In this week's Security Sprint, Dave and Andy talk about the following topics:
Workplace Violence. CISA: Preventing Workplace Violence: Security Awareness Considerations Infographic. The Preventing Workplace Violence: Security Awareness Considerations Infographic is a new CISA product designed for critical infrastructure leaders, human resources personnel, managers, and workers of any level.
Passwords. The worst passwords of 2023 are also the most common, "123456" comes in first. NordPass has published their 2023 edition of the top 200 most common passwords and unsurprisingly very few of the entries are secure. The top 10 can all be cracked in under a second using simple brute-force tools.
Dave Round-UP
CDC - Flu season. https://www.cidrap.umn.edu/influenza-general/us-flu-activity-continues-rise-steadily
Taylor Swift. https://abcnews.go.com/International/Culture/taylor-swift-fan-dies-eras-tour-concert-rio/story?id=105006498
Security guard incident in Canada which was captured on Social Media.
FBI IC3 PSA: 2023 Holiday Shopping Scams
2023 Holiday Scam Predictions—Here’s What You Should Know
FBI Warns of Scammers Targeting Senior Citizens in Grandparent Scams and Demanding Funds by Wire, Mail, or Couriers
Pro Bono Investigations for Elderly Scam Victims
Threats to Homeland
The Committee on Homeland Security: Worldwide Threats to the Homeland
Witness testimony can be found here
Director Wray's Opening Statement to the House Committee on Homeland Security.
U.S. political violence driven by new breed of ‘grab-bag’ extremists
Ransomware
CSA - Scattered Spider
#StopRansomware: Rhysida Ransomware
CISA Releases Update to Royal Ransomware Advisory
AlphV files an SEC complaint against MeridianLink for not disclosing a breach to the SEC (2)
Quick Hits
Faith-Based and Israel-Gaza Related Updates: FB-ISAO Newsletter, v5, Issue 11.
Official Tribal-ISAC Announcement: Tribal-ISAC Announces Membership as an Approved Expense of the Tribal Cybersecurity Grant Program
CISA turns 5 and looks to the future
Critical infrastructure policy rewrite expected to ‘emphasize’ CISA, NSC official says
Readout of President Joe Biden’s Meeting with President Xi Jinping of the People’s Republic of China
China is using the world’s largest known online disinformation operation to harass Americans, a CNN review finds
NCSC Annual Review 2023 - Looking back at the National Cyber Security Centre's seventh year and its key developments and highlights, between 1 September 2022 and 31 August 2023
CISA: Secure Tomorrow Series Toolkit
ACSC and CISA Release Business Continuity in a Box
HHS Factsheet: National Climate Assessment 5 Unveiled
FCC Adopts Rules to Protect Consumers' Cell Phone Accounts