What I am Reading 6/12/2023 - Two Days Late Edition

 Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability - Update Now!

https://thehackernews.com/2023/06/zero-day-alert-google-issues-patch-for.html

How Attorneys Are Harming Cybersecurity Incident Response

https://www.schneier.com/blog/archives/2023/06/how-attorneys-are-harming-cybersecurity-incident-response.html

Cisco fixes AnyConnect bug giving Windows SYSTEM privileges

https://www.bleepingcomputer.com/news/security/cisco-fixes-anyconnect-bug-giving-windows-system-privileges/

Mass exploitation of critical MOVEit flaw is ransacking orgs big and small

https://arstechnica.com/information-technology/2023/06/mass-exploitation-of-critical-moveit-flaw-is-ransacking-orgs-big-and-small/

10 years after Snowden's first leak, what have we learned?

https://www.theregister.com/2023/06/07/10_years_after_snowden/

Government Cyber Policy: The Way We Were, Are and Will Be

https://securityboulevard.com/2023/06/government-cyber-policy-the-way-we-were-are-and-will-be/

20 cybersecurity projects on GitHub you should check out

https://www.helpnetsecurity.com/2023/06/08/github-cybersecurity-projects/

Public sector apps show higher rates of security flaws

https://www.helpnetsecurity.com/2023/06/07/public-sector-applications-flaws/

Elon Musk Says Twitter Is Going To Get Rid Of The Block Feature, Enabling Greater Harassment

https://www.techdirt.com/2023/06/09/elon-musk-says-twitter-is-going-to-get-rid-of-the-block-feature-enabling-greater-harassment/

Inside 4chan’s top-secret moderation machine

https://arstechnica.com/tech-policy/2023/06/inside-4chans-top-secret-moderation-machine/

White House needs to urgently fix nation’s approach to protecting critical infrastructure, group says

https://cyberscoop.com/solarium-commission-critical-infrastructure-ppd-21/

Network Perception wants to give more visibility into OT networks

https://www.csoonline.com/article/3699128/network-perception-wants-to-give-more-visibility-into-ot-networks.html#tk.rss_all

Department of Defense AI principles have a place in the CISO’s playbook

https://www.csoonline.com/article/3698529/department-of-defense-ai-principles-have-a-place-in-the-ciso-s-playbook.html#tk.rss_all

The US is getting its first new nuclear reactor in 40 years

https://grist.org/energy/first-us-nuclear-reactor-40-years-online-georgia/

The US is building factories at a wildly fast rate

https://www.businessinsider.com/us-building-factories-census-data-chips-act-inflation-reduction-act-2023-6

The Birth of the Grid

https://www.construction-physics.com/p/the-birth-of-the-grid

What I am Reading 6/5/2023

Deconstructing a Cybersecurity Event

https://www.dragos.com/blog/deconstructing-a-cybersecurity-event/

Focus Security Efforts on Choke Points, Not Visibility

https://www.darkreading.com/vulnerabilities-threats/focus-security-efforts-on-choke-points-not-visibility

Critical Barracuda 0-day was used to backdoor networks for 8 months

https://arstechnica.com/information-technology/2023/05/critical-barracuda-0-day-was-used-to-backdoor-networks-for-8-months/

Federal Judge Makes History in Holding That Border Searches of Cell Phones Require a Warrant

https://www.eff.org/deeplinks/2023/05/federal-judge-makes-history-holding-border-searches-cell-phones-require-warrant

The FBI as advanced persistent threat – and what to do about it

https://www.theregister.com/2023/05/30/column/

Salesforce 'Ghost Sites' Expose Sensitive Corporate Data

https://www.darkreading.com/application-security/salesforce-ghost-sites-expose-sensitive-corporate-data

Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards

https://www.securityweek.com/organizations-warned-of-backdoor-feature-in-hundreds-of-gigabyte-motherboards/

Researchers tell owners to “assume compromise” of unpatched Zyxel firewalls

https://arstechnica.com/information-technology/2023/05/researchers-tell-owners-to-assume-compromise-of-unpatched-zyxel-firewalls/

Cyberweapon manufacturers plot to stay on the right side of US

https://arstechnica.com/tech-policy/2023/05/cyberweapon-manufacturers-plot-to-stay-on-the-right-side-of-us/

The Birth and Death of the Orange Book

https://www.stevelipner.org/links/resources/The%20Birth%20and%20Death%20of%20the%20Orange%20Book.pdf

Hackers -- Cyberdelia --- Crayola Books

 https://www.youtube.com/watch?v=4U9MI0u2VIE

Ask HN: Cyber Security folks – what are your biggest pain points?

https://news.ycombinator.com/item?id=36149904

Even After Debunking, ‘Sybil’ Hasn’t Gone Away

https://www.nytimes.com/2023/05/28/books/sybil-50th-anniversary.html

The end of the Silicon Valley dream

https://www.spectator.co.uk/article/the-end-of-the-silicon-valley-dream/

The Planning of U.S. Physician Shortages

https://www.niskanencenter.org/the-planning-of-u-s-physician-shortages/

Ethernet at 50: Why It's Still the Backbone of Networking

https://www.electropages.com/blog/2023/05/ethernet-turns-50-connector-ages

Two Years After Colonial Pipeline, What Have We Learned?

https://securityboulevard.com/2023/06/two-years-after-colonial-pipeline-what-have-we-learned/

The White House says Section 702 is critical for cybersecurity, yet public evidence is sparse

https://cyberscoop.com/white-house-section-702-fisa-surveillance/

 SCADA 103: SCADA Network Discovery & GRASSMARLIN (Kayla Carrigan from Percival Engineering)

 https://www.youtube.com/watch?v=aZSlaZq2jzA

Started work on my MBA in IT Management today

Not exactly sure why.  I'm not really management material, but I do want to pursue a couple areas where an MBA is recommended.  That's one reason I guess.

Second reason, when I try and make business cases I would like to be speaking from a more secure base of knowledge than stuff I have just read on my own.

Third - spite, every MBA I have known except maybe 2 are dicks.  I want to be able to throw their dickishness back at them :-)

Probably not the best reasons but they are mine.

First term - 

Managing Organizations and Leading People

IT Project Management

Managing Human Capital

We'll see how it goes.

What IAm Reading 5/30/2023

 - Sorry missed last week and in a hurry this week so it's kind of sloppy -

 Is cybersecurity an unsolvable problem?

https://arstechnica.com/features/2023/05/is-cybersecurity-an-unsolvable-problem/

US Probing Cybersecurity Risks of Rockwell Automation’s China Operations: Report

https://www.securityweek.com/us-probing-cybersecurity-risks-of-rockwell-automations-china-operations-report/

Unearthed: CosmicEnergy, malware for causing Kremlin-style power disruptions

https://arstechnica.com/information-technology/2023/05/unearthed-cosmicenergy-malware-for-causing-kremlin-style-power-disruptions/

Chinese state hackers infect critical infrastructure throughout the US and Guam

https://arstechnica.com/information-technology/2023/05/chinese-state-hackers-infect-critical-infrastructure-throughout-the-us-and-guam/

People's Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection

https://media.defense.gov/2023/May/24/2003229517/-1/-1/0/CSA_Living_off_the_Land.PDF

'Volt Typhoon' China-Backed APT Infiltrates US Critical Infrastructure Orgs

https://www.darkreading.com/endpoint/-volt-typhoon-china-backed-apt-infiltrates-us-critical-infrastructure

FBI Disarms Russian FSB 'Snake' Malware Network

https://www.darkreading.com/attacks-breaches/fbi-disarms-russian-fsb-snake-malware-network

Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft

https://thehackernews.com/2023/05/experts-detail-new-zero-click-windows.html

Microsoft will take nearly a year to finish patching new 0-day Secure Boot bug

https://arstechnica.com/information-technology/2023/05/microsoft-patches-secure-boot-flaw-but-wont-enable-fix-by-default-until-early-2024/

How Cybercriminals Adapted to Microsoft Blocking Macros by Default

https://www.darkreading.com/application-security/how-malware-delivery-adapted-to-microsoft-blocking-macros-by-default

Green hills forever: Windows XP activation algorithm cracked after 21 years

https://arstechnica.com/gadgets/2023/05/a-decade-after-it-mattered-windows-xps-activation-algorithm-is-cracked/

Cancel your WinRAR trial: Windows will soon support RAR, gz, 7z, and other archives

https://arstechnica.com/gadgets/2023/05/cancel-your-winrar-trial-windows-will-soon-support-rar-gz-7z-and-other-archives/

Leak of MSI UEFI signing keys stokes fears of “doomsday” supply chain attack

https://arstechnica.com/information-technology/2023/05/leak-of-msi-uefi-signing-keys-stokes-concerns-of-doomsday-supply-chain-attack/

Hackers attempt to extort Dragos and its executives in suspected ransomware attempt

https://cyberscoop.com/dragos-cyberattack-ransomware/

The Vulnerability Assessment Framework: Stop Inefficient Patching Now and Transform Your Vulnerability Management

https://www.sans.org/blog/the-vulnerability-assessment-framework/

Google to expand dark web monitoring to all Gmail users in the U.S.

https://www.zdnet.com/article/google-to-expand-dark-web-monitoring-to-all-gmail-users-in-the-u-s/#ftag=RSSbaffb68

FTX’s Bankman-Fried seeks tossing of charges over crypto collapse

https://www.aljazeera.com/economy/2023/5/9/ftxs-bankman-fried-seeks-tossing-of-charges-over-crypto-collapse

Zimbabwe’s new gold-backed digital currency: All you need to know

https://www.aljazeera.com/news/2023/5/9/zimbabwes-new-gold-backed-digital-currency-all-you-need-to-know

How An Obscure OTC-Traded Derivative From the 80's Took Over Crypto

https://blog.everstrike.io/how-an-obscure-otc-traded-derivative-took-over-crypto/

Texas moves to create gold-backed digital currency

https://www.kitco.com/news/2023-04-06/Texas-moves-to-create-gold-backed-digital-currency.html

Cory Doctorow Explains Why Big Tech Is Making the Internet Terrible

https://jacobin.com/2023/05/cory-doctorow-big-tech-internet-monopoly-capitalism-artificial-intelligence-crypto/

The Ten Things I Do to Burn Fat Like a Furnace

https://primecuts.substack.com/p/the-ten-things-i-do-to-burn-fat-like

New York Is Forcing Schools to Change How They Teach Children to Read

https://www.nytimes.com/2023/05/09/nyregion/reading-nyc-schools.html#commentsContainer

Students can’t get off their phones. Schools have had enough.

https://www.washingtonpost.com/education/2023/05/09/school-cellphone-ban-yondr/

What happens when half of the network is down?

https://blog.ipfs.tech/2023-ipfs-unresponsive-nodes/

Twitter plans to remove and archive inactive accounts

https://www.bbc.com/news/technology-65533014?at_medium=RSS&at_campaign=KARANGA

Right-wing Twitter worried Musk’s CEO pick could return Twitter to its roots

https://arstechnica.com/tech-policy/2023/05/twitter-users-fear-new-ceo-will-end-musks-commitment-to-free-speech-on-platform/

Children's commissioner: Pornography affecting 8-year-olds' behaviour

https://www.bbc.com/news/technology-65534354?at_medium=RSS&at_campaign=KARANGA

US Gulf states’ inactive, uncapped oil and gas wells a $30 billion liability

https://arstechnica.com/science/2023/05/gulf-states-inactive-uncapped-oil-and-gas-wells-a-30-billion-liability/

14th Amendment option on the debt ceiling would need to overcome DOJ concerns

https://www.nbcnews.com/politics/justice-department/14th-amendment-option-debt-ceiling-need-overcome-doj-concerns-rcna83514

What does a leaked Google memo reveal about the future of AI?

https://www.economist.com/leaders/2023/05/11/what-does-a-leaked-google-memo-reveal-about-the-future-of-ai

The Man Who Invented the Modern Cop Novel

https://quillette.com/2023/04/23/the-man-who-invented-the-cop-novel/

Vint Cerf on 3 Mistakes He Made in TCP/IP

https://spectrum.ieee.org/vint-cerf-mistakes

America’s jobs report is not as strong as it seems

https://www.economist.com/graphic-detail/2023/05/05/americas-jobs-report-is-not-as-strong-as-it-seems

Former Uber Security Officer Won’t Go To Prison For Covering Up A 2016 Data Breach

https://www.techdirt.com/2023/05/10/former-uber-security-officer-wont-go-to-prison-for-covering-up-a-2016-data-breach/

Executive Fired From TikTok’s Chinese Owner Says Beijing Had Access to App Data in Termination Suit

https://www.securityweek.com/executive-fired-from-tiktoks-chinese-owner-says-beijing-had-access-to-app-data-in-termination-suit/

Nationwide push to require social media age verification raises questions about privacy, industry standards

https://cyberscoop.com/age-verfication-schatz-cotton-social-media/

Can a wind turbine handle hurricane speed winds?

https://www.bbc.com/news/business-65261147?at_medium=RSS&at_campaign=KARANGA

China bans major chip maker Micron from key infrastructure projects

https://www.bbc.com/news/business-65667746?at_medium=RSS&at_campaign=KARANGA

‘In a lot of the world, the clock has hit midnight’: China is calling in loans to dozens of countries from Pakistan to Kenya

https://fortune.com/2023/05/18/china-belt-road-loans-pakistan-sri-lanka-africa-collapse-economic-instability/

What I am Reading 5/7/2023

 Google launches entry-level cybersecurity certificate to teach threat detection skills

https://www.csoonline.com/article/3695575/google-launches-entry-level-cybersecurity-certificate-to-teach-threat-detection-skills.html#tk.rss_all

Critical Infrastructure Organizations Urged to Identify Risky Communications Equipment

https://www.securityweek.com/critical-infrastructure-organizations-urged-to-identify-risky-communications-equipment/

Russia-linked Sandworm APT uses WinRAR in destructive attacks on Ukraine’s public sector

https://securityaffairs.com/145731/cyber-warfare-2/sandworm-apt-winrar-destructive-attacks.html

Critical Siemens RTU Vulnerability Could Allow Hackers to Destabilize Power Grid

https://www.securityweek.com/critical-siemens-rtu-vulnerability-could-allow-hackers-to-destabilize-power-grid/

Those scary warnings of juice jacking in airports and hotels? They’re nonsense

https://arstechnica.com/information-technology/2023/05/fearmongering-over-public-charging-stations-needs-to-stop-heres-why/

Vulnerability Management Maturity Model – Self-Assessment Tool (VMMM-SAT)

https://www.sans.org/blog/vmmm-self-assessment-tool/

The key to making the US cyber strategy work: boots on the ground

https://cyberscoop.com/us-cyber-strategy-local-cybersecurity-volunteers/

Top US cyber official warns AI may be the ‘most powerful weapon of our time’

https://cyberscoop.com/easterly-warning-weapons-artificial-intelligence-chatgpt/

DEF CON to set thousands of hackers loose on LLMs

https://www.theregister.com/2023/05/06/ai_hacking_defcon/

Computer system used to hunt fugitives is still down 10 weeks after hack

https://www.washingtonpost.com/national-security/2023/05/01/marshals-hack-fugitives-surveillance-shutdown/

