AI in Cybersecurity and Cybersecurity in AI

/0 Comments/in /by

The concepts of “AI in Cybersecurity” and “Cybersecurity in AI” address distinct but interrelated issues in the realm of technology and security. Here’s a breakdown of the differences:

AI in Cybersecurity

Definition: This refers to the application of artificial intelligence (AI) technologies to enhance and improve cybersecurity measures.

Key Areas and Applications:

  1. Threat Detection and Response:
    • AI algorithms can analyze vast amounts of data to       detect anomalies and potential threats much faster than traditional       methods.
    • Machine learning models can identify patterns       associated with malware, phishing, and other cyber threats.
  1. Automation:
    • Automating repetitive tasks such as monitoring and       responding to security incidents.
    • AI-driven systems can prioritize and respond to       alerts, reducing the workload on human analysts.
  1. Predictive Analytics:
    • Predicting future attacks by analyzing historical data       and identifying trends.
    • Proactive threat hunting and vulnerability assessments.
  1. Behavioral Analysis:
    • Monitoring user behavior to detect insider threats and       compromised accounts.
    • Continuous authentication systems that adapt based on       user behavior.
  1. Adaptive Security:
    • Systems that adapt their defense mechanisms in       real-time based on the evolving threat landscape.

Benefits:

  • Enhanced detection and mitigation of threats.
  • Improved efficiency and reduced response times.
  • The ability to handle large-scale data and complex      threat environments.

Cybersecurity in AI

Definition: This pertains to the measures taken to ensure the security of AI systems themselves, safeguarding them from various threats and vulnerabilities.

Key Areas and Applications:

  1. Data Integrity and Privacy:
    • Ensuring the data used to train AI models is accurate,       unaltered, and free from biases or malicious tampering.
    • Protecting sensitive information and maintaining       privacy throughout the AI lifecycle.
  1. Model Security:
    • Protecting AI models from adversarial attacks where       attackers manipulate input data to deceive the model.
    • Guarding against model theft, where proprietary models       are stolen or replicated by unauthorized parties.
  1. Algorithm Robustness:
    • Developing robust algorithms that can withstand       attempts to exploit their weaknesses.
    • Implementing techniques to detect and mitigate       adversarial attacks on AI systems.
  1. Deployment Security:
    • Securing the environment in which AI models are       deployed, including cloud infrastructure and edge devices.
    • Ensuring that AI systems are resilient against       denial-of-service (DoS) attacks and other disruptions.
  1. Governance and Compliance:
    • Establishing policies and frameworks to ensure AI       systems comply with legal and regulatory requirements.
    • Implementing ethical guidelines to prevent misuse of       AI technologies.

Benefits:

  • Protects the integrity and functionality of AI systems.
  • Ensures the trustworthiness and reliability of AI      outputs.
  • Prevents malicious exploitation of AI technologies.

Summary

AI in Cybersecurity focuses on leveraging AI to enhance the capabilities of cybersecurity measures, providing more effective and efficient protection against cyber threats. Cybersecurity in AI, on the other hand, involves protecting AI systems from threats, ensuring their integrity, and securing the data and models they rely on.

Both are crucial in the modern technological landscape, as AI becomes more integrated into various systems and processes, and the need to protect both the technology and its applications grows.

 

Audio Podcast – https://notebooklm.google.com/notebook/77f36366-fc94-42a3-bc7d-02ca41a8a352/audio

October is Cybersecurity Awareness Month: Why Cyber Basics Still Matter

/0 Comments/in , /by

As October kicks off, we are reminded of the importance of Cybersecurity Awareness Month and Cybersecurity Career Awareness Week. These initiatives serve not just to raise awareness but to equip everyone—from individuals to organizations—with the tools and knowledge to protect against the growing wave of cyber threats.

Between strong passwords, 6-digit PINs, and fingerprints scanned into our devices, cybersecurity is ingrained into our daily routines. When done correctly, these small but impactful actions greatly enhance our online safety, providing peace of mind that our data, finances, and families are protected.

