Sven Weizenegger

OpenAI recently disclosed that malicious actors from Russia, China, and Iran had abused its AI tools for deceptive tactics, including generating large amounts of social media comments and transforming news articles into propaganda. This is the first report of its kind from a major AI supplier, highlighting the use of generative AI technologies by problematic actors to amplify their influence efforts. Meta also released a similar report, revealing the dismantling of covert operations with connections to China and Iran, and the use of AI-generated content. The concern over AI's potential to disrupt democratic politics and national security is significant, especially in an election year. While the impact of these influence campaigns may have been limited, the use of AI lowers the cost of conducting propaganda campaigns. However, the dissemination of AI-generated content still relies on authentic human engagement, and influential real accounts currently have a greater potential for impact than AI-driven fakes. (I don’t speak German, AI summary) This isn’t breaking news for most of us, but the more empirical evidence brought to light will hopefully allow others to also see what’s been happening for the last decade+: a psyops campaign targeting democracy. The most apparent was leading up to the 2016 election and has continued to be wildly successful. Do you remember the term: Leaflets? Origins and Use: Propaganda leaflets date back to the early 20th century and were used extensively during both World Wars. Governments and military forces would drop leaflets from airplanes or distribute them through other means to convey messages to enemy troops and civilians. Effectiveness: In the early days, leaflets were effective because they were one of the few ways to reach large populations directly. They were used to demoralize enemy troops, encourage defection, spread misinformation, and boost the morale of friendly forces. The effectiveness varied, but well-crafted messages could significantly impact the enemy’s will to fight or the population’s perception of the war. Content: These leaflets often contained a mix of true information and falsehoods, emotional appeals, and calls to action. They were designed to be simple, persuasive, and often played on existing fears and anxieties. Sound familiar? Pay attention, recognize the polarity, pick up on extreme biases. If it’s driving an emotional response it’s probably propaganda. Stay frosty! https://lnkd.in/gch2MZyS

12

5 Kommentare

🇩🇪👺In Germany, damage from cyber crime in 2023 exceeded €205 billion. "The total damage to German companies recorded by the federal information technology association Bitkom in 2023 amounted to €205.9 billion" - says the report presented in Wiesbaden by the head of the German Interior Ministry, Nancy Feser. Allegedly, the number of offenses committed from abroad has increased by 30% in cyberspace. https://lnkd.in/ddhbJqGb 👆For comparison, the new figure is less than the previous anti-record in 2021 - €223.5 billion. 👮 According to the minister, current statistics are supposedly the 🧊"tip of the iceberg", since a police report is filed only in 1 out of 10 cases. The head of the Federal Office for Criminal Affairs of Germany, Holger Münch, said that attackers are increasingly using artificial intelligence to compose competent texts for phishing mailings. "🕵️Thanks to the use of chatbots, these texts contain virtually no language or factual errors. This makes it more difficult for users to recognize the threat." #germany #cybercrime #security #cybersecurity #arg

1

Your DORA - obligations based on what BafFin published: 1. Identification ICT risk, cyber threats and vulnerabilities 2. Establishment a comprehensive digital operational testing program 3. Gathering information on cyber threats and cyber-attacks for analysing their impact on digital operational resilience 4. ICT risk management 5. Cyber threat recording and classify them CrowdStrike can help and support you regarding DORA. https://lnkd.in/dSjKaiB4

21

1 Kommentar

"No, LLM Agents can not Autonomously Exploit One-day Vulnerabilities" Weil auch hier die Tage diese Meldung rumgeisterte - jemand hat sich die Studie mal genauer angesehen. https://lnkd.in/gghXmys8 '[...] The papers conclusion is that agents is capable of "autonoumously exploiting" real world systems implies they are able to find vulnerabilities and generate exploits for those vulnerabilities as they are described. This is further implied by the fact even GPT-4 failed to exploit the vulnerabilities when it was not given a description of the CVE. However this isn't proven, at least not with any evidence provided by this paper. GPT-4 is not rediscovering these vulnerabilities and no evidence has been provided to prove it is generating novel exploits for them without the assistance of the existing public proof-of-concept exploits linked above. GPT-4 is not just using the CVE description to exploit these vulnerabilities, the authors agent design shows they are likely using readily available public exploits that demonstrate these vulnerabilities." [...]'

