- •
Blockchain-based botnets are nearly impossible to disrupt
“They're using blockchain, which is an immutable record, which is accessible from all over the place because it's decentralized, in order to pass the command and control commands. The botnet is scanning the blockchain, looking for certain wallets activity. The wallets are basically the identifier or the key to say, hey, this is from me, the criminal, and this is the command. It's kind of brilliant because you can't take the blockchain down.”
- •
Ransomware groups are moving vulnerability research in-house
“Trend Micro published a report titled the near and far future of ransomware business models. It predicts that ransomware organizations will increasingly shift strategy to develop their own vulnerability research rather than using pen test teams or purchasing access credentials. Given that these skills are scarce, it believes some groups will offer researchers first to refuse agreements, paying them for a first look at new exploits.”
- •
Cloud-specific ransomware is the next major threat
“The report also believes that ransomware groups will better optimize operations to focus on targeting cloud infrastructure. This could include development of cloud specific ransomware families designed for unique cloud services. This might sound like news, but this is not news at all, okay? If you've read Nicole Pelaroth's This Is How They Tell Me The World Ends, excellent book, by the way.”
- •
Cyber briefings qualify for professional certification credits
“If you hold professional certifications that require CPEs, each episode of the Daily Cyber Threat Briefing, just like the one we're watching right now together, is worth half a CPE, so two and a half a week, 10 a month, they stack. Be sure to document by saying what's up in chat, by saying team live, team replay. Document literally the easiest and I would argue the most enjoyable to get CPEs.”
- •
MDR services bridge the gap for mid-sized firms
“If your organization is large enough to have cybersecurity concerns, but maybe not quite large enough to build a full-fledged security operations capability from the ground up, which many of us are, check out the managed detection and response offering from Recon InfoSec. Their offering includes the people, process and technology needed to deliver full-spectrum security operations to organizations of any size.”