While technological advancements like artificial intelligence (AI) have transformed the cybersecurity landscape, the basics are as essential as ever. This year’s Cybersecurity Awareness Month highlights four simple yet powerful ways to stay safe online:

  1. Use Strong Passwords and a Password Manager
  2. Turn On Multifactor Authentication (MFA)
  3. Update Your Software
  4. Recognize and Report Phishing

Let’s Dive into Each Key Message

  1. Use Strong Passwords and a Password Manager
    The foundation of good cybersecurity starts with strong, unique passwords. Unfortunately, only 38% of people use unique passwords for all their accounts, according to the National Cybersecurity Alliance’s 2023 Oh, Behave! report. Creating complex passwords and leveraging a password manager makes it easier to maintain these standards across multiple accounts, ensuring that even if one password is compromised, others remain secure.
  2. Turn On Multi-factor Authentication (MFA)
    MFA adds an additional layer of protection by requiring something you know (password) and something you have (like a mobile device) to access your accounts. The report found that 79% of people are familiar with MFA, but only 70% actually know how to use it. MFA can significantly reduce the risk of unauthorized access, especially if passwords are weak or compromised.
  3. Update Your Software
    Whether it’s your phone, laptop, or an app you use, keeping your software up to date is a simple yet often overlooked cybersecurity measure. Software updates patch security vulnerabilities, and ignoring these updates leaves systems open to exploitation. Despite this, only 36% of people install updates as soon as they are available. It’s essential to stay current with updates to protect your devices from emerging threats.
  4. Recognize and Report Phishing
    Phishing continues to be a prevalent threat, yet many individuals feel confident in recognizing phishing attempts, with 69% of respondents expressing confidence in this area. However, phishing attempts are becoming increasingly sophisticated. Training yourself to recognize suspicious emails and promptly reporting them can help prevent falling victim to such attacks. While 51% of Americans report cybercrimes, it’s vital that this percentage continues to rise.

Why Cyber Basics Are Still the Best Defense

In a world of advancing cyber threats, returning to the basics offers a robust defense. By implementing strong passwords, MFA, software updates, and learning to recognize phishing, individuals and businesses alike can drastically reduce their vulnerability to cyber attacks.

The statistics in the Oh, Behave! report underscore the importance of continued awareness and education. While 84% of people see online safety as a priority, there’s a gap between understanding and action. The tools are there, but habits need to catch up.

Fast Facts: Cybersecurity in 2023

  • 84% of people consider online safety a priority.
  • Only 38% use unique passwords across all accounts.
  • About one-third of people started using a password manager after cyber training.
  • 79% are familiar with MFA, and 70% know how to use it.
  • Only 36% always install software updates when available.
  • 69% are confident in identifying phishing attempts.
  • 51% of Americans actively report cybercrimes.

Cybersecurity Career Awareness Week: Encouraging the Next Generation

During this month, it’s also crucial to recognize Cybersecurity Career Awareness Week, which aims to inspire more people to explore careers in this field. With a growing demand for skilled professionals, now is an opportune time for students and those looking to switch careers to consider joining the cybersecurity workforce. Cybersecurity offers opportunities to solve real-world problems, safeguard organizations, and be at the cutting edge of technological advancement.

Final Thoughts

Cybersecurity Awareness Month provides a timely reminder that cybersecurity starts with everyday habits. Whether you’re securing personal devices, protecting your family, or considering a career in cybersecurity, the basics still hold the most power. By adopting these practices and sharing the message with others, we can collectively make the digital world a safer place.

As we move forward, remember: Use strong passwords, turn on MFA, update your software, and always report phishing attempts—the simple steps that can make a world of difference.

Reflecting on National Cybersecurity Awareness Month 2023: A Call for Continued Vigilance

/0 Comments/in , /by

October is recognized as Cyber Security Awareness Month and as we come to the end of the month, so does National Cybersecurity Awareness Month (NCSAM) 2023. This annual observance, dedicated to promoting cybersecurity awareness, provides a valuable opportunity to reflect on the critical issues surrounding digital safety, the history of NCSAM, and the imperative of continued vigilance in the face of evolving cyber threats.

The History of National Cybersecurity Awareness Month

NCSAM is celebrated every October, and it was established in 2004. This initiative originated as a joint effort between the U.S. Department of Homeland Security (DHS) and the National Cyber Security Alliance (NCSA) and has since expanded to include participation from government agencies, educational institutes, businesses, and individuals around the world.

The primary objective of NCSAM is to increase awareness about the importance of cybersecurity and to promote the adoption of best practices to protect individuals, businesses, and national security interests. Over the years, the campaign has focused on themes such as “Stop. Think. Connect.” and “Own IT. Secure IT. Protect IT.” These themes emphasize the need for responsible online behavior and the safeguarding of personal and sensitive data.