China has 50 hackers for every FBI cyber agent, says Bureau boss

https://www.theregister.com/2023/05/01/fbi_director_wray_china_testimony/

A Brutal Sex Trade Built for American Soldiers

https://www.nytimes.com/2023/05/02/world/asia/korea-us-comfort-women-sexual-slavery.html

Japan to ban upskirting in sweeping sex crime reforms

https://www.bbc.com/news/world-asia-pacific-65453384?at_medium=RSS&at_campaign=KARANGA

Controversial bill to regulate online streaming becomes law

https://www.cbc.ca/news/politics/c11-online-streaming-1.6824314

Uncle Sam sounds like it may actually do something about rampant visa H-1B fraud

https://www.theregister.com/2023/05/01/uscis_h_1b_surge/

As more electric vehicles hit the road, our charging habits must change - here’s why

https://www.weforum.org/agenda/2023/01/electric-cars-charging-habits

I’m in Wyoming to celebrate the next nuclear breakthrough

https://www.gatesnotes.com/Wyoming-TerraPower

So, you're telling me that US crypto mining used more power last year than ALL THE COMPUTERS?!

https://www.pcgamer.com/so-youre-telling-me-that-us-crypto-mining-used-more-power-last-year-than-all-the-computers/

Chipotle Is a Criminal Enterprise Built on Exploitation

https://jacobin.com/2021/05/chipotle-workers-fair-workweek-law-nyc

Googlers angry about CEO’s $226M pay after cuts in perks and 12,000 layoffs

https://arstechnica.com/tech-policy/2023/05/googlers-angry-about-ceos-226m-pay-after-cuts-in-perks-and-12000-layoffs/

Yet another problem with recycling: It spews microplastics

https://arstechnica.com/science/2023/05/yet-another-problem-with-recycling-it-spews-microplastics/

What I'm Reading 4/30/2023

 Sorry I missed last week I was getting ready for some stuff at work and just didn't have time.

5 ways to be a better manager: Best practices every leader should know

https://www.zdnet.com/home-and-office/work-life/5-ways-to-be-a-better-manager-best-practices-every-leader-should-know/#ftag=RSSbaffb68

Startup CEOs learned Engineering Management from Captain Kirk

https://www.amazingcto.com/startup-ceo-startrek-kirk-engineering-management/

Sensitive data is being leaked from servers running Salesforce software

https://arstechnica.com/information-technology/2023/04/misconfigured-servers-running-salesforce-software-are-leaking-sensitive-data/

It’s the end of the line for yearly Windows 10 updates, says Microsoft

https://arstechnica.com/gadgets/2023/04/its-the-end-of-the-line-for-yearly-windows-10-updates-says-microsoft/

Windows 11’s limited iMessage integration has publicly launched

https://arstechnica.com/gadgets/2023/04/microsoft-phone-link-barely-brings-imessage-to-windows-today/

EU names 19 large tech platforms that must follow Europe’s new Internet rules

https://arstechnica.com/tech-policy/2023/04/google-runs-5-of-the-19-platforms-that-must-follow-eus-new-internet-rules/

These two countries are teaming up to develop AI for cybersecurity

https://www.zdnet.com/article/these-two-countries-are-teaming-up-to-develop-ai-for-cybersecurity/#ftag=RSSbaffb68

OT giants collaborate on ETHOS early threat and attack warning system

https://www.csoonline.com/article/3694450/ot-giants-collaborate-on-ethos-early-threat-and-attack-warning-system.html#tk.rss_all

North Dakota turns to AI to boost effectiveness and efficiency of its cybersecurity

https://www.csoonline.com/article/3694089/north-dakota-turns-to-ai-to-boost-effectiveness-and-efficiency-of-its-cybersecurity.html#tk.rss_all

Eight years since the Obama-Xi agreement, Chinese hacking is worse than ever

https://www.scmagazine.com/news/threat-intelligence/eight-years-obama-xi-agreement-chinese-hacking-iworse-than-ever

How fiends abuse an out-of-date Microsoft Windows driver to infect victims

https://www.theregister.com/2023/04/24/microsoft_windows_driver_aukill_ransomware/

New rules ban subscription traps and fake reviews

https://www.bbc.com/news/technology-65377793?at_medium=RSS&at_campaign=KARANGA

Sperm donor who fathered 550 children ordered to stop

https://www.bbc.com/news/world-europe-65429936

The DOJ Detected the SolarWinds Hack 6 Months Earlier Than First Disclosed

https://www.wired.com/story/solarwinds-hack-public-disclosure/

California approves rule phasing out big diesel trucks

https://abcnews.go.com/US/wireStory/california-approves-rule-phasing-big-diesel-trucks-98949919

Ocean Warming Study So Distressing, Some Scientists Didn't Even Want to Talk About It

https://www.commondreams.org/news/ocean-warming-study

California Wants to Cover Its Canals With Solar Panels

https://www.nytimes.com/2023/04/13/us/california-solar-panels-canals.html

More Young Adults Are Living Paycheck to Paycheck in the US

https://www.bloomberg.com/news/articles/2023-04-28/us-gen-z-living-paycheck-to-paycheck-is-on-the-rise?leadSource=uverify%20wall

Companies Are Colluding to Cheat H-1B Visa Lottery, U.S. Says

https://www.wsj.com/articles/u-s-says-some-companies-cheat-h-1b-lottery-driving-record-applications-1a3e4fd

Wind and solar are now beating coal in the US

https://electrek.co/2023/04/27/wind-and-solar-are-now-beating-coal-in-the-us/

Nuclear Power is the Answer to Global and Environmental Energy Woes

https://nationalinterest.org/feature/nuclear-power-answer-global-and-environmental-energy-woes-206418

What the US needs for future nuclear power tech to get off the ground

https://arstechnica.com/science/2023/04/what-the-us-needs-for-future-nuclear-power-tech-to-get-off-the-ground/

This NASA tech might just spur a major grid battery breakthrough

https://www.canarymedia.com/articles/batteries/this-nasa-tech-might-just-spur-a-major-grid-battery-breakthrough

SCIF and Radio Frequency Secured Facility Design

https://incompliancemag.com/article/scif-and-radio-frequency-secured-facility-design/

Colorado governor signs tractor right-to-repair law opposed by John Deere

https://arstechnica.com/tech-policy/2023/04/colorado-governor-signs-tractor-right-to-repair-law-opposed-by-john-deere/

Microsoft quietly supported legislation to make it easier to fix devices. Here’s why that’s a big deal.

https://grist.org/technology/microsoft-right-to-repair-quietly-supported-legislation-to-make-it-easier-to-fix-devices-heres-why-thats-a-big-deal/

Steven Spielberg: ‘No film should be revised’ based on modern sensitivity

https://www.theguardian.com/film/2023/apr/26/steven-spielberg-et-guns-movie-edit

Have tech skills, will work. Why IT jobs remain hot despite mass layoffs

https://www.npr.org/2023/04/26/1170522239/tech-job-openings-mass-layoffs-workers-silicon-valley-google-meta-amazon

Explaining tech's notion of talent scarcity

https://nadia.xyz/top-talent

Apple cannot ban links to outside App Store payments, U.S. appeals court says

https://www.reuters.com/legal/us-appeals-court-upholds-lower-court-order-forcing-apple-allow-third-party-app-2023-04-24/

Recent Books - Tracers in the Dark and Red Team Blues

 Was tied up with an IG audit this week so I missed the Sunday update, but in the down time I read Red Team Blues by Cory Doctrow.  I wasn't that impressed.

