The United States Coast Guard is to establish a Cyber Operational Assessments Branch this summer and create its first ever red team. The planned restructuring, first reported by Federal News Network, will support the cybersecurity work currently being undertaken by the Coast Guard’s blue team. Acting as a cyber adversary, the red team will emulate the behavior of threat actors and perform penetration tests to identify any weaknesses in the Coast Guard’s cyber-defenses.  Cyber blue team…

Cybersecurity expert says it all starts with process. The regulations will make it easier for companies to report breaches. TechRepublic’s Karen Roby spoke with Jennifer Bisceglie, CEO of Interos, about President Joe Biden’s executive order on cybersecurity. The following is an edited version of their conversation. SEE: Security incident response policy (TechRepublic Premium) Karen Roby: Go ahead and go over a couple of the main points of the president’s executive order. What really sticks out…

Some cybersecurity weak spots will be strengthened by Biden’s executive order, expert says Length: 11:36 | May 25, 2021 There’s still a lot of work to be done, but it will help companies feel better about reporting breaches and sharing information. Source link

In response to the latest MITRE Engenuity ATT&CK® Evaluation 3, McAfee noted five capabilities that are must-haves for Sec Ops and displayed in the evaluation.  This blog will speak to the alert actionability capability which is essential. This critical ability to react in the fastest possible way, as early as possible on the attack chain, while correlating, aggregating and summarizing all subsequent activity while reducing alert fatigue to allow Sec Ops to uphold efficient actionability.   As a Sec Ops practitioner and former analyst, I can remember the days of painstakingly sifting through countless alerts to determine if any of them could be classified as an incident….

The various threat intelligence stories in this iteration of the Anomali Cyber Watch discuss the following topics: BazarCall, DarkSide, Data breach, Malware, Phishing, Ransomware and Vulnerabilities. The IOCs related to these stories are attached to Anomali Cyber Watch and can be used to check your logs for potential malicious activity. Figure 1 – IOC Summary Charts. These charts summarize the IOCs attached to this magazine and provide a glimpse of the threats discussed. Trending Cyber…

It’s critical to plug cybersecurity vulnerabilities before bad guys get wind of them. To make that happen, businesses should encourage security and developer teams to collaborate, says an expert. Image: iStockphoto/maxkabakov After-the-fact cybersecurity is something cybercriminals appreciate. “With attackers continuing to innovate ways they can compromise their victims’ assets, it’s becoming increasingly critical for organizations to reduce their attack surfaces,” said Rickard Carlsson, co-founder, and CEO of Detectify, a cybersecurity company utilizing ethical hackers. “To…