The Importance of Cybersecurity Awareness

With the conclusion of NCSAM in the next few days at the end of October, it is important to remember that cybersecurity awareness is a year-round commitment. Cybersecurity touches every aspect of our digital lives, from safeguarding personal information to protecting the economy and national security. As technology advances and cyber threats become more sophisticated, our vigilance must remain constant.

Here are three critical aspects of cybersecurity that deserve ongoing attention:

  1. Multifactor Authentication (MFA)

One of the most effective ways to bolster online security is through the use of multifactor authentication (MFA). MFA requires users to provide two or more forms of identification before granting access to an account or system. This additional layer of security significantly reduces the risk of unauthorized access, even if a password is compromised.

Individuals and organizations should embrace MFA for their online accounts, email, social media, and work-related applications. The ease of implementation and the considerable improvement in security make MFA a simple but powerful tool in the fight against cyber threats.

  1. Phishing Awareness

Phishing awareness is a critical component in the defense against cyber attacks, benefiting both individual users and businesses. For individual users, understanding the tactics employed by cybercriminals in phishing attacks can make them more alert and watchful when interacting with emails, websites, and messages. By recognizing the characteristics of phishing, such as suspicious email addresses, grammar errors, and urgent requests for personal information, users can avoid falling victim to scams that can compromise their personal and financial information. This awareness allows individuals to take practical steps in protecting themselves and their families from the devastating consequences of identity theft and financial fraud.

As it relate to businesses, phishing awareness is vital for safeguarding sensitive corporate data and preserving the integrity of operations. Employees who are well-informed about the dangers of phishing are less likely to click on malicious links, share sensitive data, or download harmful attachments. This not only reduces the risk of data breaches but also helps maintain the company’s reputation and customer trust.

  1. Closing the Cybersecurity Workforce Gap

The cybersecurity workforce gap is a growing concern globally, and the United States is no exception. The demand for skilled cybersecurity professionals far outpaces the available talent. Closing this gap is essential to protecting our digital infrastructure and national security.

To address this issue, we must encourage educational programs that prepare the next generation of cybersecurity experts. Public and private sectors should work together to create incentives for individuals to pursue careers in cybersecurity. As technology continues to advance, the need for a strong cybersecurity workforce is only set to increase.

 

Conclusion

In conclusion, as National Cybersecurity Awareness Month comes to an end in October, it is essential to recognize that our commitment to cybersecurity must persist throughout the year. Cyber threats do not adhere to a calendar; they are a constant and evolving challenge. By employing practices such as multifactor authentication, phishing awareness campaigns and addressing the cybersecurity workforce gap, we can better protect our digital lives, the economy, and national security. Let NCSAM be a reminder that cybersecurity awareness is not limited to a month but is a commitment that must remain a priority in our ever-connected world.

Comprehensive Guide to CISSP: A Review of “CISSP All-in-One Exam Guide, Ninth Edition” by Shon Harris and Fernando Maymi

/0 Comments/in , /by

Rating: ★★★★★

The Certified Information Systems Security Professional (CISSP) certification is a prestigious credential sought after by professionals in the field of cybersecurity. To navigate the complexities of the CISSP exam, candidates often turn to trusted study resources. “CISSP All-in-One Exam Guide, Ninth Edition” by Shon Harris and Fernando Maymi has long been considered a go-to reference for CISSP aspirants. In this comprehensive review, we will explore the book’s content chapter by chapter.

Chapter 1: Introduction to the CISSP Certification The authors kick off the book by providing an overview of the CISSP certification and the domains it covers. They explain the exam format and set the stage for the journey ahead.

Chapter 2: Security and Risk Management This chapter delves into fundamental concepts of security and risk management. Harris and Maymi do an excellent job explaining key principles and frameworks, such as confidentiality, integrity, availability (CIA), and risk assessment.

Chapter 3: Asset Security The authors explore the protection of assets in this chapter, covering topics like data classification, ownership, and data retention policies. They also discuss physical security measures and the importance of asset management.

Chapter 4: Security Architecture and Engineering This section provides insights into security architecture, system design, and secure development practices. It’s a critical chapter for those wanting to understand the design principles of secure systems.

Chapter 5: Communication and Network Security Communication and network security are crucial in today’s interconnected world. Harris and Maymi guide readers through the essentials of network security, including protocols, devices, and best practices.