In a lot of ways it was a typical Doctrow book, the protagonist gets himself into some unlikely bit of trouble, but because he is supremely skilled at (insert obsession of the moment here) he manages to improvise, adapt and overcome.  Not that this is any different from a billion other mystery/thriller novels, but at the same time he manages to be supremely annoying by constantly talking about eating at Michelin star restaurants, drink high-end bourbon and driving a Nissan Leaf while living in his Tour Bus RV.  It's like he is constantly reminding us how much better than us he is.

Even more annoying than the above though (besides his constant repetition of The blue team has to be right every time the read team only has to be right once) is the way he trivializes tracking criminals through bitcoin.  I swear 3 days and he tracks down the entire Zeta cartel and turns them against an Azerbaijani crime family.  I read Tracers in the Dark and too me it seems a little more complicated than looking at some bitcoin wallets and linked in, but I am not an expert so maybe I am wrong.  It just seems like Doctrow kind of magics away some of the complications.

Speaking of Tracers in the Dark by Andy Greenberg.  I read it a few months ago.  Excellent book.  First off it starts out by establishing that Bitcoin (once thought to be untraceable) was far easier to trace than people thought (no that isn't a contradiction to my complaint above, I said simpler not easy) It then follows investigators thru a series of cases: Silk Road, Mt. Gox, and Welcome to Video among others.  As it does so Greenberg show the investigative and legal difficulties involved.  Really shed a lot of light on the subject.  Like I said good book.

What I'm Reading 4/17/2023 - Shifting Cybersecurity Left and the Amazing US Dollar

 CISA and partners issue secure-by-design principles for software manufacturers  

https://fedscoop.com/cisa-and-partners-issue-secure-by-design-principles-for-software-manufacturers/

Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Security-by-Design and -Default

https://www.cisa.gov/sites/default/files/2023-04/principles_approaches_for_security-by-design-default_508_0.pdf

CISA Releases Zero Trust Maturity Model Version 2

https://www.cisa.gov/news-events/alerts/2023/04/11/cisa-releases-zero-trust-maturity-model-version-2

String of ICS vulnerabilities detected in hardware deployed across critical infrastructure sectors

https://industrialcyber.co/cisa/string-of-ics-vulnerabilities-detected-in-hardware-deployed-across-critical-infrastructure-sectors/

Did someone really hack into the Oldsmar, Florida, water treatment plant? New details suggest maybe not.

https://cyberscoop.com/water-oldsmar-incident-cyberattack/

Why reporting an incident only makes the cybersecurity community stronger

https://www.csoonline.com/article/3692815/why-reporting-an-incident-only-makes-the-cybersecurity-community-stronger.html#tk.rss_all

Majority of US IT Pros Told to Keep Quiet About Data Breaches

https://www.darkreading.com/vulnerabilities-threats/us-it-pros-data-breaches-keep-quiet-data-breaches

Russian SolarWinds Culprits Launch Fresh Barrage of Espionage Cyberattacks

https://www.darkreading.com/vulnerabilities-threats/russian-intel-services-behind-barrage-espionage-cyberattacks

No drug is safe: Drug developers decry Texas abortion pill ruling

https://arstechnica.com/science/2023/04/drug-developers-condemn-texas-judges-anti-science-abortion-ruling/

Generative AI and Cybersecurity: Advantages and Challenges

https://www.eweek.com/artificial-intelligence/generative-ai-and-cybersecurity/

Vestas hails breakthrough for recyclable wind turbines

https://www.energymonitor.ai/tech/renewables/vestas-hails-breakthrough-for-recycling-wind-turbine-blades/

Notes from a Sun Tzu Skeptic

https://thestrategybridge.org/the-bridge/2019/9/24/notes-from-a-sun-tzu-skeptic

Seattle Discovers Its New $1 Billion Airport Terminal Can’t Fit The Long-Haul Planes it Was Designed to Handle

https://www.paddleyourownkanoo.com/2023/04/09/seattle-discovers-its-new-1-billion-airport-terminal-cant-fit-the-long-haul-planes-it-was-designed-to-handle/

Global wind energy will exceed 1 TW by the end of 2023

https://electrek.co/2023/04/14/global-wind-energy-will-exceed-1-tw-by-the-end-of-2023/

Companies like Uber and Amazon use AI to pay people different wages for the same work, a new study finds

https://www.businessinsider.com/uber-amazon-pay-using-ai-different-wages-same-work-discrimination-2023-4

What De-Dollarization? The Dollar Rules the World

https://www.bloomberg.com/opinion/articles/2023-04-13/the-dollar-rules-the-world-now-and-for-the-foreseeable-future

The lessons from America’s astonishing economic record

https://www.economist.com/leaders/2023/04/13/the-lessons-from-americas-astonishing-economic-record

US pay transparency laws result in worker discontent

https://www.irishtimes.com/business/work/2023/03/31/us-pay-transparency-laws-result-in-worker-discontent/

Laid off by Big Tech, then recruited for contract work — at the same place

https://www.seattletimes.com/business/laid-off-by-big-tech-then-recruited-for-contract-work-at-the-same-place/

Mass Layoffs and Absentee Bosses Create a Morale Crisis at Meta

https://www.nytimes.com/2023/04/12/technology/meta-layoffs-employees-management.html

After 30 years, a father is exonerated in 'satanic panic' case

https://www.tpr.org/criminal-justice/2023-04-11/after-30-years-a-father-is-exonerated-in-satanic-panic-case

Management & Leadership – Principles, Process, & Notes

https://tuckerconnelly.com/management-leadership

The Internet Reform Trilemma

https://www.darkreading.com/vulnerabilities-threats/the-internet-reform-trilemma

What I was Reading 4/9/2023

Views of a hot cyberwar — the Ukrainian perspective on Russia’s online assault

https://www.csoonline.com/article/3692534/a-report-from-ukraine-s-cybersecurity-service-reveals-insight-into-what-the-country-has-been-facing.html#tk.rss_all

White House Moves to Address Software Supply Chain Security

https://securityboulevard.com/2023/04/white-house-moves-to-address-software-supply-chain-security/

4 Steps for Shifting Left & Winning the Cybersecurity Battle

https://www.darkreading.com/vulnerabilities-threats/4-steps-for-shifting-left-and-winning-the-cybersecurity-battle

New Research Highlights Increased Security Risks Posed by Remote Working and BYOD

https://www.itsecurityguru.org/2023/04/03/new-research-highlights-increased-security-risks-posed-by-remote-working-and-bring-your-own-device-policies/?utm_source=rss&utm_medium=rss&utm_campaign=new-research-highlights-increased-security-risks-posed-by-remote-working-and-bring-your-own-device-policies

Exploring HackTown: A College for Cybercriminals

https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2022/exploring-hacktown-a-college-for-cybercriminals

Five non-fiction graphic books on lives in dangerous locations

https://www.economist.com/the-economist-reads/2023/03/31/five-non-fiction-graphic-books-on-lives-in-dangerous-locations

Why AD Modernization Is Critical to Your Cybersecurity Program

https://www.semperis.com/blog/why-ad-modernization-is-critical-to-cybersecurity/

WiFi Flaws Allow Network Traffic Interception on Linux, iOS, and Android

https://www.hackread.com/wifi-flaw-intercept-network-traffic-linux-ios-android/

Outrage over white-only job ad drives tech firm to delete website

https://arstechnica.com/tech-policy/2023/04/tech-firm-posts-white-only-job-ad-then-deletes-website-amid-ensuing-outrage/

