Coffee Talk with SURGe: 2023-APR-18 NSO Group, LockBit macOS Encryptors, AI in CTI, MSFT Taxonomy
Grab a cup of coffee and join Ryan Kovar, Mick Baccio, and Audra Streetman for another episode of Coffee Talk with SURGe. The team from Splunk will discuss the latest security news, including:
- Citizen Lab releases report on NSO Group's new zero-click exploit chains:
- https://citizenlab.ca/2023/04/nso-groups-pegasus-spyware-returns-in-2022/
- LockBit ransomware encryptors found targeting Mac devices:
- https://www.bleepingcomputer.com/news/security/lockbit-ransomware-encryptors-found-targeting-mac-devices/
- Did someone really hack into the Oldsmar, Florida, water treatment plant? New details suggest maybe not.
- https://cyberscoop.com/water-oldsmar-incident-cyberattack/
Mick and Ryan competed in a 60 second charity challenge about how generative artificial intelligence could be used in cyber threat intelligence, with proceeds benefiting the ACLU.
The trio also discussed Microsoft's new threat actor naming taxonomy and the role of attribution in cyber threat intelligence.
https://www.microsoft.com/en-us/security/blog/2023/04/18/microsoft-shifts-to-a-new-threat-actor-naming-taxonomy/