{"id":19626,"date":"2024-10-09T09:59:36","date_gmt":"2024-10-09T13:59:36","guid":{"rendered":"https:\/\/www.elteni.com\/?p=19626"},"modified":"2024-10-09T09:59:36","modified_gmt":"2024-10-09T13:59:36","slug":"2024-october-newsletter","status":"publish","type":"post","link":"https:\/\/www.elteni.com\/insights\/?p=19626","title":{"rendered":"2024 October Newsletter"},"content":{"rendered":"

ELTENI’S CYBER SCOOP<\/h1>\n

Latest News<\/h3>\n

In this newsletter, we highlight CISA\u2019s plan to align cybersecurity initiatives for federal agencies, continued enforcement of cyber-crimes targeting financial services, targeted attacks on US infrastructure American Water Works.<\/p>\n

REGULATORY CORNER<\/h1>\n

CISA Releases Plan to Align Operational Cybersecurity Priorities for Federal Agencies<\/strong><\/p>\n

The Cybersecurity and Infrastructure Security Agency (CISA) published the Federal Civilian Executive Branch (FCEB) Operational Cybersecurity Alignment (FOCAL) Plan. As the operational lead for federal cybersecurity, CISA uses this plan to guide coordinated support and services to agencies, drive progress on a targeted set of priorities, and align collective operational defense capabilities. The end result is reducing the risk to more than 100 FCEB agencies.<\/em><\/p>\n

The FOCAL Plan was developed for FCEB agencies, but public and private sector organizations should find it useful as a roadmap to establish their own plan to bolster coordination of their enterprise security capabilities.\u00a0 The priority areas for FCEB agencies are Asset Management, Vulnerability Management, Defensible Architecture, Cyber Supply Chain Risk Management (C-SCRM), Incident Detection and Response.<\/em><\/p>\n

Notes<\/h3>\n

The standardization of cybersecurity focus areas could drive a convergence of efforts in managing cyber risk. By coordinating efforts across organizations, this alignment may result in more efficient and effective risk mitigation, streamlined reporting, and enhanced transparency. While individual organizations may have varying requirements and risk tolerances, identifying common areas of focus ensures that everyone is speaking the same language and equally committed to preventing and resolving cyber incidents.<\/p>\n

CISA Releases Plan to Align Operational Cybersecurity Priorities | CISA<\/a><\/p>\n

ENFORCEMENT NEWS<\/h1>\n

British National Arrested, Charged for Hacking US Companies<\/strong><\/p>\n

The Department of Justice and the SEC announced charges against a British national for hacking into the systems of five US companies.\u00a0 The man, Robert Westbrook, 39, of London, was arrested in the UK and is awaiting extradition to the US to face computer, securities, and wire fraud charges.<\/em><\/p>\n

\u00a0<\/em>According to court documents, between January 2019 and May 2020, Westbrook hacked into the email accounts of corporate executives at five US companies, by resetting their passwords.\u00a0 The complaint also alleges that\u00a0Westbrook attempted to conceal his identity by using VPN services, resorting to anonymous email accounts, and utilizing bitcoin.<\/em><\/p>\n

Notes<\/h3>\n

This news underscores the ongoing efforts to identify, track, and apprehend cybercriminals. The incident highlights the prevalence of Business Email Compromise (BEC) within the broader landscape of cybersecurity threats and illustrates how email remains a key vulnerability for accessing sensitive data. It’s critical not only to implement robust cybersecurity measures, such as strong access controls and email protections, but also to practice good data hygiene\u2014ensuring that sensitive information stored in emails is properly safeguarded through measures like encryption at rest and in transit. These steps help mitigate the risk of data loss in the event of a breach.<\/p>\n

British National Arrested, Charged for Hacking US Companies | Security Week<\/a><\/p>\n

CYBER NEWS<\/h1>\n

Kaspersky deletes itself, installs UltraAV antivirus without warning | Bleeping Computer<\/a><\/u><\/p>\n

President Biden issued an official ban on the sale and software updates for Kaspersky in the US beginning September 29, 2024.\u00a0 In early September, Kaspersky emailed customers, assuring them they would continue receiving “reliable cybersecurity protection” from UltraAV (owned by Pango Group) after Kaspersky stopped selling software and updates for U.S. customers.\u00a0 However, those emails failed to inform users that Kaspersky’s products would be abruptly deleted from their computers and replaced with UltraAV without warning.<\/p>\n

Fortinet confirms data breach after hacker claims to steal 440GB of files | Bleeping Computer<\/a><\/p>\n

Fortinet is one of the largest cybersecurity companies in the world, selling secure networking products like firewalls, routers, and VPN devices.\u00a0 The cybersecurity giant has confirmed it suffered a data breach after a threat actor claimed to steal 440GB of files from the company’s Microsoft SharePoint server.\u00a0 The threat actor, known as “Fortibitch,” claims to have tried to extort Fortinet into paying a ransom, likely to prevent the publishing of data, but the company refused to pay.<\/p>\n

Cyberattackers Use HR Targets to Lay More_Eggs Backdoor | Dark Reading<\/a><\/u><\/p>\n

A long-active threat group (FIN6) known for targeting multinational financial organizations has been impersonating job seekers to target talent recruiters. The method is a spear-phishing campaign spreading the “more_eggs” backdoor, which can execute secondary malware payloads.\u00a0 FIN6 appears to be “moving from posing as fake recruiters to now masquerading as fake job applicants” in a shift in tactics, Trend Micro researchers wrote in a blog post about the attacks.<\/p>\n

American Water Works reports cybersecurity incident following unauthorized hacker activity | Industrial Cyber<\/a><\/u><\/p>\n

American Water Works Company, a U.S. public utility, reported in a Securities and Exchange Commission (SEC) filing that on October 3, it discovered \u2018unauthorized activity\u2019 in its computer networks and systems, which it identified as a cybersecurity incident.\u00a0 Although American Water Works is currently unable to predict the full impact of this incident, it does not expect the incident will have a material effect on the company, its financial condition, or the results of operations.<\/p>\n

DECODE THE TERMS<\/h1>\n

SASE (Secure Access Service Edge)<\/strong> – is a cybersecurity framework that integrates network security functions (such as firewalls, secure web gateways, and zero-trust network access) with wide-area networking (WAN) capabilities, such as software-defined WAN (SD-WAN). SASE is designed to deliver these services as a cloud-based solution, offering secure and seamless access to applications, data, and services, regardless of where users or devices are located.<\/p>\n

ZTNA (Zero Trust Network Access)<\/strong> – is a cybersecurity model that provides secure remote access to an organization\u2019s applications and services based on the principle of “never trust, always verify.” Unlike traditional network access solutions (like VPNs), which grant broad access to users once authenticated, ZTNA only allows access to specific applications and resources based on strict identity verification and the least-privilege principle.<\/p>\n

\u00a0<\/strong>MAM (Mobile Application Management)<\/strong> – is a security approach focused on managing and securing individual apps on mobile devices, without needing to control the entire device.\u00a0 MAM is particularly useful in environments where employees use their personal devices for work purposes, a concept known as Bring Your Own Device (BYOD). With MAM, organizations can manage and secure corporate apps and data separately from personal apps and data, ensuring a balance between security and privacy.<\/p>\n

MDM (Mobile Device Management) –<\/strong> is a cybersecurity solution used to manage and secure mobile devices such as smartphones, tablets, and laptops within an organization’s IT infrastructure. MDM provides IT administrators with the ability to monitor, manage, and enforce security policies across all devices that access corporate data and applications.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

