38 - China Changes Strategy, CISA Address House Select Committee, and Continued Focus on Critical Infrastructure (This Month In Cyber - February 2024)

Welcome to Episode 38 of Emagine The Future our 2nd of our "This Month in Cyber" series - February 2024 edition.

January Catchup (Things we missed): 

• CISA, FBI, and EPA Release Incident Response Guide for Water and Wastewaste Systems Sector 
• Pwn2Own 2024: EVs take on electric vehicles, vehicle chargers, operating systems, and components 
• Fulton County Suffers Power Outages as Cyber Attacks Continue  

Incidents & Breaches: 

• China Infiltrates US Critical Infrastructure in Ramp-up to Conflict 
• Ongoing Azure Compromises Target Senior Execs Microsoft 365 Apps 

Regulatory & Government: 

• CISA Director Jen Easterly gave her opening statement before the House Select Committee on Strategic Competition Between the United States and the Chinese Communist Party. 
• SEC Rules on Cybersecurity Incident Disclosure (July 2023 + Feb 2024 Comments) 
• OWASP Releases LLM AI Security and Governance Checklist V1 

Events:

• Zero Trust World 2024 (threatlocker.com)  February 26 - 28, 2024 Caribe Royale, Orlando, FL 
• SANS 2024 in Orlando, FL | Cyber Security Training  Mar. 24-49, SANS 2024, Orlando, Fla. 
• 2024 USA | RSA Conference  May 6-9, RSA Conference USA 2024, San Francisco, Calif. 
• Black Hat Spring Trainings 2024  Black Hat Spring Training Mar 12, 2024 – Mar 15, 2024 

Connect with Erik: https://www.linkedin.com/in/erik-dominguez-2589b228/
Connect with Jeremy: https://www.linkedin.com/in/jeremyfrancese/

Subscribe on YouTube: https://www.youtube.com/@EITisCyber

Connect on LinkedIn:
https://www.linkedin.com/company/emagine-it-inc-/posts/

Chapters

• 0:00 Setting The Table
• 0:00 SEC Cyber Ruling - What it is and What it Means
• 7:03 January Recap - What We Missed Last Month
• 27:00 China's Breaches Reach Boiling Point
• 36:00 Current Events Impact on Penetration Assessment & Threat Vector Analysis
• 39:00 Why Allow-Listing on a Penetration Testing is Important
• 42:22 Senior Execs Targeted for Microsoft 365 Logins - The Risk Beyond The Headline
• 50:00 CISA Director, Jen Easterly Address House Select Committee on Strategic Competition Between the United States and the Chinese Communist Party - Regulatory Update & Analysis
• 52:30 What does it mean when a hacker is "Living off the Land"?
• 55:00 China's Shift in Strategy From Espionage to Pre-Positioning in Critical Infrastructure
• 58:00 SEC Cyber Ruling - Overview & Analysis
• 1:02:12 OWASP Releases V1 of their LLC AI Cybersecurity & Governance Checklist
• 1:03:00 Cyber Events Coming Up