38 - China Changes Strategy, CISA Address House Select Committee, and Continued Focus on Critical Infrastructure (This Month In Cyber - February 2024)

Emagine The Future

Welcome to Episode 38 of Emagine The Future our 2nd of our "This Month in Cyber" series - February 2024 edition.
January Catchup (Things we missed):

• CISA, FBI, and EPA Release Incident Response Guide for Water and Wastewaste Systems Sector
• Pwn2Own 2024: EVs take on electric vehicles, vehicle chargers, operating systems, and components
• Fulton County Suffers Power Outages as Cyber Attacks Continue

Incidents & Breaches:

• China Infiltrates US Critical Infrastructure in Ramp-up to Conflict
• Ongoing Azure Compromises Target Senior Execs Microsoft 365 Apps

Regulatory & Government:

• CISA Director Jen Easterly gave her opening statement before the House Select Committee on Strategic Competition Between the United States and the Chinese Communist Party.
• SEC Rules on Cybersecurity Incident Disclosure (July 2023 + Feb 2024 Comments)
• OWASP Releases LLM AI Security and Governance Checklist V1

Events:

• Zero Trust World 2024 (threatlocker.com) February 26 - 28, 2024 Caribe Royale, Orlando, FL
• SANS 2024 in Orlando, FL | Cyber Security Training Mar. 24-49, SANS 2024, Orlando, Fla.
• 2024 USA | RSA Conference May 6-9, RSA Conference USA 2024, San Francisco, Calif.
• Black Hat Spring Trainings 2024 Black Hat Spring Training Mar 12, 2024 – Mar 15, 2024

Connect with Erik: https://www.linkedin.com/in/erik-dominguez-2589b228/
Connect with Jeremy: https://www.linkedin.com/in/jeremyfrancese/
Subscribe on YouTube: https://www.youtube.com/@EITisCyber
Connect on LinkedIn:
https://www.linkedin.com/company/emagine-it-inc-/posts/

Chapters

1. Setting The Table (00:00:00)

2. SEC Cyber Ruling - What it is and What it Means (00:00:00)

3. January Recap - What We Missed Last Month (00:07:03)

4. China's Breaches Reach Boiling Point (00:27:00)

5. Current Events Impact on Penetration Assessment & Threat Vector Analysis (00:36:00)

6. Why Allow-Listing on a Penetration Testing is Important (00:39:00)

7. Senior Execs Targeted for Microsoft 365 Logins - The Risk Beyond The Headline (00:42:22)

8. CISA Director, Jen Easterly Address House Select Committee on Strategic Competition Between the United States and the Chinese Communist Party - Regulatory Update & Analysis (00:50:00)

9. What does it mean when a hacker is "Living off the Land"? (00:52:30)

10. China's Shift in Strategy From Espionage to Pre-Positioning in Critical Infrastructure (00:55:00)

11. SEC Cyber Ruling - Overview & Analysis (00:58:00)

12. OWASP Releases V1 of their LLC AI Cybersecurity & Governance Checklist (01:02:12)

13. Cyber Events Coming Up (01:03:00)