Security Staff Acquisition & Development

Updates to the National Cyber Incident Response Plan are being worked on by the Cybersecurity and Infrastructure Security Agency and the Office of the National Cyber Director after being mandated as part of the 2023 National Cybersecurity Strategy, according to The Record, a news site by cybersecurity firm Recorded Future.

SiliconAngle reports that organizations in the hospitality industry have been subjected to increasingly sophisticated phishing attacks that involved Domain Name System protocol exploitation to evade detection.

New DLL side-loading has been leveraged by the Quasar RAT backdoor, also known as CinaRAT or Yggdrasil, to further obscure malicious data exfiltration activities against Windows devices, The Hacker News reports.

Security researchers advise teams not to allow social sign-ins from accounts such as Facebook and Google, and instead deploy single-sign-on options.

The Massachusetts-based energy sector company was able to overcome the ransomware gang’s efforts to encrypt files on its network.

Keeping our devices secure: Reflecting on 20 years of Patch Tuesday.