Archive for February 2, 2024

Real Madrid & HP Announce Historic Global Collaboration Agreement

Posted in Commentary with tags on February 2, 2024 by itnerd

Today, Real Madrid Football Club announced a global technology sponsorship agreement with HP Inc. making HP the first brand logo to appear on the Real Madrid uniform sleeve in the Club’s 121-year history. The sponsorship spans men’s and women’s football teams as well as its youth programs.

As part of the agreement, HP will also become the club’s newest technology partner to accelerate the digital transformation of club spaces and elevate the fan experience in collaboration with the club at its new Santiago Bernabeu complex and beyond, including in-person experiences, gaming and club operations.

The partnership reinforces both brands’ shared vision of empowering communities and advancing dignity/inclusion through sport and technology. HP and Real Madrid will co-create programs to address societal issues including closing the digital divide.

Flashpoint Publishes Research About The Emerging Threat Of PikaBot Malware

Posted in Commentary with tags on February 2, 2024 by itnerd

 The team from Flashpoint published a blog outlining the emerging threat of PikaBot malware.

The team reviewed and validated six different infection methods of the PikaBot attack chain identified by security researchers:

  1. PDF lures
  2. Windows Installer
  3. Phishing emails
  4. .HTA files
  5. Windows Script Files
  6. .XLL files

You can read the blog here: https://flashpoint.io/blog/emerging-threat-pikabot-malware/

BlackCat Ransomware Group Claims To Have Pwned An IT Services Company Connected To The Pentagon

Posted in Commentary with tags on February 2, 2024 by itnerd

According to a Pentagon spokesperson, the Department of Defense office responsible for background investigations is working with law enforcement to examine claims by the ALPHV or BlackCat ransomware group that they have stolen documents containing sensitive data related to the U.S. military.

The ransomware group said early Tuesday that they had stolen and threatened to leak 300 gigabytes of data from Technica, a Virginia-based IT services company that describes itself as working with the federal government and “their mission to support, to defend and protect America’s citizens.”

ALPHV claimed that the stolen data is related to the Defense Counterintelligence and Security Agency, which carries out background investigations and insider threat analyses. To back up its claim, the gang posted more than two dozen screenshots of alleged stolen documents featuring the names, social security numbers, clearance levels, roles and work locations of dozens of people as well as invoices, contracts for entities ranging from the FBI to the U.S. Air Force and information related to private entities and facilities who contract with the U.S. government.

Mark B. Cooper, President & Founder, PKI Solutions had this comment:

   “This situation demonstrates the critical need for cybersecurity measures and inter-agency coordination to protect sensitive information. It highlights the importance of managing the security posture for each of the core services that manage sensitive information like identity and encryption through real-time tools for configuration and threats. Although tools such as traditional risk assessments have sufficed in the past, they are not timely enough alone to deal with the modern threat landscape. An emphasis on real-time alerting, adoption of best practices, and rapid mitigation once the threat is detected must be a top priority for organizations.”

This highlights the fact that you as an organization don’t have to get pwned to be affected by what a cybercrime organization does. Thus you have to ensure that every business partner that you as an organization has is doing what they need to do to protect themselves and you from a catastrophic event like this one.

Congress Holds Hearings On Child Exploitation With Social Media Companies In The Spotlight

Posted in Commentary with tags on February 2, 2024 by itnerd

The Senate Judiciary Committee is currently conducting a hearing on child exploitation, featuring executives from Meta, TikTok, Snap, and Discord.

Some of the issues that children face on social media that are being touched on in the hearing include sexual predators, addictive features, suicide and eating disorders, unrealistic beauty standards, and bullying.

This has caused Congress to want tighter regulation and protection for social media.

Alan Bavosa, VP of Security Products at Appdome had this to say:

“The issues raised at the congressional hearings are important in ensuring that more safeguards are put in place by social media apps and platforms to protect children and loved ones. Core to this discussion is protecting consumer privacy and data. This fundamentally means protecting it in every form and every place it’s stored, transmitted and used by mobile apps.”

For reference, Appdome, a prominent mobile cybersecurity automation platform, provides app owners and DevOps teams with advanced protections to proactively mitigate mobile threats.

Social media has become a very toxic place. And if social media were say cigarettes or something like that, there would be regulations either enacted or already in place. So besides protecting data, we have to protect the people from harm from social media before it is too late.