Chapter 6: Identity and Access Management Access control is a fundamental aspect of cybersecurity. This chapter explores identity management, authentication, authorization, and access control models in depth.

Chapter 7: Security Assessment and Testing For a secure system, continuous testing is essential. This chapter covers various assessment and testing methodologies, including vulnerability assessment and penetration testing.

Chapter 8: Security Operations This section delves into security operations, incident response, disaster recovery, and business continuity planning. It provides a holistic view of how organizations should handle security incidents and maintain business continuity.

Chapter 9: Software Development Security Secure software development is a key concern in the digital age. The authors discuss secure coding practices, secure development life cycles, and common software vulnerabilities.

Chapter 10: Security and Risk Management The final chapter revisits the security and risk management domain, summarizing key concepts and emphasizing their importance in the CISSP exam.

Appendices and Additional Resources The book also includes valuable appendices that provide supplemental information, such as a glossary, exam tips, and practice questions. It’s a great resource for reinforcing your knowledge.

In conclusion, “CISSP All-in-One Exam Guide, Ninth Edition” by Shon Harris and Fernando Maymi is a comprehensive and well-structured resource for CISSP aspirants. The chapter-by-chapter breakdown ensures that readers can approach each domain with clarity and depth. The authors’ expertise shines through in their clear explanations and practical insights. However, it’s important to note that this book is an excellent study guide but should be supplemented with real-world experience and additional practice exams. If you are serious about earning your CISSP certification, this book should be a key component of your study plan.

Basic Linux Commands

/0 Comments/in /by
  1. ls – List files and directories in the current directory. Example: ls Explanation: This command will display a list of files and directories in the current location.
  2. pwd – Print working directory. Example: pwd Explanation: This command shows the path of the current directory you are in.
  3. cd – Change directory. Example: cd /home/user/documents Explanation: This command changes the current directory to “/home/user/documents”.
  4. mkdir – Make directory. Example: mkdir new_folder Explanation: This command creates a new directory named “new_folder” in the current directory.
  5. rmdir – Remove directory. Example: rmdir empty_folder Explanation: This command deletes an empty directory named “empty_folder” from the current directory.
  6. cp – Copy files or directories. Example: cp file.txt /path/to/destination Explanation: This command copies “file.txt” to the specified destination path.
  7. mv – Move or rename files or directories. Example 1: mv file.txt /path/to/destination Explanation 1: This command moves “file.txt” to the specified destination path. Example 2: mv old_file.txt new_file.txt Explanation 2: This command renames “old_file.txt” to “new_file.txt”.
  8. rm – Remove files or directories. Example 1: rm file.txt Explanation 1: This command deletes the file named “file.txt”. Example 2: rm -r folder Explanation 2: This command deletes the “folder” directory and all its contents recursively.
  9. touch – Create an empty file or update the file’s timestamp. Example 1: touch new_file.txt Explanation 1: This command creates a new empty file named “new_file.txt”. Example 2: touch existing_file.txt Explanation 2: This command updates the timestamp of the “existing_file.txt” without changing its content.
  10. cat – Concatenate and display the content of files. Example: cat file.txt Explanation: This command displays the content of “file.txt” on the terminal.
  11. more / less – Display the content of files page by page. Example: less large_file.txt Explanation: This command allows you to view the content of “large_file.txt” page by page, making it easier to read large files.
  12. head – Display the beginning of a file. Example: head file.txt Explanation: This command shows the first few lines of “file.txt”.
  13. tail – Display the end of a file. Example: tail file.txt Explanation: This command shows the last few lines of “file.txt”.
  14. grep – Search for a pattern in files. Example: grep "keyword" file.txt Explanation: This command searches for the word “keyword” in “file.txt” and displays matching lines.
  15. echo – Print a message or value to the terminal. Example: echo "Hello, World!" Explanation: This command prints the message “Hello, World!” to the terminal.
  16. chmod – Change file permissions. Example: chmod +x script.sh Explanation: This command adds the executable permission to “script.sh”, allowing it to be run as a script.
  17. chown – Change file ownership. Example: chown user:group file.txt Explanation: This command changes the owner and group of “file.txt” to the specified user and group.
  18. ps – Display the currently running processes. Example: ps aux Explanation: This command shows a list of all running processes on the system along with additional details.
  19. kill – Terminate a process. Example: kill PID Explanation: This command sends a termination signal to the process with the specified PID (Process ID).
  20. top – Display dynamic real-time information about running processes. Example: top Explanation: This command provides a live view of the system’s processes, updating regularly.

