My information Resource (blog.mir.net)

• NIST Continues to Expand Its Suite of CSF 2.0 Resources November 25, 2024
  NIST Releases More CSF 2.0 Resources for Cybersecurity Awareness Month It’s Cybersecurity Awareness Month—and we’re celebrating by sharing that we have even more Cybersecurity Framework (CSF) 2.0 resources to help organizations of all sizes manage your cybersecurity risks. The new resources include, but are not limited to: Learn More
  blogmirnet
• Cyber Review Board Investigate Salt Typhoon’s Targeting of US Telecommunications November 25, 2024
  Recent open-source reporting details the activity of Chinese nation-state advanced persistent threat (APT) Salt Typhoon amidst the 2024 presidential election. Salt Typhoon has compromised telecommunications infrastructure, including infrastructure associated with court-ordered wiretaps. A Department of Homeland Security (DHS) panel is currently reviewing the incident and assesses that it will likely take months before any findings […]
  blogmirnet
• Threat Actors Exploit DocuSign APIs to Bypass Security November 25, 2024
  Example of invoice attachment. Image Source: Wallarm Labs Consistent with open-source reporting, the NJCCIC’s email security solution detected increased attempts to exploit DocuSign APIs to deliver fraudulent invoices. Unlike traditional phishing scams, which rely on misleading emails and links, these attacks use real DocuSign accounts and templates to mimic reputable companies, making detection more difficult. […]
  blogmirnet