December - 2018

washingtoncybercenter.com

More Attention Should be Paid to Nuclear Power Plant Cybersecurity

Over the years, there has been a significant amount of research with cybersecurity in mind re: industry targets. These include, but have not been limited to government contractors, the government units (e.g. the FDIC), and auto manufacturers. During the year, there may be an increase in focus based on financial trends (e.g. consumer retail near the holidays). One industry not significantly researched as it relates to cybersecurity has been the nuclear power industry. The Depa

PageUp Oversight

PageUp is an Australian firm. Their business is a Human Resources software provider. PageUp has a global presence with 2M users across 190 countries. The vast number of these clients are corporate. These include Wesfarmers (Coles, Target, Kmart, and Officeworks), NAB, Telstra, Commonwealth Bank, Lindt, Aldi, Linfox, Reserve Bank of Australia, Australia Post, Medibank, ABC, Australian Red Cross, University of Tasmania, AGL, and Jetstar. Attack PageUp unfortunately was on the r

Air Canada; My Home and Native (Airline)

Each country has its own set of airlines servicing its area. Based on the market, certain countries have more or less than the others. These fly throughout their respective nation and world. Most persons, as a national course of business, go online, enter their information, including credit card numbers, to purchase the airline tickets. This occurs throughout the globe every single day without an issue. An option also is to do this with a mobile device. Issue Air Canada has a

Hey attackers, leave the (beer) alone! Arran Brewery Compromised

Unfortunately, ransomware is quite common as an attack vector across business. This is partially due to the delivery method being low impact, cost efficient, and easily done. This form of attack has the capability to provide for a large ROI (return on investment) when the attack is marginally effective. Any business with capital or data of value is a viable target. One particular attack point not used significantly as it could have been is the Human Resources Department. The

British Airways hit hard

British Airways hit hIn this age, credit cards are required for many aspects of our culture. To rent a car, hotel room, or purchase airline tickets, a credit or debit card is required. To purchase these services without a credit card is problematic. One airline providing the travel service is British Airways, a major international airline. Unfortunately, the airline system was breached. This affected 380,000 credit card payments. These were used on the British Airways website

Prison Tablet Hack

Prison has the mission to rehabilitate the person who had committed the crime which warranted the stay in the prison. The prisoners, while being rehabilitated, are able to contact their families, play games, learn a trade, work, receive therapy, and other activities. One option for the incarcerated person is to use tablets for a few of these functions. These pieces of equipment have become more popular with the inmates. JPay This option for the prisoners involves basic

Recent Insider Threat: Sutter Health

Recent Medical records hold a mass amount of data. These include not only medical diagnosis, but may also include payment information along with health insurance data. Per each individual record, the sales price may not be large, however the value resides more in the data itself. The price depends on not only the data in each file, but also how these are bundled. The medical records are limited as to the access. Not every person in the medical facility requires access to thes

Water Utility: Under-Known Targets

There are a number of high value targets in the market for the attackers to pursue. The attackers have the opportunity for 15 minutes of fame, and data to exfiltrate. One industry not given the positive attention by cybersecurity community has been the water utility industry. The service they provide is required by civilization. Any issue with the process has the potential to be a disaster for anyone or business using the water after processing. A recent issue occurred in Nor

Recent Posts

Archive