Metacurity

Metacurity.com (https://metacurity.com) is the one-stop destination for leading infosec news and cybersecurity developments. Run by infosec writer and columnist Cynthia Brumfield, Metacurity draws from thousands of sources every day to deliver aggregated summaries of the latest infosec developments. Send tips to cynthia [at] metacurity.com. Sign up for our free daily emails at https://www.metacurity.com/subscribe. Searchable

Metacurity: https://metacurity.com
Twitter: https://twitter.com/Metacurity
Columns: https://www.csoonline.com/author/Cynthia-Brumfield/
Book: https://www.amazon.com/Cybersecurity-Risk-Management-Mastering-Fundamentals/dp/1119816289
Course: https://www.oreilly.com/live-events/cybersecurity-risk-management-with-the-nist-20-framework/0636920081497/
Cynthia's Personal Ramblings: https://bsky.app/profile/msbrumfield.bsky.social

Public Key

npub102xc6m40gwx94dhvcfk353alkvfsmk28rlnu508mtfjldnxj7k4qp6wzj6

NIP-05 Address

metacurity_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqs84rvdd6h58rz6kmkvymg6g7lmxycdm9r3le728na45e0kenf0t2scl4cyc

Author Public Key

npub102xc6m40gwx94dhvcfk353alkvfsmk28rlnu508mtfjldnxj7k4qp6wzj6

Show more details

Published at

2024-09-17T17:53:56Z

Kind type

0 Metadata

Event JSON

{ "id": "54274765a791beaa330216372124a6bbde17584958d6c8511602c761a22bb82f", "pubkey": "7a8d8d6eaf438c5ab6ecc26d1a47bfb3130dd9471fe7ca3cfb5a65f6ccd2f5aa", "created_at": 1726595636, "kind": 0, "tags": [ [ "proxy", "https://infosec.exchange/users/metacurity", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/metacurity", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"Metacurity\",\"about\":\"Metacurity.com (https://metacurity.com) is the one-stop destination for leading infosec news and cybersecurity developments. Run by infosec writer and columnist Cynthia Brumfield, Metacurity draws from thousands of sources every day to deliver aggregated summaries of the latest infosec developments. Send tips to cynthia [at] metacurity.com. Sign up for our free daily emails at https://www.metacurity.com/subscribe. Searchable\\n\\nMetacurity: https://metacurity.com\\nTwitter: https://twitter.com/Metacurity\\nColumns: https://www.csoonline.com/author/Cynthia-Brumfield/\\nBook: https://www.amazon.com/Cybersecurity-Risk-Management-Mastering-Fundamentals/dp/1119816289\\nCourse: https://www.oreilly.com/live-events/cybersecurity-risk-management-with-the-nist-20-framework/0636920081497/\\nCynthia's Personal Ramblings: https://bsky.app/profile/msbrumfield.bsky.social\\n\",\"website\":\"https://infosec.exchange/@metacurity\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/243/688/522/761/749/original/958dc2958799c9b8.png\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/243/688/522/761/749/original/87ee38dd5d3273ee.png\",\"nip05\":\"metacurity_at_infosec.exchange@momostr.pink\"}", "sig": "241fd19218ea6fb2ebaa7a566b703c04d4ef4ef0b8e8238a677a66448ef5d3086415f89ae5b3656a610518b0a482b4f0232c2d757a48c3c6c8712cf86e59e871" }

Last Notes

2024-09-22 11:30:20

https://www.reuters.com/business/autos-transportation/us-propose-barring-chinese-software-hardware-connected-vehicles-sources-say-2024-09-21/
Exclusive: US to propose ban on Chinese software, hardware in connected vehicles, sources say

2024-09-17 12:10:59

Don't miss my latest CSO report, which delves into the ransomware incident gone awry in the city of Columbus, featuring an interview with the whistleblower gagged by the city, along with insights from cyber and legal experts.
Although I only briefly mention it in the piece, the city's incident response would have likely been greatly aided by cyber insurance, which it didn't have at the time of the Rhysida gang's attack.
Anyway, thanks to Connor Goodwolf, Mike Hamilton of Critical Insight, @npub1jsj…sxvg, and Robert Corn-Revere of Foundation for Individual Rights and Expression for their insights. @npub1t0q…ayut https://www.csoonline.com/article/3523971/ransomware-whistleblower-columbus-could-have-avoided-its-mistakes.html

2024-09-12 13:50:20

Holy cow!
Mastercard bolsters threat intelligence capabilities with $2.65 billion deal for Recorded Future
https://www.reuters.com/markets/deals/mastercard-buy-threat-intelligence-company-recorded-future-265-bln-2024-09-12/

2024-09-10 12:12:46

So this is great: Sam Orth, the CTO of Columbus, ran out of a half-hour City Council briefing on the city's bungled ransomware incident response into an "Emergency Exit ONLY" to a hallway on the floor above to avoid a waiting crowd of reporters.
https://www.dispatch.com/story/news/local/2024/09/10/columbus-it-chief-tells-council-23-percent-of-city-computer-systems-remain-down-from-cyberattack/75106743007/

2024-09-06 11:38:34

Nice to see a woman CEO handing control over a cybersecurity company to another woman.
"Darktrace Plc’s Chief Executive Officer Poppy Gustafsson will leave the British cybersecurity company, handing over to current operating chief Jill Popelka to steer the business as it’s absorbed into private equity firm Thoma Bravo."
https://www.bloomberg.com/news/articles/2024-09-06/darktrace-ceo-gustafsson-steps-down-amid-thoma-bravo-takeover?mid=1

