38 - China Changes Strategy, CISA Address House Select Committee, and Continued Focus on Critical Infrastructure (This Month In Cyber - February 2024)
Manage episode 403362796 series 3477109
Welcome to Episode 38 of Emagine The Future our 2nd of our "This Month in Cyber" series - February 2024 edition.
January Catchup (Things we missed):
- CISA, FBI, and EPA Release Incident Response Guide for Water and Wastewaste Systems Sector
- Pwn2Own 2024: EVs take on electric vehicles, vehicle chargers, operating systems, and components
- Fulton County Suffers Power Outages as Cyber Attacks Continue
Incidents & Breaches:
- China Infiltrates US Critical Infrastructure in Ramp-up to Conflict
- Ongoing Azure Compromises Target Senior Execs Microsoft 365 Apps
Regulatory & Government:
- CISA Director Jen Easterly gave her opening statement before the House Select Committee on Strategic Competition Between the United States and the Chinese Communist Party.
- SEC Rules on Cybersecurity Incident Disclosure (July 2023 + Feb 2024 Comments)
- OWASP Releases LLM AI Security and Governance Checklist V1
Events:
- Zero Trust World 2024 (threatlocker.com) February 26 - 28, 2024 Caribe Royale, Orlando, FL
- SANS 2024 in Orlando, FL | Cyber Security Training Mar. 24-49, SANS 2024, Orlando, Fla.
- 2024 USA | RSA Conference May 6-9, RSA Conference USA 2024, San Francisco, Calif.
- Black Hat Spring Trainings 2024 Black Hat Spring Training Mar 12, 2024 – Mar 15, 2024
Connect with Erik: https://www.linkedin.com/in/erik-dominguez-2589b228/
Connect with Jeremy: https://www.linkedin.com/in/jeremyfrancese/
Subscribe on YouTube: https://www.youtube.com/@EITisCyber
Connect on LinkedIn:
https://www.linkedin.com/company/emagine-it-inc-/posts/
챕터
1. Setting The Table (00:00:00)
2. SEC Cyber Ruling - What it is and What it Means (00:00:00)
3. January Recap - What We Missed Last Month (00:07:03)
4. China's Breaches Reach Boiling Point (00:27:00)
5. Current Events Impact on Penetration Assessment & Threat Vector Analysis (00:36:00)
6. Why Allow-Listing on a Penetration Testing is Important (00:39:00)
7. Senior Execs Targeted for Microsoft 365 Logins - The Risk Beyond The Headline (00:42:22)
8. CISA Director, Jen Easterly Address House Select Committee on Strategic Competition Between the United States and the Chinese Communist Party - Regulatory Update & Analysis (00:50:00)
9. What does it mean when a hacker is "Living off the Land"? (00:52:30)
10. China's Shift in Strategy From Espionage to Pre-Positioning in Critical Infrastructure (00:55:00)
11. SEC Cyber Ruling - Overview & Analysis (00:58:00)
12. OWASP Releases V1 of their LLC AI Cybersecurity & Governance Checklist (01:02:12)
13. Cyber Events Coming Up (01:03:00)
44 에피소드