In this week's Security Sprint, Dave and Andy covered the following topics:

Warm Open:

• CISA gets a deputy director as it braces for major layoffs

• FB-ISAO’s Collaboration With Those Who are Lone Defenders

• Crypto/Blockchain:

o A Record-Breaking Year for Cybercrime: Key Findings from the FBI’s 2024 IC3 Report

o Contagious Interview (DPRK) Launches a New Campaign Creating Three Front Companies to Deliver a Trio of Malware: BeaverTail, InvisibleFerret, and OtterCookie

o XRP supply chain attack: Official NPM package infected with crypto stealing backdoor

o Risky Biz News - R0AR crypto-heist

o Crypto ISAC: Ensuring The Security, Efficiency, and Resiliency Of Crypto

o The Gate 15 Interview EP 57 – Adriana Villasenor on info sharing, resilience, and racing

Main Topics:

Big 3! Risky Bulletin: FBI IC3, Verizon DBIR, Google M-Trends reports are out—here's the conclusions!

• Verizon 2025 Data Breach Investigations Report

• M-Trends 2025: Data, Insights, and Recommendations From the Frontlines

• FBI Releases Annual Internet Crime Report

Casino hackers say they've got maps to slot machine vault and server room. A ransomware gang claims that it’s holding hostage the blueprints to a $700 million casino. If true, they may know more about the vaults, server rooms, and security cameras than the people building it. Hackers target Catawba Two Kings Casino, threaten to release blueprints

Vancouver Vehicle Ramming; 11 killed - Suspect charged with murder over Vancouver Filipino festival car ramming, police say victims were aged five to 65

• A man is charged with murder after SUV rams a crowd in Vancouver's 'darkest day'

• Vancouver ramming attack: Police determine attack was 'deliberate' but not 'terrorism' - 'Shocking'

• A look at some recent deadly attacks involving vehicle rammings

• 4 Killed When a Car Crashes Through an Illinois After-School Center; The victims’ ages ranged from 7 to 18, the police said. Several others were injured.

Quick Hits:

• May Day Protests:

o Workers in 600+ US Cities to Protest 'Billionaire Takeover' on May Day

o 50501 events

• ‘No longer welcome to be alive’: Man threatened Trump, Elon Musk and Tesla owners in ‘Declaration Of War’ emails that claimed ‘newsworthy killings’ were coming, DOJ says

• Spanish distributor says restoring power after huge outage could take 6-10 hours. Portugal also hit

• New U.S. Secret Service Research Highlights Connection Between Domestic Violence and Mass Attacks

• FBI PSA - FBI Seeking Tips about PRC-Targeting of US Telecommunications & The Persistent Threat of Salt Typhoon: Tracking Exposures of Potentially Targeted Devices

• Countries shore up their digital defenses as global tensions raise the threat of cyberwarfare

• Scams & Fraud:

o FBI PSA - Cyber Criminals Impersonating Employee Self-Service Websites to Steal Victim Information and Funds

o Foreign intel job scams target current, former DoD employees

o Think that text message is from USPS? It could be a scam

o FBI Surges Resources to Nigeria to Combat Financially Motivated Sextortion

• Russian Propaganda Campaign Targets France with Al-Fabricated Scandals, Drawing 55 Million Views on Social Media

• Alleged former members of neo-Nazi group claim its leader is Russian spy

• NSA Publishes Recommendations for Smart Controller Security Controls and Technical Requirements for OT Environments

• Scientists Find Measles Likely to Become Endemic in the US Over Next 20 Years