Weekly Security Sprint EP 16. QHSR, a Faith-Based intervention, protests, and cannabis!

In the latest Weekly Security Sprint, Dave and Andy discussed the following topics.

DHS!

• Department of Homeland Security Issues QHSR Detailing Strategy to Stay Ahead of Evolving Threat Environment.
• 2023 State of Homeland Security Remarks: Tackling an Evolving Threat Landscape – Homeland Security in 2023
• Secretary Mayorkas Announces New Measures to Tackle A.I., PRC Challenges at First State of Homeland Security Address 
• State of Homeland Security: Mayorkas Launches Artificial Intelligence Task Force, ‘Sprint’ to Assess China’s ‘Especially Grave Threat’

See Something, Say Something – Possible Faith-Based Attack Averted & FB-ISAO Turns Five!

• Man Arrested at Church Service After Members Believe he was Testing Security of Church.
• Man fights officers in church; vehicle discovered stocked with weapons, ammo
• Man's behavior at Texarkana revival service leads to his arrest, seizure of guns, survival gear

FB-ISAO: Five Years Strong. “Happy Anniversary to the Faith-Based Information Sharing and Analysis Organization. 18 April 2023, marks five years of serving the community of faith with information, analysis, and capabilities to help reduce risk while enhancing preparedness, security, and resilience across all-faiths and all-hazards. Our members include Houses of Worship, Charities, Faith-Based Schools, and their affiliated organizations. We are five years strong!”

4-20! Cannabis ISAO Shares Cybersecurity Best Practices for the Cannabis Industry

• 4-20 2023! Cybersecurity Best Practices for the Cannabis Industry.

Quick Hits:

• Water-palooza! The Gate 15 Interview: April is Water-palooza! Chuck Egli and Jen Walker talk WaterISAC!
• Attorney General Brenna Bird Sues Biden Administration over New Cybersecurity Regulations for Public Water Systems 
• Save the Date for H2OSecCon 2023! 

Ransomware – March Was a Record Setting Month & Dragos Ransomware Report

• March 2023 broke ransomware attack records with 459 incidents.
• Ransomware is a major threat to smaller utilities, manufacturers and health care providers: report.
• Dragos Industrial Ransomware Attack Analysis: Q1 2023.

Blended Threats – Critical Infrastructure Space Asset Disruption Impacts Farming Operations 

• Farmers ‘crippled’ by satellite failure as GPS-guided tractors grind to a halt. T  

New FBI Elder Fraud Report

• Elder fraud costs Maine victims millions of dollars, report finds.

3CX – Attack x Within x Attack

• Mandiant: 3CX Software Supply Chain Compromise Initiated by a Prior Software Supply Chain Compromise; Suspected North Korean Actor Responsible.
• Software Maker 3CX Was Compromised in First-of-its-Kind Threaded Supply-Chain Hack.
• The 3CX cyberattack was the result of two supply-chain hacks, Mandiant says

SBOM, SBOM, You’re my SBOM!

• CISA Releases Two SBOM Documents. On Friday, CISA released two community-drafted documents around Software Bill of Materials (SBOM): Types of SBOM documents and Minimum Requirements for Vulnerability Exploitability eXchange (VEX). 
• Types of SBOM document 
• Minimum Requirements for VEX document 

Chinese Police Outposts

• US Brings Charges Over Secret Chinese Police Outpost.
• DOJ: Two Arrested for Operating Illegal Overseas Police Station of the Chinese Government.