2024-09-05 17:11:01

Because he's demonstrated his efficiency skills over at X....
Trump says Musk would head a government efficiency commission if he's re-elected
https://www.axios.com/2024/09/05/trump-economic-proposal-musk-efficiency-commission

2024-09-05 10:02:17

RT is not happy with yesterday's actions. 😂
US becoming ‘neoliberal dictatorship’ – Moscow
https://www.rt.com/news/603538-us-neoliberal-dictatorship-russia/

2024-09-04 23:36:07

https://www.washingtonpost.com/national-security/2024/09/04/justice-department-election-security/
“The indictment offers a glimpse into how much money significant conservative personalities can make. One unnamed Tenet contributor with 2.4 million YouTube followers on their own channel received $400,000 a month, plus a $100,000 signing bonus and performance incentives, just for making four videos a week for Tenet, according to the indictment.”

2024-09-04 17:44:35

The Treasury Department's actions aren't up online yet but here is a snippet from the press release
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/080/524/489/769/723/original/12868ebeab589ec1.png

2024-09-03 18:11:40

The White House has released a new roadmap for enhancing internet routing security.
https://www.whitehouse.gov/wp-content/uploads/2024/09/Roadmap-to-Enhancing-Internet-Routing-Security.pdf

2024-09-03 13:40:40

Suddenly, out of nowhere and far too soon, it's decorative gourd season already.
https://www.mcsweeneys.net/articles/its-decorative-gourd-season-motherfuckers

2024-09-02 21:37:16

This is who all the folks still on X support, either directly or indirectly. A guy who wants America to be run by "high-status males."
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/070/110/434/534/873/original/08bcec77de5f0ff8.jpg

2024-08-30 12:04:44

- reply

Technically, the judge issued a temporary restraining order barring Goodwolf from downloading any more data from the dark website. However, the goal was to stop him from informing the public about the data available on that site.
I wonder if there is a clash of laws here.

2024-08-30 11:54:41

- reply

Here's a more detail report from the Columbus Dispatch.
https://www.dispatch.com/story/news/local/2024/08/29/data-hack-columbus-restraining-order-cyber-security-expert-david-ross/74998593007/

2024-08-30 10:09:38

If you haven't been following the ransomware attack in Columbus, the city has botched its response. The mayor failed to tell citizens anything for a while, and then when he did speak, he lied and said no citizens' data was stolen in the attack.
However, a local cybersecurity expert, Connor Goodwolf, examined the files released on the dark web and has been informing the media that, despite what the mayor said, the attackers posted a lot of sensitive citizen data.
Now, the city has successfully persuaded a judge to impose a restraining order on Goodwolf to keep him from talking to the media.
One of the worst local government responses to a ransomware attack.
Judge grants restraining order against cybersecurity expert who exposed the extent of city's data breach
https://www.10tv.com/video/news/local/judge-grants-restraining-order-against-cybersecurity-expert-who-exposed-extent-of-citys-data-breach/530-8482e5e1-ea3a-4eec-8c27-55c51a3f265e

2024-08-22 23:16:50

https://www.theverge.com/2024/8/22/24226184/trump-defiant-ones-cryptocurrency-platform
Trump is launching a cryptocurrency platform, and we have no idea what it does

2024-08-19 13:07:10

So this is cool: On the ground at DEF CON, EFF represented security researcher Dennis Giese who received a cease-and-desist letter from digital lock maker Digilock about a presentation that Giese was going to give the next day. EFF attorney and current Special Counsel to EFF, Kurt Opsahl, got the cease-and-desist lifted so that Giese could give his talk.
https://www.eff.org/deeplinks/2024/08/2-fast-2-legal-how-eff-helped-security-researcher-during-def-con-32

2024-08-19 08:47:40

I missed this a week ago, but the co-founder of The Register and the founder of TechEye, ChannelEye, and The Inquirer passed away. Man, he lived life to the utmost and left a mark in a way that I salute. RIP Mike Mageek.
Mike Mageek is dead
https://fudzilla.com/news/59503-mike-mageek-is-dead

2024-05-30 10:02:10

Google confirms the leaked Search documents are real
https://www.theverge.com/2024/5/29/24167407/google-search-algorithm-documents-leak-confirmation

2024-04-20 08:49:42

https://www.bleepingcomputer.com/news/security/mitre-says-state-hackers-breached-its-network-via-ivanti-zero-days/
MITRE says state hackers breached its network via Ivanti zero-days

2024-04-19 11:52:28

As NVD flatlines, cybersecurity professionals call for urgent action
https://www.thestack.technology/nvd-crisis-vulnerabilities-data-update/?ref=the-stack-newsletter

2024-04-16 20:36:19

If anyone is interested, I'll be teaching a course on the NIST 2.0 Framework for O'Reilly on May 1 and 2.
Since O'Reilly sells its learning resources mostly to corporations, I'm not sure how you can sign up, but there is a ten-day free trial option on the website.
https://www.oreilly.com/live-events/cybersecurity-risk-management-with-the-nist-20-framework/0636920081497/

2024-04-08 19:31:49

Even at only 90%, that was cool. No way to capture it on my iPhone though.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/237/258/467/786/561/original/2557b055deba7da5.png