Apple joins Amazon, Google, and Microsoft in tech industry layoffs

https://arstechnica.com/gadgets/2023/04/apple-joins-amazon-google-and-microsoft-in-tech-industry-layoffs/

The Case for Banning Children from Social Media

https://www.newyorker.com/news/our-columnists/the-case-for-banning-children-from-social-media

My long goodbye to Windows XP

https://woodfromeden.substack.com/p/my-long-goodbye-to-windows-xp

TikTok ban bill is so broad it could apply to nearly any type of tech product

https://arstechnica.com/tech-policy/2023/04/could-tiktok-ban-bill-criminalize-vpn-use-the-eff-says-its-not-impossible/

‘We may be looking at the end of capitalism’: One of the world’s oldest and largest investment banks warns ‘Greedflation’ has gone too far

https://fortune.com/2023/04/05/end-of-capitalism-inflation-greedflation-societe-generale-corporate-profits/

Justice Dept. will investigate leak of classified Pentagon documents

https://www.msn.com/en-us/news/us/justice-dept-will-investigate-leak-of-classified-pentagon-documents/ar-AA19BjV6

For Lower-Income Students, Big Tech Internships Can Be Hard to Get

https://www.nytimes.com/2023/04/05/business/tech-internship-application-grind.html

U.S. and China wage war beneath the waves – over internet cables

https://www.reuters.com/investigates/special-report/us-china-tech-cables/

30 under 30-year sentences: why so many of Forbes’ young heroes face jail

https://www.theguardian.com/business/2023/apr/06/forbes-30-under-30-tech-finance-prison

What we know about Russian hackers — and how to stop them — after a year of cyberwar in Ukraine

https://cyberscoop.com/russian-hackers-cyberwar-ukraine/

CISA warns of critical flaws in ICS and SCADA software from multiple vendors

https://www.csoonline.com/article/3693088/cisa-warns-of-critical-flaws-in-ics-and-scada-software-from-multiple-vendors.html#tk.rss_all

Major Cyber Insurance Overhaul Begins Now

https://securityboulevard.com/2023/04/major-cyber-insurance-overhaul-begins-now/

New National Cybersecurity Strategy Will Require Compliance, Collaboration

https://securityboulevard.com/2023/04/new-national-cybersecurity-strategy-will-require-compliance-collaboration/

What I am Reading 4/2/2023 - Electric Grids, Tik-Tok, and Cryptocurrency, Oh My!

 I missed last week so it's a fairly big list this time around.

Oliver Stone Releases Trailer for His Pro-Nuclear Energy Movie, ‘Nuclear Now’

https://www.hollywoodreporter.com/movies/movie-news/oliver-stone-nuclear-now-trailer-1235357522/

Dennis Quaid documentary 'Grid Down, Power Up' explores dangers of sudden electric grid failure

https://www.foxnews.com/media/dennis-quaid-documentary-grid-down-power-up-explores-dangers-sudden-electric-grid-failure

The movie - Grid Down Power Up

https://www.griddownpowerup.com/watch-gdpu/

California wants to build more solar farms but needs more power lines

https://arstechnica.com/tech-policy/2023/03/california-wants-to-build-more-solar-farms-but-needs-more-power-lines/

For the first time, renewable energy generation beat out coal in the US

https://www.popsci.com/environment/renewable-energy-generation-coal-2022/

The pressing threat of Chinese-made drones flying above U.S. critical infrastructure

https://cyberscoop.com/chinese-drone-threat-dji-regulation-critical-infrastructure/

Dependence on Chinese-made tech threatens grid, experts warn

https://cyberscoop.com/chinese-grid-equipment-us-grid/

Vulkan Playbook Leak Exposes Russia's Plans for Worldwide Cyberwar

https://www.darkreading.com/vulnerabilities-threats/vulkan-playbook-leak-exposes-russia-plans-worldwide-cyber-war

CISA director says cutting agency’s budget would return it to ‘pre-SolarWinds world’

https://cyberscoop.com/easterly-cisa-budget-china-biden/

Legacy, password-based authentication systems are failing enterprise security, says study

https://www.csoonline.com/article/3691781/legacy-password-based-authentication-systems-are-failing-enterprise-security-says-study.html#tk.rss_all

Amazon workers fume after HR rejects petition against return to office

https://nypost.com/2023/03/24/amazon-workers-fume-after-hr-rejects-petition-against-return-to-office/

Cargo theft, led by food and beverage, is surging across the U.S.

https://www.cnbc.com/2023/03/25/cargo-theft-led-by-food-and-beverage-is-surging-across-the-us.html

Utah is first US state to limit teen social media access

https://www.bbc.com/news/world-us-canada-65060733

A nasal spray protects against coronavirus infection – Effective also against recent immune-evasive variants

https://www.helsinki.fi/en/news/pandemics/nasal-spray-protects-against-coronavirus-infection-effective-also-against-recent-immune-evasive-variants

Half of Black Students Can Barely Read

https://darrellowens.substack.com/p/half-of-black-students-can-hardly

WGA Would Allow Artificial Intelligence in Scriptwriting, as Long as Writers Maintain Credit

https://variety.com/2023/biz/news/writers-guild-artificial-intelligence-proposal-1235560927/

Gordon Moore, Intel Co-Founder, Dies at 94

https://www.intel.com/content/www/us/en/newsroom/news/gordon-moore-obituary.html

Stanford’s War Against Its Own Students

https://www.thefp.com/p/stanfords-war-against-its-own-students

End of the rainbow? California bill targets Skittles, other snacks with ‘toxic’ chemicals

https://www.latimes.com/california/story/2023-03-23/california-law-would-ban-skittles-other-snacks-chemicals

Beloved hacking veteran Kelly ‘Aloria’ Lum passes away at 41

https://techcrunch.com/2023/03/22/kelly-aloria-lum-passes-away-at-41-obituary/

Bill Gates: AI is most important tech advance in decades

https://www.bbc.com/news/technology-65032848

Twitter posts the code it claims determines which tweets people see, and why

https://arstechnica.com/tech-policy/2023/03/twitter-posts-the-code-it-claims-determines-which-tweets-people-see-and-why/

Bitcoin is a solution looking for a problem

https://www.reuters.com/breakingviews/bitcoin-is-solution-looking-problem-2023-03-24/

Hackers drain bitcoin ATMs of $1.5 million by exploiting 0-day bug

https://arstechnica.com/information-technology/2023/03/hackers-drain-bitcoin-atms-of-1-5-million-by-exploiting-0-day-bug/

US agency sues top crypto exchange Binance and CEO, seeks permanent trading bans

https://arstechnica.com/tech-policy/2023/03/us-agency-sues-top-crypto-exchange-binance-and-ceo-seeks-permanent-trading-bans/

Judge finds Google destroyed evidence and repeatedly gave false info to court

https://arstechnica.com/tech-policy/2023/03/judge-finds-google-destroyed-evidence-and-repeatedly-gave-false-info-to-court/

Microsoft Security Copilot harnesses AI to give superpowers to cybersecurity fighters

https://www.zdnet.com/article/microsoft-security-copilot-harnesses-ai-to-give-superpowers-to-cybersecurity-fighters/#ftag=RSSbaffb68

The Status Trap

https://every.to/no-small-plans/the-status-trap

About three-in-ten U.S. adults say they are ‘almost constantly’ online

https://www.pewresearch.org/fact-tank/2021/03/26/about-three-in-ten-u-s-adults-say-they-are-almost-constantly-online/