1

Stronger together – alliances for cybersecurity 💪 🙏 As the economy and society become more interconnected, the attack surface for cyber attacks is growing. Defending modern attacks with traditional protective measures is becoming increasingly difficult. My appeal is that companies should form alliances to work together to build the most resilient infrastructure possible. Find out more about my proposal in the latest guest article in the Security-Insider. Lukas Winklmann, Benedikt Ernst, Karin Schönwetter, Bryan Sartin, Kris Lovejoy, Jimmy Nilsson, Mareike Tan, Katharina Ebner, Marcus Rolfes, Annette Fassnacht, Jochen Werner, Markus Lyschik

35

1 Kommentar

...and we just announced another alliance partner 🚀 🥂 Kyndryl partners with Rubrik to launch new cyber resiliency services, enhancing data security and recovery for healthcare and finance industry organizations. As part of the strategic alliance, Rubrik collaborated with Kyndryl to co-develop and launch Kyndryl Incident Recovery with Rubrik. This fully managed ‘as-a-service’ solution provides customers with data protection and cyber incident recovery, backup, and disaster recovery for cloud and on-premises workloads. Disaster Recovery: Accelerates data, application and IT infrastructure recovery following an outage with continuous data replication. Businesses can then recover from disasters and the ever-growing threats of cyber incidents. More on that? Here: https://lnkd.in/erwin7PU

14

🔒 Our interconnected world faces constant cyber threats. Recent revelations from Czechia and Germany highlight the persistent challenge posed by cyber espionage campaigns orchestrated by state-linked actors. The Russia-linked group APT28, known for its sophisticated tactics, exploited a Microsoft Outlook vulnerability (CVE-2023-23397) to target political entities, state institutions, and critical infrastructure. This underscores the urgent need for robust cybersecurity measures to safeguard our democratic processes and national security. NATO and the EU have condemned these malicious activities, emphasizing the threat they pose to Allied security and democratic values. The UK and US have echoed these concerns, reaffirming their commitment to defending against destabilizing cyber behavior. Furthermore, coordinated law enforcement efforts have disrupted a botnet associated with APT28, shedding light on the group's extensive network infrastructure. However, challenges remain in fully mitigating these threats, as evidenced by ongoing DDoS attacks and hacktivist activity targeting critical infrastructure sectors. As we navigate these evolving cyber threats, collaboration between government agencies, private sector entities, and cybersecurity experts is essential to fortify our defenses and uphold the integrity of our digital ecosystems. #Cybersecurity #APT28 #ThreatMitigation #Collaboration source: https://lnkd.in/gtJEtGYs

4

An interesting story (with good insights from Sarah Fluchs) about car models (VW Up and T6.1 as well as three Porsche models) discontinued by their manufacturing because they could not meet the UNECE R 155 transitional regulation. Since the core of this is to "demonstrate that cyber security was adequately considered", the moral of the story is simple: whether it's apps, cars, IoT, AI models, etc., secure by design is a must. #securebydesign #security

8

Update: It has finally been confirmed that the requests come from Microsoft Teams. collector.azure.microsoft[.]scloud A collector.azure.microsoft[.]scloud AAAA collector.azure.eaglex.ic[.]gov A collector.azure.eaglex.ic[.]gov AAAA After the latest Windows 11 Update KB5037771, some users report a couple of strange domains in telemetry connections, many cybersecurity network users have been monitoring a pair of suspicious domains. https://lnkd.in/eTiuPHeA https://lnkd.in/ePjMjhfU The article doesn't delve into technical specifics, but we can infer that the observed traffic originates from Windows services like "Connected User Experiences and Telemetry." These services are known to send diagnostic data to Microsoft, but the volume and frequency of the traffic described in the article raise suspicions. All signs point to these domains with "collector.azure" subdomains being involved in unauthorized monitoring activities by the United States government. collector.azure.eaglex.ic[.]gov collector.azure.microsoft[.]scloud I'd recommend blocking those cheeky domains (Windows 11 Update KB5037771). 😂 collector.azure.eaglex.ic[.]gov@9.9.9.10 (Default):  h ic.gov. 2231 IN SOA a1-22.akam.net. monrpt.cia.gov. 2013122202 7200 3600 2419200 14400 This script provides a detailed and technical method for monitoring program activity that accesses specific domains related to government espionage, ensuring any suspicious access is detected and logged for further analysis. https://lnkd.in/eY4kQsUe #CyberSecurity #DataPrivacy #NetworkSecurity #Spyware #Microsoft #Windows11 #GovernmentSurveillance #Azure #CloudSecurity #PrivacyThreats #OnlineSafety #InternetSafety #DataProtection #TechNews

2

What does paranoia smell like? During the Cold War, the Stasi, Communist East Germany's secret police, maintained "scent banks" – odor samples surreptitiously collected from suspects, typically political dissidents or "unreliables," to enable tracking them with trained dogs at a future date. Sounds dystopian, doesn't it? Well, say hello to Microsoft's latest "innovation" – Windows Recall, where your scent is about the only thing *not* being collected every second of every day. Imagine a world where every action on your system is recorded under the guise of "user experience enhancement." Don't get me started on the name, either: "Recall." As in, I *recall* a time we didn't mindlessly forgo privacy for the promise of convenience. To paraphrase the famous Ben Franklin quote: "Those who would give up essential Privacy, to purchase a little temporary Convenience, deserve neither." Windows Total Recall: We'll remember it for you wholesale. #privacy #WindowsRecall #surveillance #Microsoft

