Patrick Coyle @Pjcoyle@social.cleverlibre.org
Joined Oct 2022
CSB Update on 2021 Yenkin-Majestic Plant Explosion and Fire – Good information – CSB falling further behind on completing open investigations – https://tinyurl.com/4pytdctm #CSB
Bills Introduced – 12-14-22 – 68 bills – HR 9533, cybersecurity roles in DHS report – https://tinyurl.com/kbnbkrww #Legislation
CFSN Detailed Analysis - Substack Daily Update – 12-14-22 – Free Content - https://tinyurl.com/2v2xvsfe
Just picked up this message to me on LinkedIn:
"Hi there Patrick! My name is Abby and I'm an Enrollment Services Advisor at the University of Cincinnati Online. Based on your interests and current role, I thought you might be interested in our Master of Science in Cosmetic Science."
Someone has really failed to look at my profile on LinkedIn or any of my publicly available writing. I have never expressed an interest in cosmetic science..... What a waste of time.
House Accepts Senate Amendment to HR 7077 – USFA Fire Investigations – https://tinyurl.com/4atrwxdk #Legislation
Two CSB Nominations Confirmed in Senate – Sandoval to be a Board Member for five years – Owens to be Chair for five years – https://tinyurl.com/2saeuv8b #CSB
Senate Begins Consideration of House Amendment to HR 7776 – FY 2023 NDAA – No votes yet scheduled – Manchin energy review amendment may get vote – https://tinyurl.com/2une6w7x #Legislation #NDAA
House to Take-up Amendment to HR 1437 – 1 Week Continuing Resolution – Mostly clean CR – Does add an extension of a sunset provision for DHS/OMB cybersecurity IDS reporting requirement -
Review – HR 9107 Introduced – DMV Information Sharing – Would require State DMVs to share vehicle registration data with federal government – Short version - https://tinyurl.com/4sn9b7ab #Legislation
HR 9107 Introduced – DMV Information Sharing – Would require State DMVs to share vehicle registration data with federal government – https://tinyurl.com/2s5b6ehy #Legislation
Short Takes – 12-13-22 – Medical cybersecurity – Short term CR – Welding research – 118th Cybersecurity - https://tinyurl.com/4bcy96b9
HR 8806 Cosponsor Added – Healthcare Cybersecurity – Too late in the session but it would provide the influence to see the bill considered in Committee – https://tinyurl.com/mrxek3sp #Legislation
Review - 3 Advisories Published – 12-13-22 – NCCIC-ICS control system security advisories for products from Contec, Schneider Electric, and ICONICS/Mitsubishi – Down-the-rabbit-hole look at secure control systems – Short version – https://tinyurl.com/3pb48vbw #icsSecrutiy
Patrick Coyle
boosted
Q&A from
https://haqueers.com/@Rairii/109507917782602234
> what's the OEM who signed this driver through MS?
Here's that info, I think. The IOCs for files related to this story are on Github at https://github.com/sophoslabs/IoCs/blob/master/Troj_Agent-BJJB.csv
Patrick Coyle
boosted
I want to give a shoutout to #Microsoft who took our report seriously and busted ass to get the work done that will prevent these kernel-mode drivers from continuing to load in Windows computers, after they install today's Patch Tuesday (2022-12) update. This is their advisory.
https://msrc.microsoft.com/update-guide/vulnerability/ADV220005
At the time we were working on this, @SophosXOps didn't know that both #Mandiant and #SentinelOne were also working on the same things, from different angles. We found out this morning that they also published blog posts about this discovery. We're all on the same team here, fighting cybercriminals, so I'm grateful that we all stumbled upon the same thing in roughly the same timeframe and that we all engaged in an ethical notification process, helping Microsoft protect everyone, everywhere, from these threats. Good job, all. These companies have an amazing reputation.
Here are their blogs as well.
https://www.mandiant.com/resources/blog/hunting-attestation-signed-malware
3 Advisories Published – 12-13-22 – NCCIC-ICS control system security advisories for products from Contec, Schneider Electric, and ICONICS/Mitsubishi – Down-the-rabbit-hole look at secure control systems - https://tinyurl.com/5n82myxz Subscription required #iscSecurity
Schneider published 3 new advisories and 8 updates https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp
Patrick Coyle
boosted
If you are new here in #cybersecurity, (welcome new influx!) some great hashtags to follow or take a peek at might be: #ThreatIntel #GetFediHired #CyberMentoringMonday #MastodonTips - just a few places to start! There are also almost daily fun photo and post themes, so watch the hashtags on your server and federated!
Siemens published 20 new advisories and 20 updates https://new.siemens.com/global/en/products/services/cert.html
Joined Oct 2022