ELTENI’S CYBER SCOOP Latest News In this newsletter, we highlight CISA\u2019s plan to align cybersecurity initiatives for federal agencies, continued enforcement of cyber-crimes targeting financial services, targeted attacks […]<\/p>\n","protected":false},"author":3,"featured_media":19627,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[114,67,134,113,68,3,133,135,101,102,103,18,140,136,47,17,25,106,137,89,138,90,127,19],"tags":[],"class_list":["post-19626","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-alternative-asset-management","category-awareness","category-breaches","category-business-email-compromise","category-cloud","category-cyber","category-finra","category-ftc","category-hackers","category-hedge-fund","category-investment-adviser","category-microsoft","category-newsletter","category-nydfs","category-ocie","category-password","category-pii","category-private-equity","category-private-funds","category-regulatory","category-rules","category-sec","category-technology","category-vulnerability"],"yoast_head":"\n2024 October Newsletter - Insights<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.elteni.com\/insights\/?p=19626\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"2024 October Newsletter - Insights\" \/>\n<meta property=\"og:description\" content=\"ELTENI’S CYBER SCOOP Latest News In this newsletter, we highlight CISA\u2019s plan to align cybersecurity initiatives for federal agencies, continued enforcement of cyber-crimes targeting financial services, targeted attacks […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.elteni.com\/insights\/?p=19626\" \/>\n<meta property=\"og:site_name\" content=\"Insights\" \/>\n<meta property=\"article:published_time\" content=\"2024-10-09T13:59:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2024\/10\/Thumbnail.png\" \/>\n\t<meta property=\"og:image:width\" content=\"817\" \/>\n\t<meta property=\"og:image:height\" content=\"1088\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"dtuck\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"dtuck\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626\"},\"author\":{\"name\":\"dtuck\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/#\\\/schema\\\/person\\\/14c8aed9360eb93e744ed177fab3c94b\"},\"headline\":\"2024 October Newsletter\",\"datePublished\":\"2024-10-09T13:59:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626\"},\"wordCount\":1072,\"image\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/Thumbnail.png\",\"articleSection\":[\"Alternative Asset Management\",\"Awareness\",\"Breaches\",\"Business Email Compromise\",\"Cloud\",\"Cyber\",\"FINRA\",\"FTC\",\"Hackers\",\"Hedge Fund\",\"Investment Adviser\",\"Microsoft\",\"Newsletter\",\"NYDFS\",\"OCIE\",\"Password\",\"PII\",\"Private Equity\",\"Private Funds\",\"Regulatory\",\"Rules\",\"SEC\",\"Technology\",\"Vulnerability\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626\",\"url\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626\",\"name\":\"2024 October Newsletter - Insights\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/Thumbnail.png\",\"datePublished\":\"2024-10-09T13:59:36+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/#\\\/schema\\\/person\\\/14c8aed9360eb93e744ed177fab3c94b\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626#primaryimage\",\"url\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/Thumbnail.png\",\"contentUrl\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/Thumbnail.png\",\"width\":817,\"height\":1088},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=19626#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.elteni.com\\\/insights\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"2024 October Newsletter\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/#website\",\"url\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/\",\"name\":\"Insights\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/#\\\/schema\\\/person\\\/14c8aed9360eb93e744ed177fab3c94b\",\"name\":\"dtuck\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"caption\":\"dtuck\"},\"url\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?author=3\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"2024 October Newsletter - Insights","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.elteni.com\/insights\/?p=19626","og_locale":"en_US","og_type":"article","og_title":"2024 October Newsletter - Insights","og_description":"ELTENI’S CYBER SCOOP Latest News In this newsletter, we highlight CISA\u2019s plan to align cybersecurity initiatives for federal agencies, continued enforcement of cyber-crimes targeting financial services, targeted attacks […]","og_url":"https:\/\/www.elteni.com\/insights\/?p=19626","og_site_name":"Insights","article_published_time":"2024-10-09T13:59:36+00:00","og_image":[{"width":817,"height":1088,"url":"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2024\/10\/Thumbnail.png","type":"image\/png"}],"author":"dtuck","twitter_card":"summary_large_image","twitter_misc":{"Written by":"dtuck","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.elteni.com\/insights\/?p=19626#article","isPartOf":{"@id":"https:\/\/www.elteni.com\/insights\/?p=19626"},"author":{"name":"dtuck","@id":"https:\/\/www.elteni.com\/insights\/#\/schema\/person\/14c8aed9360eb93e744ed177fab3c94b"},"headline":"2024 October Newsletter","datePublished":"2024-10-09T13:59:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.elteni.com\/insights\/?p=19626"},"wordCount":1072,"image":{"@id":"https:\/\/www.elteni.com\/insights\/?p=19626#primaryimage"},"thumbnailUrl":"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2024\/10\/Thumbnail.png","articleSection":["Alternative Asset Management","Awareness","Breaches","Business Email Compromise","Cloud","Cyber","FINRA","FTC","Hackers","Hedge Fund","Investment Adviser","Microsoft","Newsletter","NYDFS","OCIE","Password","PII","Private Equity","Private Funds","Regulatory","Rules","SEC","Technology","Vulnerability"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.elteni.com\/insights\/?p=19626","url":"https:\/\/www.elteni.com\/insights\/?p=19626","name":"2024 October Newsletter - Insights","isPartOf":{"@id":"https:\/\/www.elteni.com\/insights\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.elteni.com\/insights\/?p=19626#primaryimage"},"image":{"@id":"https:\/\/www.elteni.com\/insights\/?p=19626#primaryimage"},"thumbnailUrl":"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2024\/10\/Thumbnail.png","datePublished":"2024-10-09T13:59:36+00:00","author":{"@id":"https:\/\/www.elteni.com\/insights\/#\/schema\/person\/14c8aed9360eb93e744ed177fab3c94b"},"breadcrumb":{"@id":"https:\/\/www.elteni.com\/insights\/?p=19626#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.elteni.com\/insights\/?p=19626"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.elteni.com\/insights\/?p=19626#primaryimage","url":"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2024\/10\/Thumbnail.png","contentUrl":"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2024\/10\/Thumbnail.png","width":817,"height":1088},{"@type":"BreadcrumbList","@id":"https:\/\/www.elteni.com\/insights\/?p=19626#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.elteni.com\/insights"},{"@type":"ListItem","position":2,"name":"2024 October Newsletter"}]},{"@type":"WebSite","@id":"https:\/\/www.elteni.com\/insights\/#website","url":"https:\/\/www.elteni.com\/insights\/","name":"Insights","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.elteni.com\/insights\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.elteni.com\/insights\/#\/schema\/person\/14c8aed9360eb93e744ed177fab3c94b","name":"dtuck","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","caption":"dtuck"},"url":"https:\/\/www.elteni.com\/insights\/?author=3"}]}},"_links":{"self":[{"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/posts\/19626","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=19626"}],"version-history":[{"count":0,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/posts\/19626\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/media\/19627"}],"wp:attachment":[{"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=19626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=19626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=19626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}