OPEC+ announces surprise oil output cuts

https://www.reuters.com/business/energy/sarabia-other-opec-producers-announce-voluntary-oil-output-cuts-2023-04-02/

Today’s management-speak has a lot in common with 1930s Soviet propaganda—and it’s making people miserable

https://fortune.com/2023/03/30/corporate-workplace-culture-soviet-union-1930s-increased-production-performance/

Where have all the laid-off tech workers gone?

https://www.economist.com/business/2023/03/27/where-have-all-the-laid-off-tech-workers-gone

SFUSD's delay of algebra 1 has created a nightmare of workarounds

https://www.sfexaminer.com/forum/put-algebra-1-back-in-eighth-grade/article_01ca608e-be01-11ed-9d12-5fb4111a4db8.html

The 'Insanely Broad' RESTRICT Act Could Ban Much More Than Just TikTok

https://www.vice.com/en/article/4a3ddb/restrict-act-insanely-broad-ban-tiktok-vpns

Republican Rand Paul blocks TikTok ban, asks if US is 'going to be just like China' and block free speech

https://www.wionews.com/world/republican-rand-paul-blocks-tiktok-ban-asks-if-us-is-going-to-be-just-like-china-and-block-free-speech-577130

Can a White House initiative compel tech companies to write safer code?

https://cyberscoop.com/software-liability-biden-microsoft-vulnerabilities/

Supply chain cyberattack with possible links to North Korea could have thousands of victims globally

https://cyberscoop.com/3cx-hack-supply-chain-north-korea/

Spyware vendors use exploit chains to take advantage of patch delays in mobile ecosystem

https://www.csoonline.com/article/3692354/spyware-vendors-use-exploit-chains-to-take-advantage-of-patch-delays-in-mobile-ecosystem.html#tk.rss_all

How to Solve IoT's Identity Problem

https://www.darkreading.com/dr-tech/how-to-solve-iot-s-identity-problem

Millions of Pen Tests Show Companies' Security Postures Are Getting Worse

https://www.darkreading.com/cloud/millions-pen-tests-companies-security-posture-getting-worse

Attackers Are Probing for Zero-Day Vulns in Edge Infrastructure Products

https://www.darkreading.com/attacks-breaches/attackers-probing-zero-day-vulns-edge-infrastructure

CISA, NSA push identity and access management framework as risks grow

https://www.scmagazine.com/analysis/identity-and-access/cisa-nsa-push-identity-and-access-management-framework-as-risks-grow

What I am reading 3/19/2023

 The US cybersecurity strategy won’t address today’s threats with regulation alone

https://cyberscoop.com/national-cybersecurity-strategy-regulation/

The Ethics of Network and Security Monitoring

https://www.darkreading.com/risk/the-ethics-of-network-and-security-monitoring

Cyberattackers Continue Assault Against Fortinet Devices

https://www.darkreading.com/vulnerabilities-threats/cyberattackers-continue-assault-against-fortinet-devices

Here's how Chinese cyber spies exploited a critical Fortinet bug

https://www.theregister.com/2023/03/17/chinese_cyberspies_fortinet_bug/

Inside Elon Musk’s cost-cutting drive at TwitterInside Elon Musk’s cost-cutting drive at Twitter

https://arstechnica.com/tech-policy/2023/03/inside-elon-musks-cost-cutting-drive-at-twitter/

PLATO: How an educational computer system from the ’60s shaped the future

https://arstechnica.com/gadgets/2023/03/plato-how-an-educational-computer-system-from-the-60s-shaped-the-future/

Federal agency hacked by 2 groups thanks to flaw that went unpatched for 4 years

https://arstechnica.com/information-technology/2023/03/federal-agency-hacked-by-2-groups-thanks-to-flaw-that-went-unpatched-for-4-years/

US court rules Uber and Lyft workers are contractors

https://www.bbc.com/news/business-64947695?at_medium=RSS&at_campaign=KARANGA

The Only Three Classes That Mattered From My College Degree

https://www.developing.dev/p/the-only-three-classes-that-mattered

How deep is the rot in America’s banking industry?

https://finance.yahoo.com/news/deep-rot-america-banking-industry-104028781.html

Companies Say They Need Noncompete Clauses. Here’s How We Know That’s Not True.

https://slate.com/business/2023/03/noncompete-clauses-washington-research-ban-ftc.html

Meta Proposes Revamped Approach to Online Kill Chain Frameworks

https://www.darkreading.com/application-security/meta-proposes-revamped-kill-chain-framework-online-threats

‘Black Skills’ Is Killnet’s Attempt to Form a ‘Private Military Hacking Company’

https://flashpoint.io/blog/killnet-killmilk-private-military-hacking-company/

Kali Linux 2023.1 released – and so is Kali Purple!

https://www.helpnetsecurity.com/2023/03/13/kali-linux-2023-1-purple/

Utility Busted Using Fake Consumer Group To Scuttle Eugene, Oregon’s Environmental Reforms

https://www.techdirt.com/2023/03/13/utility-busted-using-fake-consumer-group-to-scuttle-eugene-oregons-environmental-reforms/

Counting ICS Vulnerabilities: Examining Variations in Numbers Reported by Security Firms

https://www.securityweek.com/counting-ics-vulnerabilities-examining-variations-in-numbers-reported-by-security-firms/

A Brief History of Time is ‘wrong’, Stephen Hawking told collaborator

https://www.theguardian.com/science/2023/mar/19/stephen-hawking-told-me-ive-changed-my-mind-my-book-is-wrong

The labor shortage is pushing American colleges into crisis, with the plunge in enrollment the worst ever recorded

https://fortune.com/2023/03/09/american-skipping-college-huge-numbers-pandemic-turned-them-off-education/

Stop worrying about Nation-States and Zero-Days; let's fix things that have been known for years!

https://www.youtube.com/watch?v=ik8pdd7VkmY

What I'm Reading 3/12/2023 - I should probably make an interest to be more interesting edition

Key Proposals in Biden's Cybersecurity Strategy Face Congressional Challenges

https://www.darkreading.com/risk/key-proposals-in-biden-cybersecurity-strategy-face-congressional-challenges

Stealthy UEFI malware bypassing Secure Boot enabled by unpatchable Windows flaw

https://news.hitb.org/content/stealthy-uefi-malware-bypassing-secure-boot-enabled-unpatchable-windows-flaw

Open letter demands OWASP overhaul, warns of mass project exodus

https://www.csoonline.com/article/3689811/open-letter-demands-owasp-overhaul-warns-of-mass-project-exodus.html#tk.rss_all

Municipal CISOs grapple with challenges as cyber threats soar

https://www.csoonline.com/article/3688958/municipal-cisos-grapple-with-challenges-as-cyber-threats-soar.html#tk.rss_all

PoC exploit for recently patched Microsoft Word RCE is public (CVE-2023-21716)

https://www.helpnetsecurity.com/2023/03/06/cve-2023-21716-poc/

Adaptable ‘Swiss Army Knife’ Malware a Growing Threat

https://securityboulevard.com/2023/03/adaptable-swiss-army-knife-malware-a-growing-threat/

Critical Vulnerabilities Allow Hackers to Take Full Control of Wago PLCs

https://www.securityweek.com/critical-vulnerabilities-allow-hackers-to-take-full-control-of-wago-plcs/

Threat actors are using advanced malware to backdoor business-grade routers

https://arstechnica.com/information-technology/2023/03/threat-actors-are-using-advanced-malware-to-backdoor-business-grade-routers/

