#TechLetters #56 - on global cyberwarfare escalation risk. List of offensive cyber tools suppliers. Belarusian information operation. Bypassing air-gaps. Climate-responsibile army procurement
Éditorial
Security
Offensive products/services. List of publically known ~85 companies offering offensive cybersecurity services/products. Including hacking-surveillance tools, or so.
C on cyber. Rare speech of "C" of MI6, boss of UK intelligence service. Speaking of cybersecurity and "science and technology as a component of the highest importance to our national security", mentioning AI and quantum computing.
PK cyber. Pakistan to work on a cybersecurity strategy. Aspects of defence? In light of cyberattacks on national bodies (i.e. Federal Board of Revenue and National Bank).
Belarus information operation. Facebook took down a Belarusian security/intelligence agency operation targeting Poland and Lithuania with information operations in context of the border crisis, spreading false stories and narratives, including posing as journalists/etc. Coordinated operation. My take on the background of this crisis is here.
Air-gaps? Methods for bypassing air-gaps in cyber operations.
US government phones hacked. "U.S. State Department employees were hacked by an unknown assailant using sophisticated spyware developed by the Israel-based NSO Group". Good explanation for issuing sanctions, huh?
Global cyberwarfare corner. US considers a risk/threat of a Russian armed invasion on Ukraine in 2022. So what? Well, NATO considers that "Russia is responsible for aggressive hybrid attacks [and] cyber attacks against Ukraine". Furthermore, apparently "Defense Department team is on the ground in Ukraine assessing what the country needs to protect itself from cyber warfare threats" “confrontation with China over Taiwan would lead to a wave of significant cyberattacks against U.S. critical infrastructure that could disrupt day-to-day life”. Anyway, My analysis at CFR about the cyber risks of a global escalations may perhaps (risk to) gain a new meaning?
Privacy
Fine for Clearview. UK's data protection authority ICO wants to fine Clearview £17m. ~Max #GDPR fine in UK. It includes a fine for scrapping.
Technology Policy
Other
Army social responsibility… New challenges for the arms industry. Not "demonstrators", but investors demanding that tanks and jet fighters use less fuel. It's about protecting the climate. Cyberarmy much more ecological here. Maybe everyone should switch? "Social responsibility". One EU proposals even considers banning arms manufacturers from eco-mark certification if “more than 5% turnover from the production or trade of conventional weapons and/or military products used for combat”
In case you feel it's worth it to forward this letter further, I leave this thingy below:
You may also share here: