In this week's Security Sprint, Dave and Andy covered the following topics:

Main Topics:

FBI PSA: North Korean IT Workers Conducting Data Extortion. The Federal Bureau of Investigation (FBI) is providing an update to previously shared guidance regarding Democratic People's Republic of Korea (North Korea) Information Technology (IT) workers to raise public awareness of their increasingly malicious activity, which has recently included data extortion.

China’s Cyber Threat: Under Trump, US Cyberdefense Loses Its Head; Chinese hacks, rampant ransomware, and Donald Trump’s budget cuts all threaten US security. In an exit interview with WIRED, former CISA head Jen Easterly argues for her agency’s survival.

“Everybody should assume that our adversaries, in particular China, are attempting to go after our critical infrastructure. The private sector, they are on the front lines of this fight, because they own and operate the vast majority of our critical infrastructure. It's why companies need to put collaboration over self-preservation.”

“Time For Us To Get A Step Ahead Of The Typhoons”: Chairman Green Opens Hearing On Global Cyber Threats

“Preparation Of The Battlefield”: Cybersecurity Experts Testify On Global Threats To The Homeland

WaterISAC: House Committee Hearing – Unconstrained Actors: Assessing

Quick Hits:

Insider Threats:

Orlando Man Pleads Guilty To Conducting Series Of Cyber Intrusions Against Former Employer

British Museum forced to partly close after alleged IT attack by

CISA and FBI Release Updated Guidance on Product Security Bad Practices

Virus season roars back with "quad-demic" of illness

Scammers Are Creating Fake News Videos to Blackmail Victims

TikTok Threat Arrest: "[Trump] needs to be assassinated"

USCP Arrests Man with Gun. Article: Capitol Police: Officer suspended for allowing man with concealed gun

CISA and FBI Release Advisory on How Threat Actors Chained

Ransomware gang uses SSH tunnels for stealthy VMware ESXi access

Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware

Ransomware’s Evolution: Key Threat Groups Targeting the Energy and

Ongoing Campaign Targeting Amazon Web Services S3 Buckets