Eric Boger

Cybersecurity is already increasingly important in defence, as digital and decentralised warfare takes over from traditional, kinetic combat, with critical infrastructure as its prime target. I wrote a piece for Nick Lichtenberg, at Fortune, looking at what this means for the security sector, and whether we should be considered part of the defence industry rather than something that IT thinks about - you can read the piece here: https://lnkd.in/ewHZZsHq #cyberisdefence #defencetech #iotsecurity #otsecurity #embeddedsecurity #criticalinfrastructure #cyberphysicalsystems #nationalsecurity Periphery

134

3 Comments

New Scattered Spider Advisory: The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), Royal Canadian Mounted Police | Gendarmerie royale du Canada (RCMP), Australian Signals Directorate’s (ASD’s) Australian Cyber Security Centre (ACSC), Australian Federal Police (AFP), Canadian Centre for Cyber Security (CCCS), and United Kingdom’s National Cyber Security Centre (NCSC-UK)—hereafter referred to as the authoring organizations—are releasing this joint Cybersecurity Advisory in response to recent activity by Scattered Spider threat actors against the commercial facilities sectors, subsectors, and other sectors. This advisory provides tactics, techniques, and procedures (TTPs) obtained through FBI investigations as recently as June 2025. https://lnkd.in/ghgDKSWb

75

2 Comments

Excellent profile on UNC5807/Salt Typhoon released from several governments today. Though there are many Chinese cyber espionage actors regularly targeting the sector, this actor’s familiarity with telecommunications systems gives them a unique advantage, especially when it comes to evading detection. Many of the highly successful Chinese cyber espionage actors we encounter have deep expertise in the technologies used by their targets, giving them an upper hand. In addition to targeting of telcos, the reported targeting of hospitality and transportation by this actor (as mentioned in the report) could be used to closely surveill individuals. Information from all these sectors tells intel services who someone is talking to, where they are, and where they are going. Three contractors are called out in the report. The contractor ecosystem at the heart of Chinese cyber espionage has been instrumental in the rapid evolution of these operations and growing them to an unprecedented scale. Contractors do everything from building infrastructure to the dirty work of carrying out intrusions. Interestingly, the actor doesn't appear to have relied on zerodays, though they did rely on several exploits which were previously leveraged as zerodays by CN cyber espionage actors. A reminder that these zerodays are still a proliferation problem after they are patched. https://lnkd.in/dhX4SmEe

232

1 Comment