News - New England Safety Partners, LLC

Is 85% of US Critical Infrastructure in Private Hands?

May 17, 2021 Cyber Security Ed Gardner 0

Most US critical infrastructure is run by private corporations. This has major security implications, because it’s putting a random power company in — say — Ohio — up against the Russian cybercommand, which isn’t a fair fight.

When this problem is discussed, people regularly quote the statistic that 85% of US critical infrastructure is in private hands. It’s a handy number, and matches our intuition. Still, I have never been able to find a factual basis, or anyone who knows where the number comes from. Paul Rosenzweig investigates, and reaches the same conclusion…

Friday Squid Blogging: Far Side Squid Comic

May 14, 2021 Cyber Security Ed Gardner 0

A classic.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Read my blog posting guidelines here.

Upcoming Speaking Engagements

May 14, 2021 Cyber Security Ed Gardner 0

This is a current list of where and when I am scheduled to speak:

I’m keynoting the (all-virtual) RSA Conference 2021, May 17-20, 2021.
I’m keynoting the 5th International Symposium on Cyber Security Cryptology and Machine Learning (via Zoom), July 8-…

DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized

May 14, 2021 Cyber Security Ed Gardner 0

The DarkSide ransomware affiliate program responsible for the six-day outage at Colonial Pipeline this week that led to fuel shortages and price spikes across the country is running for the hills. The crime gang announced it was closing up shop after its servers were seized and someone drained funds from an account the group uses to pay affiliates.

Ransomware Is Getting Ugly

May 14, 2021 Cyber Security Ed Gardner 0

Modern ransomware has two dimensions: pay to get your data back, and pay not to have your data dumped on the Internet. The DC police are the victims of this ransomware, and the criminals have just posted personnel records — “including the results of psychological assessments and polygraph tests; driver’s license images; fingerprints; social security numbers; dates of birth; and residential, financial, and marriage histories” — for two dozen police officers.

The negotiations don’t seem to be doing well. The criminals want $4M. The DC police offered them $100,000…

New US Executive Order on Cybersecurity

May 13, 2021 Cyber Security Ed Gardner 0

President Biden signed an executive order to improve government cybersecurity, setting new security standards for software sold to the federal government.

For the first time, the United States will require all software purchased by the federal government to meet, within six months, a series of new cybersecurity standards. Although the companies would have to “self-certify,” violators would be removed from federal procurement lists, which could kill their chances of selling their products on the commercial market.

I’m a big fan of these sorts of measures. The US government is a big enough market that vendors will try to comply with procurement regulations, and the improvements will benefit all customers of the software…

Book Sale: Beyond Fear

May 12, 2021 Cyber Security Ed Gardner 0

I have 80 copies of my 2000 book Beyond Fear available at the very cheap price of $5 plus shipping. Note that there is a 20% chance that your book will have a “BT Counterpane” sticker on the front cover.
Order your signed copy here.

Microsoft Patch Tuesday, May 2021 Edition

May 11, 2021 Cyber Security Ed Gardner 0

Microsoft today released fixes to plug at least 55 security holes in its Windows operating systems and other software. Four of these weaknesses can be exploited by malware and malcontents to seize complete, remote control over vulnerable systems without any help from users. On deck this month are patches to quash a wormable flaw, a creepy wireless bug, and yet another reason to call for the death of Microsoft’s Internet Explorer (IE) web browser.

A Closer Look at the DarkSide Ransomware Gang

May 11, 2021 Cyber Security Ed Gardner 0

The FBI confirmed this week that a relatively new ransomware group known as DarkSide is responsible for an attack that caused Colonial Pipeline to shut down 5,550 miles of pipe, stranding countless barrels of gasoline, diesel and jet fuel on the Gulf Coast. Here’s a closer look at the DarkSide cybercrime gang, as seen through their negotiations with a recent U.S. victim that earns $15 billion in annual revenue.