30

1 Kommentar

Shaping the cybernation- we had the honor to discuss actions against cybercrime ( 200 billion euro damage per year for the German economy) with Claudia Plattner, president of the Bundesamt für Sicherheit in der Informationstechnik (BSI) (Federal Office for Information Security). We need large scale and synchronized actions to mitigate the risk. Thanks to Norbert Pohlmann Lars Steffen Emma Wehrwein and Hauke Timmermann for sharing insights around networks, artificial intelligence, digital identities, e-Mail security, digital ecosystems and many more topics. Stay tuned for more information on the journey for a resilient cybernation! eco - Verband der Internetwirtschaft e.V. #cybernation #resilience #safeinternet

77

1 Kommentar

Watch our Eurosatory seminar, Cyberwar at the Tactical Edge! Today’s military vehicles and weapon systems are highly digital. With digitalization comes increased vulnerability to cyberattacks. Cyberattacks could be launched at wartime or planted years in advance. How can cyberattacks affect military vehicles and weapon systems? Is there a need for new requirements related to cybersecurity? These were some of the topics discussed in a panel discussion between Dan Lindell BAE Systems Hägglunds AB, Matilda Karlsson MilDef, Ron Verbossen Secura and myself Clavister. You can now watch the recorded seminar here: https://lnkd.in/d-Fxm6Mm

60

5 Kommentare

Monday Afternoon Insights: Battling Ransomware and Data Extortion As we kick off a new week, the persistent threat of ransomware and data extortion remains a critical issue. The 2023 Cybercrime Report by the Bundeskriminalamt (BKA) highlights a worrying increase in these types of attacks, underscoring the need for robust defenses. Ransomware remains a primary cyber threat, with damages from data extortion surging by 50.5% to 16.1 billion euros in 2023. Cybercriminals are constantly evolving their tactics, using sophisticated ransomware variants to lock down critical data and demand exorbitant ransoms. At OPSWAT, we have a proven track record of combating advanced cyber threats. Our MetaDefender platform is engineered to provide comprehensive protection against ransomware and data extortion, safeguarding your organisation's critical assets utilising: - Deep Content Disarm and Reconstruction (CDR): Strips active content from files, ensuring that only safe, sanitized files enter your network. - Multi-Scanning: Employs over 30 anti-malware engines to detect and mitigate threats from multiple vectors, enhancing overall security. - Next-Gen Sandbox Technology: Analyzes and detects sophisticated threats in a controlled environment, identifying malicious behavior without compromising your network. Ransomware and data extortion are not threats to be taken lightly. Protect your organization with OPSWAT's MetaDefender today. Let's collaborate to secure your critical infrastructure and ensure a resilient digital environment. Reach out to learn more about how OPSWAT can defend your organization against ransomware and other cyber threats. You can simply book a quick call with me using the "Book an appointment" link right under my name. #CyberSecurity #RansomwareProtection #DataSecurity #OPSWAT #MetaDefender #ITSecurity Holger Christoph Vigithan Michael Dirk Martin Christian https://lnkd.in/egYK2hZn

4

Social engineering is rapidly becoming the biggest threat to organizations in 2024. According to the SECURNITE GmbH team, social engineering attacks prey on human behavior and are a growing trend in cyberattacks. In fact, SECURNITE's previous survey showed that viewers agree with our team. (link to the survey: https://lnkd.in/e7_rSpPB) Spoofing is the latest trend in social engineering and is used to commit fraud, manipulate people into disclosing confidential information, and bypass cybersecurity measures. Spoofing attacks are often done via E-Mail, website, or phone calls. It is more important than ever to be vigilant and aware of suspicious phone calls. What steps are you taking to protect your organization from social engineering attacks? #spoofing #cybersecurity #socialengineering #informationsecurity #cyberattack

8

#German major opposition party hit by #CyberAttack #InfoSec #CyberSecurity #Security #CSO #CISO #CEO #CLO #CRO #CIO #CTO #CMO #Cyber #BSI #BMI #Bund #Hacking #attribution is always hard to impossible, but would love to know who's behind this one, as the elections for the EU parliament are coming in days. #CyberWar #Infiltration #ElectionSecurity #CDU https://lnkd.in/gsCQ4Ndx

4

2 Kommentare

Very interesting scenario. This case clearly underlines the growing impact of security regulation in product developement lifecycle and market dynamics. It also highlights a need for clearer and timely communication of such regulatory impacts by the governing body. Thanks for sharing Sarah Fluchs #securitybydesign

1