The Snowden Files: Unlocking The Truth Beneath the Surface

Weekly Cybersecurity Roundup: Analysis of Snowden Files, Yubico Goes Public, Election Hacking

Introduction

As we navigate the ever-evolving landscape of cybersecurity, it is imperative to stay informed about both prominent and lesser-known developments. In this weekly cybersecurity roundup, we provide a curated collection of noteworthy stories that delve into various aspects of internet security. This week’s stories encompass a range of topics, including updates to security platforms, quantum threats, election hacking, and data breaches.

Google Unifies SIEM and SOAR Solutions

Google has announced an update to its Chronicle Security Operations platform, integrating its Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solutions into a single unified platform. By partnering with Mandiant, the platform natively integrates with attack surface management technology, allowing organizations to retain and analyze data at scale, facilitating faster threat identification and investigation. This development signifies Google’s commitment to bolstering the cybersecurity capabilities of organizations.

Open Systems Provides OT Firewall Service

Swiss managed secure access service edge (SASE) services provider, Open Systems, has made its OT (Operational Technology) firewall service generally available. This service enables organizations to monitor IIoT (Industrial Internet of Things) traffic, providing them with enhanced visibility and control over their networks. By identifying and remediating malicious attacks, Open Systems contributes to strengthening the overall security posture of organizations in the face of emerging threats.

Signal Protocol Enhances Quantum Resilience

Signal, an encrypted messaging service, has taken steps to improve the resilience of its Signal Protocol against quantum computing threats. The protocol, which provides end-to-end encryption for private communication, was upgraded to PQXDH from X3DH specification. This upgrade requires attackers to break both the elliptic curve key agreement protocol X25519 and the post-quantum key encapsulation mechanism CRYSTALS-Kyber to compute the shared secret used in a private communication. By fortifying their encryption, Signal demonstrates a proactive approach towards mitigating quantum threats.

Election Security Research Forum

This week, the IT-ISAC (Information Technology-Information Sharing and Analysis Center) hosted the Election Security Research Forum, a pilot event aimed at enhancing the security of US elections. Participating election technology manufacturers provided security researchers with access to new hardware and software under the principles of coordinated vulnerability disclosure. By promoting collaboration between researchers and manufacturers, this event aims to identify and address vulnerabilities in election systems, ultimately safeguarding the democratic process.

Yubico Goes Public on Nasdaq

Swedish hardware security keys manufacturer, Yubico, has made its debut on the Nasdaq First North Growth Market in Stockholm. With an initial valuation of $800 million, Yubico’s entry into the public market highlights the increasing significance of hardware security solutions in the realm of cybersecurity. This milestone represents a significant moment for Yubico and the broader industry.

Pizza Hut Australia Data Breach

Hacking group ShinyHunters claimed to have breached the personal information of approximately 1 million Pizza Hut Australia customers. However, Pizza Hut Australia has reassessed the impact and has stated that less than 200,000 individuals were affected. The compromised data includes names, addresses, phone numbers, email addresses, and masked credit card information. This incident underscores the ongoing need for organizations to prioritize robust data protection measures and remain vigilant in the face of evolving cyber threats.

Florida Man Sentenced for BEC Scheme

A Florida man, Mustapha Raji, has been sentenced to three years in prison and ordered to pay over $700,000 in restitution for his participation in a $1.7 million business email compromise (BEC) and money laundering scheme. The scheme targeted a hedge fund founder in New York. This case serves as a stark reminder of the financial and legal consequences associated with cybercrime. Prosecuting such individuals is crucial for deterring future cybercriminal activities.

New Revelations from Snowden Files

Researcher Jacob Appelbaum’s PhD thesis has revealed new information from the Snowden files, shedding light on alleged backdoors in CPUs produced by semiconductor company Cavium. The thesis also highlights the NSA’s hacking of Russia’s SORM lawful interception system. These revelations underscore the significance of whistleblowing and the role it plays in uncovering potential abuses of power. They also ignite ongoing debates about the balance between national security and personal privacy.

ShroudedSnooper Targets Telecom Providers in the Middle East

A threat actor named ShroudedSnooper has been observed using the new HTTPSnoop backdoor to target telecommunications providers in the Middle East. This malware exploits Windows HTTP kernel drivers to execute specific incoming requests and their contents. Additionally, the threat actor employs the PipeSnoop implant, which can execute arbitrary shellcode received from a named pipe. This incident highlights the constant need for robust cybersecurity defenses, particularly in critical industries.

Israeli Spyware Exploits Ad Systems

Israeli software maker Insanet has allegedly developed a tool called Sherlock, which exploits online advertisements to spy on individuals. According to reports, this spyware can infect Windows, Android, and iOS devices and has reportedly been sold to a totalitarian regime. The emergence of such software raises important ethical questions surrounding surveillance and the responsibilities of governments and companies to protect individuals’ privacy.

1,200 Organizations Impacted by MOVEit Hack

The number of organizations impacted by the May 2023 MOVEit hack has now surpassed 1,197, with over 56 million individuals affected. Several healthcare organizations in North Carolina have also fallen victim to attacks via technology firm Nuance, which is owned by Microsoft. This data breach highlights the importance of secure data management practices and the need for organizations to continually evaluate and enhance their cybersecurity measures.

Conclusion

The stories covered in this week’s cybersecurity roundup underscore the ever-present and quickly evolving nature of cyber threats. From advancements in security platforms to emerging quantum threats and data breaches, organizations must remain vigilant and proactive in protecting themselves and their stakeholders. Additionally, debates surrounding surveillance, privacy, and the ethics of cybersecurity persist, requiring continued discussions and considerations. By staying abreast of these developments and taking proactive measures, organizations can navigate the cybersecurity landscape with resilience.

Sources:

1. Google Chronicle Security Operations platform unifies SIEM and SOAR
2. Open Systems makes OT firewall service generally available
3. Signal Protocol hardened against quantum threats
4. Election hacking at pilot event
5. Yubico starts trading on Nasdaq in Stockholm
6. Pizza Hut Australia hacked
7. Florida man sentenced to prison for BEC scheme
8. New revelations from the Snowden files
9. ShroudedSnooper targeting telecom providers in the Middle East
10. Ad systems exploited by newly uncovered Israeli spyware
11. 1,200 organizations hit by MOVEit hack