In this week's Security Sprint Andy and Hunter talk about the following topics:
Warm Open:
• How Healthcare Facilities Can Be Truly Disaster-Resilient. Healthcare Facilities Today spoke with Jon Crosson, director of health sector resilience at Health-ISAC, on what makes a solid resiliency program for healthcare facilities, the importance of real-time information sharing and how healthcare facility managers can use partnerships to improve response and recovery efforts.
• Healthcare cybersecurity needs a total overhaul, by Errol Weiss, Chief Security Officer, Health-ISAC
• Addressing Risks from Chris Krebs and Government Censorship
o Fact Sheet: President Donald J. Trump Addresses Risks from Chris Krebs and Government Censorship
o Trump Revenge Tour Targets Cyber Leaders, Elections
o Gate 15: Cybersecurity & Infrastructure Security: Time to Make This Happen, December 15, 2017
Following the House of Representatives, the US Senate needs to approve the re-designation of DHS’s National Protection and Programs Directorate (NPPD) to become the Cybersecurity and Infrastructure Security Agency (CISA);
The President should nominate, and the Senate should confirm, Christopher Krebs as Under Secretary for NPPD and then as the first Director of National Cybersecurity and Infrastructure Security.
Main Topics:
Hacktivism & Nation-State Influence
• CyberAv3ngers: The Iranian Saboteurs Hacking Water and Gas Systems Worldwide
• IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities
• Top 10 Advanced Persistent Threat (APT) Groups That Dominated 2024
• The rising tide: A 2024 retrospective of hacktivism
Political Violence, Executive Protection
• ‘Save the white race’: Teen who gunned down his parents was plotting a ‘political revolution’ that included ‘getting rid of’ President Trump, police say
• Pennsylvania Man Charged with Making Threats to Assault and Murder President Donald J. Trump, Other U.S. Officials, and Immigration and Customs Enforcement Agents & ‘Going to assassinate him myself’: Man ‘buying 1 gun a month since the election’ threatened to kill Trump in multiple YouTube comments under name ‘Mr Satan,’ FBI says
• Suspect in custody after overnight arson at Pennsylvania Gov. Josh Shapiro's residence
o Was Cody Balmer 'Upset' With Gov Josh Shapiro Over Property Seizure?
o Harrisburg man to be charged with attempted murder of Gov. Josh Shapiro for setting fire to official residence
o Suspect in arson at Pennsylvania Gov. Josh Shapiro's residence planned to beat him, documents say
o Suspected arsonist Cody Balmer accused of firebombing Gov. Shapiro’s home shared disturbing photos online
o Cody Balmer's Social Media Reveals Anti-Joe Biden Posts
• Protect Democracy: How does Gen Z really feel about democracy? 11% believe that it political violence is sometimes necessary to achieve progress.
• Arrest made at UnitedHealthcare headquarters after reports of an intruder
Quick Hits:
• Threat Actor Allegedly Selling Fortinet Firewall Zero-Day Exploit
• 8 April 2025 NCSC, FBI, DCSA bulletin – Online Targeting of Current & Former U.S. Government Employees.
• FAA Drone Detection Testing. The FAA will conduct drone-detection testing in Cape May, New Jersey, between April 14-25.
• Top homeland security lawmaker calls for cautious cuts to CISA
• CISA cuts: ‘Open season’ for US?
• Senator puts hold on Trump’s nominee for CISA director, citing telco security ‘cover up’
• OCC Notifies Congress of Incident Involving Email System
o Treasury bureau notifies Congress that email hack was a ‘major’ cybersecurity incident
o Hackers lurked in Treasury OCC’s systems since June 2023 breach
• US Cyber Command: Posture Statement of Lieutenant General William J. Hartman