These are just some of the most basic Linux commands. The Linux command line offers a plethora of powerful utilities and options to explore and master.

Top 5 Open Source Vulnerability Security Scanning Tools

/0 Comments/in , /by
  1. Nmap: Nmap is a powerful open source network exploration and security auditing tool that can help identify vulnerabilities in a system. It is widely used for port scanning, version detection, and network mapping. Nmap can also be used for vulnerability scanning by detecting known vulnerabilities in software and services running on a system.
  2. OpenVAS: OpenVAS is an open source vulnerability scanner that can be used to scan for known vulnerabilities in software and services on a network. It is a powerful tool that can perform comprehensive scans of networks, identify vulnerabilities, and generate reports.
  3. Metasploit Framework: Metasploit is a popular open source penetration testing framework that can be used to identify and exploit vulnerabilities in systems. It can also be used for vulnerability scanning by running exploit modules that detect known vulnerabilities in software and services.
  4. Nikto: Nikto is an open source web server scanner that can be used to identify vulnerabilities in web servers and web applications. It can perform comprehensive scans of web servers, identify vulnerabilities, and generate reports.
  5. Lynis: Lynis is an open source security auditing tool that can be used to scan for security vulnerabilities in Linux and Unix systems. It can identify vulnerabilities in the system configuration, installed software, and system security settings. Lynis is lightweight and easy to use, making it a popular choice for security professionals.

These tools are popular among security professionals because they are open source, free to use, and can be customized to meet specific security needs. They are also regularly updated by their communities, which ensures that they are kept up-to-date with the latest threats and vulnerabilities. Additionally, they are user-friendly and come with detailed documentation and tutorials, making them accessible even to non-experts.

The Benefits of Sock Puppets in Open-Source Intelligence (OSINT)

/0 Comments/in , , /by

A Sock Puppet is fake persona, or an alternative online identity used to collect and investigate open-source information on a target.  The main goal of the Sock Puppet is to not have the profile linked back to the investigator.

This is vital as to provide operational security (OPSEC) to protect the investigator from retaliation or to prevent bringing awareness to the target that they are being investigated by a specific entity.

Maintaining and managing a sock puppet also requires a detailed understanding of the many different platforms the investigator will used to create accounts for the fake persona.  As these policies change, so can the information that is disclosed or shared publicly.

To effectively create and use a functional sock puppet here are a few recommendations:

  1. To anonymize the account so that it does not record the original IP address or location, the use of a VPN or TOR while creating the account is highly recommended. In addition, it is recommended doing so from a public Wi-Fi connection.
  2. Certain social media platforms such as Facebook may prevent individuals from creating an account from a VPN or TOR connect. In that case, using a public Wi-Fi is recommended.
  3. When logging to the sock account, be sure to always use a VPN, TOR or public Wi-Fi, under no circumstances should the creator use a direct IP address that may link back to them.
  4. Make the account as legitimate as possible by producing daily activities, using it for a long period of time and making online connections.
  5. When creating a name for the account, it is recommended using a fake name generator. In doing so, the investigator will be provided with an identity of a person that has never existed.  The identity will have a name, address, mother’s maiden name, weight, height, date of birth, in addition to many other useful information need to create a person.  Female accounts then to have more success when creating a sock puppet.
  6. Now that an identity has been created, providing an image is highly recommended. The creator has two options, using a cartoon avatar or providing an image of a human that does not exist through the use of artificial intelligence.  Never use a real person’s face as individuals can use tools such as Google identify the photo’s original owner.
  7. When creating an email account for the sock puppet, it is recommended using any email provider such as gmail.com, mail.com or yahoo.com to name a few. As previously stated, be sure the IP address cannot be link to the creator.
  8. Obtain a burner cell phone and SIM card that can be used account verification. Be sure to not have the phone linked back to the investigator by paying with cash or a privacy-based credit card.
  9. Having more than one sock puppet is highly recommended in case something goes wrong, the investigator will have an active back-up.

Sock Puppets are important for the protection of the investigator, things change fast in the online world, and it is important the investigator keep up with the changes.