5 Critical Components of Effective ICS/OT Security

https://www.darkreading.com/ics-ot/5-critical-components-of-effective-ics-ot-security-

Ransomware's Favorite Target: Critical Infrastructure and Its Industrial Control Systems

https://www.darkreading.com/ics-ot/ransomware-s-favorite-target-critical-infrastructure-and-its-industrial-control-systems

Google over-hired talent to do ‘fake work’ and stop them working for rivals, claims former PayPal boss, Keith Rabois

https://www.yahoo.com/lifestyle/google-over-hired-talent-fake-114331193.html

What Weimar Germany Teaches Us about Universal Basic Income

https://fee.org/articles/what-weimar-germany-teaches-us-about-universal-basic-income/

3 Mistakes I Made as an Engineer, but Had To Become a Manager To See

https://www.developing.dev/p/3-mistakes-i-made-as-an-engineer

Want an unfair advantage in your tech career? Consume content meant for other roles

https://matthewgrohman.substack.com/p/want-an-unfair-advantage-in-your

North Korean hackers used polished LinkedIn profiles to target security researchers

https://cyberscoop.com/north-korea-hackers-linkedin-phishing/

Palo Alto Survey Reveals 90% of Organizations Cannot Resolve Cyberthreats Within an Hour

https://www.darkreading.com/cloud/palo-alto-networks-global-state-of-cloud-native-security-survey-reveals-90-of-organizations-cannot-detect-contain-and-resolve-cyberthreats-within-an-hour

Building Great OT Incident Response Tabletop Exercises

https://www.youtube.com/watch?v=XobogsaxcUY

Neil deGrasse Tyson - We Stopped Dreaming (Episode 1)

https://www.youtube.com/watch?v=CbIZU8cQWXc

In addition to this stuff I am finishing up Chapter 3 of Security Engineering by Ross Anderson https://www.amazon.com/s?k=security+engineering+3rd+edition&crid=2P1CTN6GXKHAV and working on NIST SP 800-37 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final as I prepare for my CISSP-ISSMP.

Revisiting a couple old posts -

 Back in November 2005 I posted these two posts:

Top 20 Geek Novels

Blatantly stolen from the Technology Blog. I do a little better on this list:

1. The HitchHiker's Guide to the Galaxy -- Douglas Adams 85% (102)
2. Nineteen Eighty-Four -- George Orwell 79% (92)
3. Brave New World -- Aldous Huxley 69% (77)
4. Do Androids Dream of Electric Sheep? -- Philip Dick 64% (67)
5. Neuromancer -- William Gibson 59% (66)
6. Dune -- Frank Herbert 53% (54)
7. I, Robot -- Isaac Asimov 52% (54)
8. Foundation -- Isaac Asimov 47% (47)
9. The Colour of Magic -- Terry Pratchett 46% (46)
10. Microserfs -- Douglas Coupland 43% (44)
11. Snow Crash -- Neal Stephenson 37% (37)
12. Watchmen -- Alan Moore & Dave Gibbons 38% (37)
13. Cryptonomicon -- Neal Stephenson 36% (36)
14. Consider Phlebas -- Iain M Banks 34% (35)
15. Stranger in a Strange Land -- Robert Heinlein 33% (33)
16. The Man in the High Castle -- Philip K Dick 34% (32)
17. American Gods -- Neil Gaiman 31% (29)
18. The Diamond Age -- Neal Stephenson 27% (27)
19. The Illuminatus! Trilogy -- Robert Shea & Robert Anton Wilson 23% (21)
20. Trouble with Lichen - John Wyndham 21% (19)

Bold = Read
Italics = Started 

Bold Italics = Read since original post

Books every college freshman should read

I am shamelessly stealing this list from Amazon.com. I dont know how many people will agree with it but see what you think do you agree with the author?

1. The Bell Jar - Sylvia Plath
2. The Metamorphosis, In the Penal Colony and Other Stories - Franz Kafka
3. Mythology: Timeless Tales of Gods and Heroes - Edith Hamilton - Read
4. Siddartha - Herman Hess
5. The Unbearable Lightness of Being - Milan Kundera
6. The Hobbit or There and Back Again - JRR Tolkien - Read
7. Lolita - Vladimir Nabokov
8. Slaughterhouse Five - Kurt Vonnegut - Started, I hated it
9. Frankenstein or the Modern Prometheus - Read (4th Grade I might read it again)
10. The Catcher in the Rye - JD Salinger - I have started this book about 5 times I always make it to page 2.
11. Atlas Shrugged - Ayn Rand
12. Animal Farm - George Orwell -Read
13. 1984 - George Orwell -Read
I read 12 and 13 in 6th grade. Those books really helped convince me communism was evil.
14. Great Expectations - Charles Dickens
15. The Awakening and selected stories - Kate Chopin
16. Jane Eyre - Charlotte Bronte
17. Fahrenheit 451 - Ray Bradbury - Read somewhere around 7th or 8th Grade I dont remember it well but I do remember it being hard to get thru.
18. A Connecticut Yankee in King Arthur's Court - Mark Twain - Read - Boring
19. A Clockwork Orange - Anthony Burgess
20. Absalom, Absalom - William Faulkner
21. Dubliners - James Joyce
22. The Brother Karamazov - Fydor Dostevsky
23. The Great Gatsby - F. Scott Fitzgerald
24. A Streetcar Named Desire - Tenessee Williams
25. To the Lighthouse - Virginia Woolf

 No point to this update really, other than to show I can actually read I guess.

What I'm Reading 3/5/2023 - Power Grid Attacks Edition

 Why the US Power Grid is Under Attack 

https://www.youtube.com/watch?v=U3NEfl5rtWo

Attacking the grid

https://theweek.com/crime-and-punishment/1021282/attacking-the-grid

Physical attacks on power grid rose by 71% last year, compared to 2021

https://www.cbsnews.com/news/physical-attacks-on-power-grid-rose-by-71-last-year-compared-to-2021/

The Energy Department’s Puesh Kumar on grid hacking, Ukraine and Pipedream malware

https://cyberscoop.com/puesh-kumar-energy-cybersecurity/

S.O.S for the U.S. Electric Grid

https://www.wsj.com/articles/s-o-s-for-the-u-s-electric-grid-pjm-interconnection-blackout-supply-renewables-subsidy-report-fossil-fuel-4cbdd56e

Biden administration wants to hold companies liable for bad cybersecurity

https://arstechnica.com/information-technology/2023/03/biden-administration-wants-to-hold-companies-liable-for-bad-cybersecurity/

--National Cybersecurity Strategy March 2023

https://www.whitehouse.gov/wp-content/uploads/2023/03/National-Cybersecurity-Strategy-2023.pdf

Industry Experts Analyze US National Cybersecurity Strategy

https://www.securityweek.com/feedback-friday-industry-reactions-to-us-national-cybersecurity-strategy/

How to Do a Dopamine Reset

https://www.artofmanliness.com/character/habits/how-to-do-a-dopamine-reset/

CISA Red Team Shares Key Findings to Improve Monitoring and Hardening of Networks

https://www.cisa.gov/news-events/alerts/2023/02/28/cisa-red-team-shares-key-findings-improve-monitoring-and-hardening-networks

Well-funded security systems fail to prevent cyberattacks in US and Europe: Report

https://www.csoonline.com/article/3688918/well-funded-security-systems-fail-to-prevent-cyberattacks-in-us-and-europe-report.html#tk.rss_all

Hacked home computer of engineer led to second LastPass data breach

https://www.csoonline.com/article/3688922/hacked-home-computer-of-engineer-led-to-second-lastpass-data-breach.html#tk.rss_all

