How to Take the Target Off Your Organization
Threat actors are scanning your environment, even if you’re not
In a world where organizations’ digital footprint is constantly changing and attackers regularly capitalize on security failings in exposed IT assets, making the effort to minimize your external attack surface is a no-brainer.

The goal is simple: Make your organization a hard nut to crack and thus force attackers to look for easier targets. To do that, you must be able to see the entirety of your organization’s external attack surface as threat actors see it, and close as many attack paths as possible.

Discovering the unknowns and reducing cyber risk

An organization’s attack surface encompasses all exposure points that an attacker could leverage to infiltrate systems or extract sensitive data. External attack surface encompasses every IT asset and technology that an organization owns or uses and that is reachable via internet/IP address/domain/port:

• Company websites and domains

• Web and mobile applications

• APIs

• Cloud and email infrastructure

• Remote access points and portals

• Network devices and services

• Hosts

• SSL/TLS certificates

• DNS records

• File shares

• Code repositories

• Legacy systems and forgotten subdomains

• Test environments left online

• Orphaned accounts

But also: the company’s brand (exploited by phishers) and stolen corporate credentials or leaked data. helpnetsecurity.com


Vendors Need to Embrace Secure Development Practices
JPMorgan Chase CISO warns software industry on supply chain security

In an open letter, Patrick Opet said third-party vendors need to embrace secure development practices over speed to market.

The senior information security executive at JPMorgan Chase is urging the software industry to prioritize secure development practices over speed to market, warning that increasing supply-chain disruptions are weakening the global economic system.

Patrick Opet, global CISO at JPMorgan Chase, warned in an open letter on Friday that global companies are dependent on interconnected technologies and warned that software needs to be secure by default.

Opet said that because global companies are increasingly reliant on a small number of software-as-a-service providers, a hack or other disruption can disrupt critical infrastructure providers around the world.

JPMorgan Chase officials have seen the warning signs up close, Opet said.

“Over the past three years, our third-party providers experienced a number of incidents within their environments,” Opet wrote. “These incidents across our supply chain required us to act swiftly and decisively, including isolating certain compromised providers and dedicating substantial resources to threat mitigation.” cybersecuritydive.com
 

'One of the Most Sophisticated Foreign Cyber Campaigns Ever'
FBI seeks public tips about Salt Typhoon

The bureau’s public alert follows months of conversations with the telecom industry about the far-reaching cyber espionage campaign by a Chinese nation-state threat actor.

The FBI said it wants the public’s help finding Chinese hackers behind the massive cyberattack campaign against U.S. telecommunications providers. An April 24 bulletin from the bureau asked for “any information” on the hackers behind the China-affiliated Salt Typhoon’s intrusion campaign and on those attackers’ activities.

The alert reflects the government’s reliance on voluntary cyber-incident reporting.

Salt Typhoon, one of the most sophisticated foreign cyber campaigns ever directed at U.S. networks, has prompted intense government efforts to identify the full scope of the compromise, lock down affected networks and harden defenses.

With U.S. officials warning that the campaign is likely far broader than what they have uncovered, the recent FBI bulletin suggests that the government still needs more details about China’s operation. “If you have any information about the individuals who comprise Salt Typhoon or other Salt Typhoon activity,” the bureau wrote, “we would particularly like to hear from you.”  cybersecuritydive.com


How Breaches Start: Breaking Down 5 Real Vulnerabilities

Cyber Security CEO Arrested for Installing Malware Onto Hospital Computers

Denver, CO: Four charged with stealing over $150,000 in lottery scratch tickets from Front Range retailers
Four people in Colorado have been charged with stealing over $150,000 in lottery scratch tickets from Front Range retailers over a period of 15 months, according to the Colorado attorney general’s office. Richard McBee, Adam Pacheco, Tawny McCurry, and David Goetken were indicted by a statewide grand jury Monday in connection with the scheme, which prosecutors said occurred at least at 45 separate gas station locations across the Front Range. Prosecutors said McBee, either acting alone or with accomplices would target gas stations and convenience stores that were staffed by a single store clerk. He or his accomplice would then lure the store clerk away from the store’s counter by distracting the clerk with purchasing propane tanks, claiming a credit card was stuck in a gas pump, or spilling gasoline. While the store clerk was distracted, McBee would sneak behind the counter and steal high-value lottery scratch tickets from the store’s dispenser. The indictment showed that within hours of the theft, and before the theft was discovered, McBee would enter a different gas station or store to redeem prizes from the stolen lottery tickets.  denver7.com


Orange Park, FL: Retail theft suspects arrested at Orange Park Mall found with $16K worth of stolen sunglasses
Two men were arrested at Orange Park Mall for a series of robberies across Florida, according to the Florida Highway Patrol (FHP). FHP officials said they intercepted a vehicle linked to retail theft. During the arrest, the suspects were found in possession of more than $16,000 worth of sunglasses, troopers said. The investigation revealed that the pair was wanted for numerous thefts between West Palm Beach and Jacksonville, totaling over $65,000 in stolen merchandise, according to FHP.  news4jax.com


Berrien County, MI: Three arrested after armed robbery, chase ends with $20k in stolen cell phones recovered
Three women from Chicago are behind bars after police say they stole thousands of dollars worth of cell phones from a Berrien County store and took off across the state line. Police were called out to the T-Mobile store on Red Arrow Highway in Stevensville for an activated hold-up alarm just before 4 p.m. Sunday. When they arrived, they confirmed an armed robbery took place. Witnesses gave police a description of the women and their vehicle. A deputy noticed the vehicle was heading west on I-94 and started a chase. The vehicle went into Porter County where officers there successfully laid out stop sticks. No one was injured during the robbery or the chase. When officers searched the vehicle, they found more than $20,000 worth of stolen cell phones. The women were arrested and taken to the Porter County Jail on charges of Fleeing and Eluding. They also face charges in Berrien County for Resisting and Obstructing Officers, as well as Fleeing and Eluding. Armed Robbery and additional charges were also submitted to the Berrien County Prosecutor's Office.  wsbt.com


Memphis, TN: $19K in merchandise stolen from smoke shop

Lee County, GA: 3 Albany residents wanted in $2000 Ace Hardware burglary

Fond du Lac County, WI: Retail theft suspects arrested with nearly $2000 of Kohl’s merchandise