Sunday, June 19, 2022

The Last Fortnight's Reading 6/19/2022

Sorry, between my nephew's graduation and attending a conference for work I missed last week, but I should be caught up now.

 For Work

Utility/DOE data indicates sophisticated hackers have compromised US electric control centers

https://www.controlglobal.com/blogs/unfettered/utilitydoe-data-indicates-sophisticated-hackers-have-compromised-us-electric-control-centers/

ISA Leading Development of Electric Energy Operational Technology Security Profile for IEC 62443 Standard

https://www.isa.org/news-press-releases/2022/may/isa-leading-development-of-electric-energy-operati?mc_cid=7e53b471b8

Dragos launches info portal to fill security gaps in critical infrastructure

https://www.csoonline.com/article/3663131/dragos-launches-info-portal-to-fill-security-gaps-in-critical-infrastructure.html#tk.rss_all

Dashy - just a kind of interesting dashboard for monitoring services


https://github.com/Lissy93/dashy

Latest Cyberspace Solarium Commission 2.0 Report focuses on cyber workforce

https://www.csoonline.com/article/3663014/latest-cyberspace-solarium-commission-2-0-report-focuses-on-cyber-workforce.html#tk.rss_all

'Shields Up': the new normal in cyberspace


https://www.cyberscoop.com/shields-up-easterly-inglis-op-ed/

Are Vendors Failing in the Face of Open Source Cyberthreats?


https://securityboulevard.com/2022/06/are-vendors-failing-in-the-face-of-open-source-cyberthreats/

Cyber CEO's US Advisory Work Echoed Sales Pitch His Firm Uses


https://www.bloomberg.com/news/articles/2022-06-10/ceo-helped-to-shape-us-plan-urging-utilities-to-hire-cyber-firms-like-his-own

It’s Time to Rethink Breach Management


https://www.eweek.com/security/its-time-to-rethink-breach-management/

China is Exploiting Network Providers and Devices, Says US Cybersecurity Advisory


https://flashpoint.io/blog/china-exploiting-devices-cybersecurity/

The Practitioner’s Guide to Vulnerability Management: Implementing a Risk-Based Approach

https://flashpoint.io/blog/guide-to-vulnerability-management/

Vulnerability management mistakes CISOs still make


https://www.csoonline.com/article/3663493/vulnerability-management-mistakes-cisos-still-make.html#tk.rss_all

The Surreal Case of a C.I.A. Hacker’s Revenge

https://www.newyorker.com/magazine/2022/06/13/the-surreal-case-of-a-cia-hackers-revenge

Know your enemy! Learn how cybercrime adversaries get in…


https://nakedsecurity.sophos.com/2022/06/07/know-your-enemy-learn-how-cybercrime-adversaries-get-in/

SBOM in Action: finding vulnerabilities with a Software Bill of Materials


https://security.googleblog.com/2022/06/sbom-in-action-finding-vulnerabilities.html

Dangerous Repository of DoS, Red Teaming TTPs, and ICS Exploits
( via https://www.reddit.com/r/netsec/comments/vf7xsn/dangerous_repository_of_dos_red_teaming_ttps_and/)

https://github.com/RoseSecurity?tab=repositories

Over a Dozen Flaws Found in Siemens' Industrial Network Management System


https://thehackernews.com/2022/06/over-dozen-flaws-found-in-siemens.html

============================================================================

Not Work

How decentralization and Web3 will impact the enterprise

https://www.zdnet.com/finance/blockchain/zero-knowledge-proofs-will-play-a-major-role-in-the-future-of-web3-defi-and-metaverse-survey/

Google Engineer On Leave After He Claims AI Program Has Gone Sentient

https://www.huffpost.com/entry/blake-lemoine-lamda-sentient-artificial-intelligence-google_n_62a5613ee4b06169ca8c0a2e

KrebsOnSecurity in New Netflix Series on Cybercrime

https://krebsonsecurity.com/2022/06/krebsonsecurity-in-new-netflix-series-on-cybercrime/

Leaked Amazon memo says the company may run out of available labor by 2024


https://www.engadget.com/leaked-amazon-memo-says-it-will-run-out-of-workers-2024-labor-supply-230034089.html?src=rss

AI trained on 4chan's most hateful board is just as toxic as you'd expect

https://www.engadget.com/ai-bot-4chan-hate-machine-162550734.html?src=rss

How Inflation Works


https://finmasters.com/how-inflation-works/

DOE Announces Breakthrough in Residential Cold Climate Heat Pump Technology


https://www.energy.gov/articles/doe-announces-breakthrough-residential-cold-climate-heat-pump-technology

Bitcoin drops below $20,000, Ether cracks $1,000 — what this means


https://davidgerard.co.uk/blockchain/2022/06/18/bitcoin-drops-below-20000-ether-cracks-1000-what-this-means/

The Privatized Internet Has Failed Us


https://slatereport.com/tech/the-privatized-internet-has-failed-us/

The Fed plans to ‘reset’ the housing market—raising the likelihood of falling home prices

https://finance.yahoo.com/news/fed-plans-reset-housing-market-215259418.html

Why the Federal Reserve has made a historic mistake on inflation


https://www.economist.com/leaders/2022/04/23/why-the-federal-reserve-has-made-a-historic-mistake-on-inflation

No comments: