Tessera
Folgen

Alex Rudolph

@cyberincontext.ca

I research Canadian cyber defence policy, focusing on CAFCYBERCOM. Carleton University PhD(ABD): State behaviour in Cyber Conflict. CGAI & NAADSN Fellow. Cyber Yeoman. I run Canadian Cyber in Context: cyberincontext.ca

581 Posts446 Follower888 Folgt
David DiMolfetta@ddimolfetta.bsky.social · yesterday

EXCLUSIVE: Years after regulators moved to push Chinese telecom carriers out of the US market, they never fully left. A bipartisan House investigation first seen by Nextgov/FCW found three major providers retained various ties in the US: www.nextgov.com/cybersecurit...

Chinese telecom firms kept footholds in US networks despite federal crackdowns, House probe finds

China Mobile, China Telecom and China Unicom retained equipment, data center space and network ties after FCC restrictions, including a China Mobile-linked network that appeared in routes to Salt Typh...

nextgov.com

Alex Rudolph@cyberincontext.ca · 3d ago

The Jordanian Armed Forces will now be saying basic cybersecurity operations training at Willis College in Ottawa, Canada. This is the same intro/basic cybersecurity essentials training that CAF Cyber Operators take before advanced training at CFSCE.

Willis College and Al Hussein Technical university sign agreement for Jordan miltiary to take training at Willis College.
Alexander Martin@alexmartin.bsky.social · 4d ago

A new ransomware group (who I'm not giving the publicity of naming) is brazenly offering journalists early access to their data leak site in order to increase pressure on victims to make an extortion payment. I'm unaware of other recipients but the message looks mass-sent.

Bild
Joe Tidy BBC News@joetidy.bsky.social · 5d ago

Teen hackers tell BBC how police are helping them use their skills for good. After many months of trying, I finally got access to the National Crime Agency's Cyber Choices programme that works to steer kids off cyber crime. We spoke to young hackers on the programme and to police working to...

Bild
—>realhackhistory.org@bsky.realhackhistory.org · 5d ago

Hackers in America threatened with conspiracy charges just for researching company’s computer security and AI companies get to turn actually hacking other corporations into marketing material.

Brian Honan@brianhonan.bsky.social · 5d ago

When I think of all the people in the hacking community who faced the full brunt of the law, civil and criminal, and then see AI companies go "oopsie our bad" when causing damage to innocent companies it makes me angry and frustrated.

Alex Rudolph@cyberincontext.ca · 5d ago

Global Affairs Canada issues joint warning about the threat of North Korean IT workers. Highlights the risk that it has become now that many foreign affairs ministries are issuing a warning. www.canada.ca/en/global-af...

Alert to countries, companies and other entities regarding North Korean IT workers

Australia’s Department of Foreign Affairs and Trade; France’s Ministry for Europe and Foreign Affairs; the German Federal Foreign Office; Global Affairs Canada; Italy’s Ministry of Foreign Affairs and...

canada.ca

Raphael Satter@raphae.li · last wk.

More than 30 water systems in Minnesota have been hit in what officials call a “coordinated cyberattack.” One said the hacking shared characteristics with those that federal agencies have been warning against — shortly after federal alerts about Iranian hacking. www.reuters.com/legal/litiga...

Minnesota IT officials disclose 'coordinated cyberattack' at more than 30 local water systems

A "coordinated cyberattack" targeted more than 30 ‌community water systems in the U.S. state of Minnesota on July 26 and July 27, the state's IT agency said in a statement.

reuters.com

David Reevely@davidreevely.bsky.social · last wk.

Canada's newfound focus on defence investments is great news for the national cyberspying and cyberdefence agency, according to internal documents. Also, it shouldn't have to buy from Canadian suppliers. thelogic.co/news/cse-buy...

Canada’s cyberspy agency exempts itself from Buy Canadian rules - The Logic

Documents show the head of the Communications Security Establishment signed off on an exemption covering everything the agency buys, even as its budget climbs past $2 billion

thelogic.co

Robert Borden Stan Account@bordenstan.bsky.social · last wk.

I personally am not the guy for the development of digital communications etc., as my main area of interest is land warfare. I would heartily recommend @cyberincontext.ca, who has been doing yeoman's work on this including a great breakdown of our new Defence Digital Strategy here:

Canada has a Defence Digital Strategy

A full breakdown and analysis of Canada's new Defence Digital Strategy and why it's big deal for Canadian industry

cyberincontext.ca

Alex Rudolph@cyberincontext.ca · 2w ago

Canada should have CSE create an active cyber operations team to develop a new ransomware strain and use it against DPRK, Russia and criminal ransomware groups. /s

Robert Borden Stan Account@bordenstan.bsky.social · 2w ago

Anyway, READ THEORY (Bermudez and Tertitskiy's work on the KPA should also be on here but doesn't map as neatly, probably also Lankov's The Real North Korea). This is why I say Ottawa would do well to procure and plan a little bit more like Pyongyang:

rm [-r] lininger@0xdaeda1a.bsky.social · 2w ago

Look at every hacking incident where they say the FEDRAMP environment was not affected. That means their regular environment had some pretty basic cybersecurity hygiene failures, because the real thing FEDRAMP brings isn’t better controls per se; it’s making it harder to lie / obfuscate.

Joe Uchill@joeuchill.bsky.social · 2w ago

I did a thread yesterday about a story about a ProofPoint study I was on the fence about. Taking more of a look at the original PP study, there's some stuff I'm a little surprised by. For example, most estimates I've seen of how often people pay ransoms are under 50%. PP has US payment at 93%

ProofPoint's graph of how often firms pay ransom showing 93% payment in US and 54% worldwide.
Joe Uchill@joeuchill.bsky.social · 2w ago

There's a little difficulty with this - in none of the examples given did one group of hackers ask for a ransom twice. In one example, a company paid off one group of hackers only to find that a second group of hackers had stolen some of the data. [1/2]

Michael Geist@mgeist.bsky.social · 2w ago

Nine months ago, Canada joined key allies by declining to sign the UN Cybercrime Convention, given longstanding surveillance and human rights concerns as well as the absence of key safeguards. Last week, it quietly signed the treaty. What changed?

A Surveillance Treaty in Disguise: The Trouble With Canada's Quiet Decision to Sign the UN Cybercrime Convention - Michael Geist

Last week, the government announced that Canada has signed the United Nations Convention against Cybercrime, with Ministers Anita Anand, Gary Anandasangaree and Sean Fraser touting the treaty’s child…

michaelgeist.ca