The hackers targeted blueprints for producing materials with broad applications to the pharmaceutical and aerospace sectors, according to Boston-based security firm Cybereason. The firm discovered the activity last year but said the hacking campaign dates to at least 2019, and it suggested that reams of data could have been stolen in the interim.
“It’s clearly industrial espionage, IP [intellectual property] theft at the highest level,” Assaf Dahan, Cybereason’s research lead, told CNN.
Asked to respond to the Cybereason report, Liu Pengyu, a spokesperson at the Chinese Embassy in Washington, claimed that China “will never encourage, support or condone cyber attacks.”
Subject: SafeGraph Will Stop Selling Planned Parenthood Location Data
Source: Gizmodo
https://gizmodo.com/safegraph-planned-parenthood-location-data-abortion-pet-1848880465
A data location broker company called SafeGraph says it will no longer sell the location data of groups of people visiting Planned Parenthood and other clinics that provide abortions following a recent Vice report. Purchasers of that data previously could reportedly tell where visitors to those clinics came from, how long they stayed at the clinic and where they went after.SafeGraph on Tuesday said it decided to reverse course in part due to news of a leaked initial draft majority opinion which shows the U.S. Supreme Court’s apparent interest in striking down Roe v Wade, a titanic move that would effectively make abortion illegal in many states.
“In light of potential federal changes in family planning access, we’re removing Patterns data for locations classified as NAICS code 621410 (‘Family Planning Centers’) from our self-serve “shop” and API to curtail any potential misuse of its data,” SafeGraph wrote on its website.
Subject: Reproductive Health and Digital Privacy
Source: Digital Defense Fund via beSpacific
https://www.bespacific.com/reproductive-health-and-digital-privacy/
Digital Defense Fund: “This page is organized into different security-related threats. You can jump to the ones that most concern you. Along with each scenario is a list of digital security tips to neutralize the threat. These are possible concerns you might have:…
Subject: NIST updates guidance for defending against supply-chain attacks
Source: Bleeping Computer
https://www.bleepingcomputer.com/news/security/nist-updates-guidance-for-defending-against-supply-chain-attacks/
The National Institute of Standards and Technology (NIST) has released updated guidance on securing the supply chain against cyberattacks.Since 2020, NIST has released two draft documents on how the enterprise can better defend itself from supply-chain attacks.
Today, in response to Executive Order 14028: Improving the Nation’s Cybersecurity, NIST has published ‘Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations‘ to provide guidance on identifying and responding to supply chain cybersecurity risks.
“Managing the cybersecurity of the supply chain is a need that is here to stay,” said NIST’s Jon Boyens, one of the publication’s authors. “If your agency or organization hasn’t started on it, this is a comprehensive tool that can take you from crawl to walk to run, and it can help you do so immediately.”
The document is a long read, weighing in at 326 pages, but includes valuable information on supply chain risks, from evaluating foreign control over a software/product’s development to risks associated with using external IT service providers.
…
Supply-chain attacks are becoming increasingly popular targets for threat actors, as it allows them to compromise a single product and have it impact numerous downstream companies who utilize it.
The severity of supply-chain attacks was demonstrated in real-world scenarios when threat actors compromised SolarWinds to infect downstream customers, Kaseya’s MSP software was used to encrypt over a thousand companies, and how npm modules were used to execute remote commands.
These attacks had widespread consequences for many organizations simply by compromising a single source, illustrating the need for the enterprise to add safeguards against supply-chain attacks.
Tagged:
Subject: Supreme Court privacy vs. your right to privacy
Source: CNN Politics
https://www.cnn.com/2022/05/07/politics/supreme-court-personal-privacy-what-matters/index.html
- The leaked draft opinion that would overturn Roe v. Wade would jeopardize Americans’ constitutional right to privacy.
- The leaking of the draft is a violation of Supreme Court justices’ ability to deliberate in private.
“Absolutely appalling,” Chief Justice John Roberts said of the leak.
Two-thirds of the country opposes overturning Roe v. Wade, according to a
new CNN poll conducted by SSRS and released Friday.
The core of conservative justices poised to revoke American women’s right to an abortion — Roberts does not appear to be among them — isn’t required to consider how it would change the country.
The court is insulated — a group of nine people unaccountable after their lifetime appointments and who are choosing rights for a nation of more than 330 million.
What little we know about the Supreme Court comes from journalism and memoirs. Justices can
choose to share their papers after they retire. Or not.