CISA director urges tech sector to stop shipping unsafe products

https://cyberscoop.com/jen-easterly-secure-by-design/

When Low-Tech Hacks Cause High-Impact Breaches

https://krebsonsecurity.com/2023/02/when-low-tech-hacks-cause-high-impact-breaches/

It’s all Gone Critical (Infrastructure)

https://www.forcepoint.com/blog/x-labs/all-gone-critical-infrastructure

US Electric Cooperative Association Launches Commercial OT Security Solution

https://www.securityweek.com/us-electric-cooperative-association-launches-commercial-ot-security-solution/?mc_cid=885aee189f&mc_eid=UNIQID

Netflix fights attempt to make streaming firms pay for ISP network upgrades

https://arstechnica.com/tech-policy/2023/03/netflix-fights-attempt-to-make-streaming-firms-pay-for-isp-network-upgrades/

Unpatched old vulnerabilities continue to be exploited: Report

https://www.csoonline.com/article/3689808/unpatched-old-vulnerabilities-continue-to-be-exploited-report.html#tk.rss_all

It's official: BlackLotus malware can bypass Secure Boot on Windows machines

https://www.theregister.com/2023/03/01/blacklotus_malware_eset/

30 Days Of Python

https://github.com/Asabeneh/30-Days-Of-Python/blob/master/readme.md

I quitted Infosec and I couldn't be happier.

http://paulsec.github.io/posts/i-quitted-infosec/

What I am Reading 2/26/23 - Back from Miami Beach edition

 It was a busy couple weeks traveling to Miami Beach, attending S4x23, and then coming home and dropping back into the grind, but I haven't forgotten about you guys.  Without further ado a couple weeks worth of reading:

The maze is in the mouse:  What ails Google and how it can turn things around.

https://medium.com/@pravse/the-maze-is-in-the-mouse-980c57cfd61a

Sensitive US military emails spill online

https://techcrunch.com/2023/02/21/sensitive-united-states-military-emails-spill-online/

Place your bets

https://www.antipope.org/charlie/blog-static/2023/02/place-your-bets.html

Dragos Report Identifies Two New Threat Groups

https://www.itsecurityguru.org/2023/02/15/dragos-report-identifies-new-threat-groups/?utm_source=rss&utm_medium=rss&utm_campaign=dragos-report-identifies-new-threat-groups

Traditional PAM solutions aren’t working, Keeper Security study finds

https://www.itsecurityguru.org/2023/02/15/traditional-pam-solutions-arent-working-keeper-security-study-finds/?utm_source=rss&utm_medium=rss&utm_campaign=traditional-pam-solutions-arent-working-keeper-security-study-finds

Cyberwar Lessons from the War in Ukraine

https://www.schneier.com/blog/archives/2023/02/cyberwar-lessons-from-the-war-in-ukraine.html

The return of Flat Earth, the grandfather of conspiracy theories

https://arstechnica.com/science/2023/02/the-return-of-flat-earth-the-grandfather-of-conspiracy-theories/

US says Google routinely destroyed evidence and lied about use of auto-delete

https://arstechnica.com/tech-policy/2023/02/us-says-google-routinely-destroyed-evidence-and-lied-about-use-of-auto-delete/

Ukraine suffered more data-wiping malware than anywhere, ever

https://arstechnica.com/information-technology/2023/02/ukraine-suffered-more-data-wiping-malware-than-anywhere-ever/

Seattle becomes first US city to ban caste discrimination

https://www.bbc.com/news/world-us-canada-64727735?at_medium=RSS&at_campaign=KARANGA

US Supreme Court wary of removing tech firms' legal shield in Google case

https://www.bbc.com/news/world-us-canada-64727712?at_medium=RSS&at_campaign=KARANGA

Technical debt? Don't spend more than one-quarter of your time dealing with it

https://www.zdnet.com/article/technical-debt-dont-spend-more-than-one-quarter-of-your-time-dealing-with-it/

Lab Leak Most Likely Origin of Covid-19 Pandemic, Energy Department Now Says

https://www.wsj.com/articles/covid-origin-china-lab-leak-807b7b0a

James Bond books edited to remove racist references

https://www.telegraph.co.uk/news/2023/02/25/james-bond-books-edited-remove-racist-references/

Beej's Guide to C Programming

https://beej.us/guide/bgc/html/split/index.html

The Capitalist Road to Serfdom

https://jacobin.com/2023/02/capitalist-road-to-serfdom-surveillance-wage-labor

High-skilled visa holders at risk of deportation amid tech layoffs

https://www.washingtonpost.com/us-policy/2023/02/24/temporary-visa-h1b-tech-layoffs/

U.S. corn-based ethanol worse for the climate than gasoline, study finds

https://www.reuters.com/business/environment/us-corn-based-ethanol-worse-climate-than-gasoline-study-finds-2022-02-14/

Even Neal Stephenson doesn't seem keen on crypto anymore

https://www.gamedeveloper.com/culture/even-neal-stephenson-doesn-t-seem-keen-on-crypto-anymore

There is a worrying amount of fraud in medical research

https://www.economist.com/science-and-technology/2023/02/22/there-is-a-worrying-amount-of-fraud-in-medical-research

Stanford Faculty Say Anonymous Student Bias Reports Threaten Free Speech

https://www.wsj.com/articles/stanford-faculty-moves-to-stop-students-from-reporting-bias-anonymously-cbac78ed

Companies Can’t Ask You to Shut up to Receive Severance, NLRB Rules

https://www.vice.com/en/article/dy7a7x/companies-cant-ask-you-to-shut-up-to-receive-severance-nlrb-rules

How India’s caste system manifests in Seattle-area workplaces and beyond

https://www.seattletimes.com/seattle-news/how-indias-caste-system-manifests-in-seattle-area-workplaces-and-beyond/

The age of Agile must end

https://uxdesign.cc/the-age-of-agile-must-end-bc89c0f084b7

5th person confirmed to be cured of HIV

https://abcnews.go.com/Health/5th-person-confirmed-cured-hiv/story?id=97323361

The Silicon Valley Loop How the dot-com crash created Palo Alto’s clueless investor class.

https://nymag.com/intelligencer/2023/02/the-silicon-valley-loop-malcolm-harriss-palo-alto.html

Speech is violence? Not if we want a liberal, intellectual society

https://bigthink.com/thinking/is-speech-violence/

Big Tech’s massive layoffs will come back to haunt it

https://www.businessinsider.com/tech-jobs-recession-layoffs-gen-z-students-class-of-2023-2023-2

OT Network Security Myths Busted in a Pair of Hacks

https://www.darkreading.com/ics-ot/ot-network-security-myths-busted-in-a-pair-of-hacks

Attacks on industrial infrastructure on the rise, defenses struggle to keep up

https://www.csoonline.com/article/3687814/attacks-on-industrial-infrastructure-on-the-rise-defenses-struggle-to-keep-up.html#tk.rss_all

PLC vulnerabilities can enable deep lateral movement inside OT networks

https://www.csoonline.com/article/3687991/plc-vulnerabilities-can-enable-deep-lateral-movement-inside-ot-networks.html#tk.rss_all

The Energy Department’s Puesh Kumar on grid hacking, Ukraine and Pipedream malware

https://cyberscoop.com/puesh-kumar-energy-cybersecurity/

Is OWASP at Risk of Irrelevance?

https://www.darkreading.com/edge-articles/is-owasp-at-risk-of-irrelevance

Bill Fehrman - CEO Berkshire Hathaway Energy talking at S4x23

https://youtube.com/watch?v=ihvrqlxk5tA&feature=shares