In the latest Security Sprint Dave and Andy covered the following topics:

Warm Open:

• Health-ISAC: European Hobby Exercise 2024 After Action Report

• Peters and Rounds Introduce Bipartisan Bill to Extend Information Sharing Provisions That Help Address Cybersecurity Threats

o Bill extends cyber threat info-sharing between public, private sector

o Exclusive: Peters, Rounds tee up bill to renew expiring cyber threat information sharing law

o CRS: The Cybersecurity Information Sharing Act of 2015: Expiring Provisions, 08 Apr 2025

Main Topics:

Scams:

• FBI PSA: FBI Warns of Scammers Impersonating the IC3

• Foreign intel job scams target current, former DoD employees

• Take9

JCAT First Responders Toolbox. Third-Party Security Critical to Safeguarding Public Gatherings From Terrorist Threats

UK: Law firm fined £60,000 following cyber attack. “enabled cyber hackers to gain access to DPP’s network, via an infrequently used administrator account which lacked multi-factor authentication (MFA)”

BakerHostetler: Ready and Resilient in the Data-Driven Age. Half Measures ≠ Effective Prep. Your organization finally prepared an IRP and a BCP. That's great! But have you actually implemented and then tested these plans? (At Gate 15, we’re a bit partial to this finding. Need to exercise and test those plans? Contact our team today to schedule your next workshop, tabletop, drill or other exercise!)

The Weather Channel - 2025 Hurricane Season Outlook: Not Quite 2024, But Above-Average US Landfall Threat. The 2025 Atlantic hurricane season may not be as active as last year, but the threat of U.S. landfalls remains higher than average, according to a just-released outlook issued by The Weather Company and Atmospheric G2.

• Colorado State University's tropical forecast team.

• Tornado-producing storm deals deadly weather to Oklahoma and Texas

• FEMA Isn’t Ready for Disaster Season, Workers Say

Quick Hits:

• Abusing Data in the Middle: Surveillance Risks in China’s State-Owned Mobile Ecosystem & 35 countries use Chinese networks for transporting mobile user traffic, posing cyber risks

• Florida State shooting: 2 dead, sheriff’s deputy’s son in custody & How a security gap at FSU heightened students’ fears even with the speedy police response

• Bot Traffic Surpasses Humans Online—Driven by AI and Criminal Innovation

• CISA Releases Guidance on Credential Risks Associated with Potential Legacy Oracle Cloud Compromise

• Canadian Centre for Cyber Security Resources:

o Security guidance for dark web leaks (ITSAP.00.115)

o Search engine optimization poisoning (ITSAP.00.013)