the way. Once the backdoors are established and self-deleted it is hard to find further backdoors. Therefore, the recommendation would be to create robust detection in preparation for an attempt to disrupt European critical infrastructure or at least monitor such suspicious behavior of - for example - self-deleting batch files.

CEMA (cyber electromagnetic activities) and JEMSO (joint electromagnetic spectrum operations) are often seen as something going on in the Five Eyes (FVEY) community, supported by massive budgets. We can help at EWS. Read more 👉 https://lttr.ai/AJBcm

CEMA (cyber electromagnetic activities) and JEMSO (joint electromagnetic spectrum operations) are often seen as something going on in the Five Eyes (FVEY) community, supported by massive budgets. We can help at EWS. Read more 👉 https://lttr.ai/AGF0W

🚨 Into the Cyber Future - Warfare in the Digital Age 🚨 The threat of cyber warfare is changing, as well as the threats themselves! 🔍 My newest blog post cuts through the digital fog and shows how technological progress and strategic changes shape the cyberwars of tomorrow. Think AI-fortified attacks, quantum defense, and a planetary plea for cyber peace treaties.🌐💡 Why should you care? Because the digital battlefield is closer than you think – it's your devices, data, and daily life. Dive in to discover how we can fortify our digital domains against the unseen warriors of the future. 💥🛡️ Let’s decode the future of cyber warfare together. Your thoughts could light up the path ahead! #CyberWarfare #TechTrends #FutureIsNow