BuzzSec

Original release date: June 24, 2019 Cybersecurity and Infrastructure Security Agency (CISA) Director Christopher C. Krebs has released a statement in response to the recent rise in malicious cyber activity—including spear phishing and brute force attacks—by Iranian regime actors and proxies. CISA encourages users and administrators to review the CISA Statement on Iranian Cybersecurity Threats and tips and best practices for staying safe online , including the following: •    Avoiding Social Engineering and Phishing Attacks •    Password Spraying — Brute Force Attacks •    Choosing and Protecting Passwords •    Supplementing Passwords   This product is provided subject to this Notification and this Privacy & Use policy. from US-CERT: The United States Computer Emergency Readiness Team https://www.us-cert.gov/ncas/current-activity/2019/06/24/CISA-Statement-Iranian-Cybersecurity-Threats

You already know the importance of frequent year-round simulated phishing attacks and security awareness training for your users to help you build a more resilient and secure organization. You use the results from your phishing and training campaigns to tailor targeted and remedial training for those users that present a higher risk to the safety and security of your organization’s data and networks. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/knowbe4-user-event-api-helps-you-tailor-security-awareness-training-based-on-custom-user-risk-events

CyberheistNews Vol 9 #26 [Heads-up] The U.S. Launched A Cyber Attack On Iran, And We're Expecting Spear Phishing Strike Backs The tension in the Middle-East apparently prompted a game-changing move by the U.S. President. Washington Post sources say exactly 10 years after Stuxnet, the President approved a cyberattack that took down Iranian missile control computers on the night of June 20th. The exact impact of the Cyber Command operation isn't clear, but it was described as "crippling". The Wall Street Journal reported that Iran may attempt to retaliate with spear-phishing strike back attacks against the U.S. if the tension in the Middle East continues to escalate. Researchers at FireEye and CrowsStrike have spotted phishing campaigns linked to a known Iranian hacking group that possesses powerful, destructive tools like the Shamoon disk-wiper that was recently used to attack Saudi Government targets and literally destroyed 35,000 machines at Saudi Aramco in...

KnowBe4’s Data-Driven Defense Evangelist, Roger Grimes, explains why compliance and security are not aligned, and why compliance actually hurts security. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/is-compliance-securitys-worst-enemy

Taking advantage of the inherent trust in mobile content, the bad guys are using a mixture of text messages and look-alike sites to trick users into giving up credentials. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/phishing-attacks-go-mobile-as-cybercriminals-leverage-push-notifications

Stanford University's Cyber Policy Center has published a long report on the security of US elections. Summary: it's not good . from Schneier on Security https://www.schneier.com/blog/archives/2019/06/election_securi_3.html

The tension in the Middle-East apparently prompted a game-changing move by the U.S. President.  Washington Post  sources say exactly 10 years after Stuxnet , the President approved a cyberattack that took down Iranian missile control computers on the night of June 20th. The exact impact of the Cyber Command operation isn't clear, but it was described as "crippling". The Wall Street Journal reported that Iran may attempt to retaliate with spear-phishing strike back attacks against the U.S. if the tension in the Middle East continues to escalate. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/heads-up-the-u.s.-launched-a-cyber-attack-on-iran-and-were-expecting-spear-phishing-strike-backs