The Open-Source Intelligence (OSINT) Cycle

/0 Comments/in , , /by

Open-source intelligence, or OSINT, refers to the process of collecting information from public and legal data sources to serve a specific function. Some open sources components might include social media, videos, blogs, news, and the web (surface, Deep and Dark Web).

OSINT encompasses 5 phases in its process. The following diagram shows the OSINT cycle.

  1. Source Identification – It is the initial phase of the OSINT process. The OSINT investigator (Black Hat or White Hat) identifies the potential sources from which information will be gathered.
  2. Data harvesting – In this phase, the OSINT investigator collects and harvests information from the select sources and other sources that are discovered.
  3. Data processing and information- During this phase, the OSINT investigator processes the harvest information for actionable observation by searching for information that may assist in the enumeration.
  4. Data analysis – In this phase, the OSINT Investigator performs data analysis of the processed information using OSINT analysis tools and techniques.
  5. Results delivery – It is the final phase in the OSINT analysis and findings are reported to the stake holders.

Benefits of STEM Summer Camps

/0 Comments/in /by

STEM summer camps can make summer learning fun and exciting by teaching kids about science, technology, engineering, and math.  The camps can give children an opportunity to continue learning more about a concept they were introduced to during the school year or event explore different STEM concepts they may not learn about in their classrooms. In just one summer, kids discover not only their passion for learning but perhaps even their future career path.

Learn Basic STEM Skills

Instead of forgetting the STEM concepts they’ve learned at school, kids can practice those concepts and apply them in hands-on activities and real-life scenarios.  For example, using robotics to implement a manufacturing solution, implementing code to sort through data or conducting a chemical experience to determine the acidity.

In addition to the STEM activities, participant of the camo will start developing soft skills like communication, critical thinking, and problem-solving.  These skills will help them in their future careers and lives by working together, using their imagination, and enhancing their communication skills while solving multiple challenges.

How to Find a STEAM Summer Camp for Kids?

There are many schools and institutions offering STEM summer camps for kids and each of them may use different programs and approaches. To choose the right one, consider the following factors.

Your budget

How much are you willing to spend on this year’s summer camp? It’s no secret that summer camps can be pricey especially if you are enrolling more than one child and if the program requires them to live on the campus. That’s why it’s important to consider your budget for everything, including lodging, transportation, and food. Do your research first, then pick the one that suits your budget and other requirements at the same time.

You and your children’s preferences

Are you okay with the kids staying at the camp? Will they be able to take care of themselves if you are not around? Are they old enough to join a sleep-away camp? These are some of the questions you need to ask before enrolling them to STEM summer camp for kids. Think about these things very well while researching to select one that works for your family.

Curriculum

You want to know what kinds of activities, classes, workshops they are going to do during the camp. These vary from institution to institution, so compare them carefully. You also want to find out how many kids are going to be there per class. More often, small classes are better because teachers can provide individualized attention and kids get to know each other more.

The camp learning environment

If the camp offers open houses, grab this opportunity to take a tour. Make sure to take your child with you. Surveying the place before sending your kids is a must. It gives you an opportunity to speak with the staff, directors, and counselors and get to know more about their experience.

U.S. Can Expect to see more Ransomware Attacks

/1 Comment/in , , /by

In the cybersecurity space, there are many things we do not all agree on, but one thing I have noticed in the past year is that we all agree that the U.S. can expect to see more ransomware attacks as the nation recover from recent attacks which included the District of Columbia Police Department, The Colonial Pipeline and now the JBS meat plant.  These will continue to increase, especially in the state, local environment, as well as in the critical infrastructure and manufacturing space.

There are two main reasons for this trend:

  1. Organizations are not implementing the basic security controls thus allowing attackers to take advantage of easy attack vectors. A major of the critical infrastructure in the U.S. are operated by private organizations with very little IT and security regulations.
  2. Many organizations are frequently deciding to pay the ransom after they have been attacked. Security researchers and law enforcement often recommend organizations not to pay the ransoms, but when stakeholders and the media are applying pressure, organizational leader must do what is best for the organization.  This validates the ransomware industry and their frequency and tactics become more sophisticated.

This recent attack seems to have a Russian’s group fingerprint associated to it just like the pipeline event.  Many security researchers, law enforcement officials and politicians are recommending in conjunction to increasing regulations on U.S. based organizations, the U.S. must also impose sanctions against countries that allow these types of activities to occur inside their borders.