CyberWire Daily
You've been disconnected.
· Summarized
Key takeaways
- Eliminating legacy VPNs is essential for national security, with proposals for federal mandates to enforce modern, zero-trust remote access.
- Critical infrastructure, such as water systems and servers, remain vulnerable to cyber attacks due to outdated systems and insecure protocols.
- Advances in cybersecurity AI, like Microsoft's MAI CyberOne Flash, are helping identify vulnerabilities more efficiently and cost-effectively.
- Monitoring active exploitation of vulnerabilities, such as in Arista's VeloCloud, is vital for timely patching and mitigation.
- The growth of botnets like dysphoria highlights ongoing IoT device security challenges and the importance of firmware and password management.
- Legal and ethical issues, including platform security and access for marginalized talent, are increasingly prominent topics in cybersecurity.
- International efforts, including Denmark’s offline banking backup and Google's threat actor naming system, improve resilience and communication across borders.
- Industry experts emphasize proactive security practices, understanding assets, and adopting zero-trust architectures to reduce risks.
Summary
Legislative and Regulatory Actions in Cybersecurity
This section covers recent efforts by U.S. lawmakers, notably Senator Ron Wyden, to push for the elimination of legacy VPNs from federal networks within two years. Wyden emphasizes that ongoing emergency patches are not sustainable and advocates for vendors to certify their products meet zero-trust standards. He proposes federal directives and procurement updates to enforce migration to more secure remote access technologies, citing nation-state campaigns exploiting VPN vulnerabilities as motivation. This signals a push towards modern, zero-trust network models in government.
Cyber Attacks and Infrastructure Incidents
Multiple reports highlight ongoing cyber threats targeting critical infrastructure. Minnesota water systems in Plymouth, South St. Paul, and Braham experienced cyber attacks affecting their water facilities, prompting coordinated investigation and response. Separately, over 24,000 servers are vulnerable due to a long-standing flaw in the IPMI protocol, which could lead to widespread compromise. The incidents underscore the persistent threats to essential services and the importance of patching and securing management interfaces.
Emerging Cybersecurity Technologies and Threats
Microsoft announced MAI CyberOne Flash, its first AI model designed specifically for cybersecurity vulnerability detection, outperforming other models and reducing costs. In the commercial sector, Arista patched a critical vulnerability in its VeloCloud orchestrator after active exploitation began. Meanwhile, the dysphoria botnet, employing blockchain-based C&C mechanisms, has grown to over 200,000 compromised devices globally, used for DDoS and traffic relay operations. These developments highlight the race between offensive and defensive innovations in cybersecurity.
Legal and Ethical Issues in Cybersecurity
Apple faces a lawsuit after users lost millions in Bitcoin due to a fraudulent crypto wallet app mimicking a legitimate one in the App Store. The plaintiffs accuse Apple of inadequate app review processes, raising questions about platform security and oversight. Another notable story involves a cybersecurity applicant who allegedly hacked into IIT campuses seeking a fair chance after being rejected, igniting debate about talent screening, security, and ethics in cyber communities.
Global and Industry-Wide Initiatives
Denmark's central bank is developing a dormant energy bank and offline backup systems to maintain financial operations during major cyber disruptions. Google introduces a new threat-actor naming system with memorable, descriptive cryptonyms aimed at simplifying threat attribution and communication across the industry. These collaborations and innovations demonstrate a proactive approach to resilience and tracking threats on an international scale.
Guest Interview and Industry Insights
The podcast features John Chiapetta, CRO of Zona Systems, discussing the GAO report on gaps in FAA network security. Areas of concern include outdated infrastructure and cultural challenges in updating aviation cybersecurity practices. Chiapetta emphasizes the importance of understanding network assets and adopting proactive security measures like zero-trust principles, with insights drawn from his work with critical infrastructure sectors. His expertise underscores the importance of aligning technological and organizational strategies to address vulnerabilities.
Sponsors
- Black Hat USA · If you follow the research, you know a lot of it breaks on Black Hat stages. Hundreds of peer-reviewed briefings, more than a hundred hands-on trainings, and the largest business hall in Blackhats history. Six days to learn the skills you'll need tomorrow. August 1st to the 6th. Use code CyberWire for $200 off your briefings pass at blackhat.com. We'll see you in Vegas.
Show notes
A senator targets legacy VPNs. Minnesota water systems come under cyberattack. A 20-year-old flaw exposes 24,000 servers. Microsoft debuts its first cybersecurity AI model. A critical VeloCloud bug is under active attack. The Dysphoria botnet tops 200,000 devices. Apple faces a lawsuit over a fake crypto wallet. Denmark builds a cyber-resilient banking backup. Google gives threat actors yet another set of names. Our guest is John Chiappetta, Chief Revenue Officer of Xona Systems, discussing the Aviation Cybersecurity GAO report that highlights gaps in FAA network security. Hacking the admissions system in search of a fair chance.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by John Chiappetta, Chief Revenue Officer of Xona Systems, discussing the Aviation Cybersecurity GAO report that highlights gaps in FAA network security.
Selected Reading
Wyden Demands Two-Year Federal VPN Purge: Zero-Trust Procurement Rule Would Reshape Vendor Market (Tech Times)
Several MN water facilities targeted by cyber attacks (FOX 9 Minneapolis-St. Paul)
Over 24,000 exposed server BMCs leak password hash via decades-old flaw (Bleeping Computer)
Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model (SecurityWeek)
Arista patches actively exploited VeloCloud bug as CISA puts admins on the clock (The Register)
New Dysphoria DDoS botnet spreads to 200k devices worldwide (Bleeping Computer)
Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin (Bleeping Computer)
Denmark Readies Emergency Reserve Bank to Fight Cyberattacks (Global Finance Magazine)
Google Adopts New Threat Actor Naming System (SecurityWeek)
Rejected Cybersecurity Applicant Allegedly Hacks IIT Madras Portal: "All I Need Is A Fair Chance" (NDTV)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account