Verify Your Valentine

Original release date: February 11, 2021

This Valentine’s Day, before you go looking for love in all the wrong chat rooms, CISA reminds users to be wary of internet romance scams. At first, cyber criminals promise the reward of romance after adopting an alias to appear as a potential partner. Once your heart is hooked on hope, they turn the tables. The scammer with the illusive identity will ask for money, making promises of phony matrimony, as they finagle funds from you as a fake fiancée.

If you don’t know who you are doting on when you are dating, be cautious with your cash and keep it.    

For more information, review CISA’s Tip on Staying Safe on Social Networking Sites. If you believe you have been a victim of a romance scam, file a report with:

This product is provided subject to this Notification and this Privacy & Use policy.

Compromise of U.S. Water Treatment Facility

Original release date: February 11, 2021

In response to recent events where unidentified cyber actors obtained unauthorized access to the supervisory control and data acquisition (SCADA) system at a U.S. drinking water treatment facility, CISA, the Federal Bureau of Investigation, the Environmental Protection Agency, and the Multi-State Information Sharing and Analysis Center have released joint Cybersecurity Advisory AA21-042A: Compromise of U.S. Water Treatment Facility. This advisory outlines how cyber criminals exploit desktop sharing software and end-of-life operating systems to gain unauthorized access to systems.

This product is provided subject to this Notification and this Privacy & Use policy.

VMware Releases Security Update

Original release date: February 12, 2021

VMware has released a security update to address a vulnerability in vSphere Replication. An attacker could exploit this vulnerability to take control of an affected system.

CISA encourages users and administrators to review VMware Security Advisory VMSA-2021-0001 and apply the necessary update.

This product is provided subject to this Notification and this Privacy & Use policy.

North Korean Malicious Cyber Activity: AppleJeus

Original release date: February 17, 2021

CISA, the Federal Bureau of Investigation, and the Department of the Treasury have released a Joint Cybersecurity Advisory and seven Malware Analysis Reports (MARs) on the North Korean government’s dissemination of malware that facilitates the theft of cryptocurrency—referred to by the U.S. Government as “AppleJeus.”

The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA.

CISA encourages users and administrators to review the following resources for more information.

This product is provided subject to this Notification and this Privacy & Use policy.

Google Releases Security Updates for Chrome

Original release date: February 17, 2021

Google has released Chrome version 88.0.4324.182 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CISA encourages users and administrators to review the Chrome Release and apply the necessary updates.

This product is provided subject to this Notification and this Privacy & Use policy.

Cisco Releases Security Updates for AnyConnect Secure Mobility Client

Original release date: February 18, 2021

Cisco has released security updates to address a vulnerability in Cisco AnyConnect Secure Mobility Client. An attacker could exploit this vulnerability to take control of an affected system.

CISA encourages users and administrators to review Cisco Security Advisory cisco-sa-anyconnect-dll-hijac-JrcTOQMC and apply the necessary updates.

This product is provided subject to this Notification and this Privacy & Use policy.

Cisco Releases Security Updates for AnyConnect Secure Mobility Client

Original release date: February 18, 2021

Cisco has released security updates to address a vulnerability in Cisco AnyConnect Secure Mobility Client. An attacker could exploit this vulnerability to take control of an affected system.

CISA encourages users and administrators to review Cisco Security Advisory cisco-sa-anyconnect-dll-hijac-JrcTOQMC and apply the necessary updates.

This product is provided subject to this Notification and this Privacy & Use policy.

Encounter in the Dark Web – Meet the Hackers!

Date: 25 March 2021

Time: 13:00 – 15:00 GMT

Price: $350

Description:

You’ll meet real, top, Black-Hat hackers who have tested, breached and compromised top industry systems and lived to talk about it. You will be shown the hacker threat landscape as well as real-world examples and cases of actual attacks carried out by the hackers. We will discuss the motivations for cyber-attacks, types of attacks, the future of cybersecurity and how artificial intelligence is going to shape our post-COVID world.

Key Discussion Points:

  • Personal stories from real hackers
  • Hacker motivation, communication, and community
  • Choice of target companies
  • Role of Artificial Intelligence in hacking
  • The Dark Web
  • Future of hackers and hacking in a post-COVID-19 world

Who Should Attend

  • CEOs/CTOs/CIOs/CISOs
  • Non- IT Professionals
  • IT Professionals
  • Management Executives
  • Business Analysts

Speakers:

Jake Leslie Davis

Hacker

He was a member of the hacker group ‘Anonymous’ and was arrested and convicted of a number of infractions including unauthorised computer access and assisting criminal activity amongst other offences. After serving his time he now informs a wide audience about the ‘hacker culture’, cyberwarfare, psychology of hackers, the nuances of hacking and the future of cybersecurity.

Jamie Woodruff

Hacker

He entered the public eye when he successfully hacked Facebook as part of a competition. He has since uncovered security issues in numerous high-profile operations. He finds existing exploits by infiltrating companies, for example, impersonating a Domino’s pizza delivery boy at a large financial institution and gaining access to their server room via pick-locking.

Dr. Meera Sarma

(PhD, FHEA) – EXPERT ACADEMIC

Dr. Meera Sarma has over 20 years of experience in researching hackers. She holds a PhD (on how hackers innovate) in Information Systems, from Royal Holloway, University of London, UK. She has worked with Governments, the police. and a number of public and private sector organisations on profiling hackers, social engineering, cyber terrorism, policy development and data protection.

Dr. Thomas Matheus

(PhD, FHEA) – CONVENER

Dr. Thomas Matheus has over 27 years of management, consulting, research and higher education experience. He holds a PhD from Warwick University, UK. Dr. Matheus has published on hackers, from a management perspective. Most recently, he has published on Cybersecurity and AI for developing economies.

Grant Newton

Executive BoD

Grant has vast management experience in an Executive Director capacity within a number of medium to large-scale healthcare, insurance and information technology enterprises from setup to day-to-day management. Executive positions previously held include: Chief Executive Officer and Principal Officer of CAMAF (Chartered Accountant’s Medical Aid Fund), Group Chief Executive and Executive Group Board Chairman of the Eternity Group and Group CEO of Sanlam Healthcare.

He holds an MBA from Oxford University and is currently enjoying the challenges of a DBA programme through the University of Liverpool.

Juan Piacquadio

CIO

Juan is a digital transformation and business growth executive with over 20 years’ experience in the technology space and has led organisations across the US, EMEA, APAC and LATAM regions. This includes roles at Siemens, NEC, HP, NCR, St Jude Medical and Skanska. He is currently the CIO of Quarles Petroleum and a member of Cystel’s board of directors.

While he is a thought leader and keynote speaker in the areas of cybersecurity, enterprise agility and data analytics; he is also a member of the adjunct faculty at California Baptist University, Colorado Christian University and Columbia International University.

Juan holds an MBA from the University of La Verne and a MS in IT from Azusa Pacific University. He is a published author and business administration doctoral candidate at the University of Liverpool, UK

Encounter in the Dark Web – Meet the Hackers!

You’ll meet real, top, Black-Hat hackers who have tested, breached and compromised top industry systems and lived to talk about it. You will be shown the hacker threat landscape as well as real-world examples and cases of actual attacks carried out by the hackers. We will discuss the motivations for cyber-attacks, types of attacks, the future of cybersecurity and how artificial intelligence is going to shape our post-COVID world.