Weekly Security Sprint EP 40. Maine, expanded conflict, scams, and more!

In this week's Security Sprint, Dave and Andy talked about the following topics:

Maine Shootings

• Attorney General Merrick B. Garland Statement on the Suspect in the Lewiston, Maine, Mass Shooting
• Statement from FBI Boston Division Special Agent in Charge Jodi Cohen on the Lewiston, Maine, Mass Shooting
• Maine shootings: gunman suspected of killing 18 people found dead
• Maine Shooting Suspect’s Body Found in Trailer: Officials
• Maine police alerted about ‘veiled threats’ from Robert Card weeks before mass shooting
• Mystery note left behind by Maine mass shooting suspect revealed
• Robert Card legally bought rifle believed to be used in Maine massacre days before mental health treatment: report

FB-ISAO: October 2023 Threat Level Statement Update – Threat Levels Raised to ELEVATED.

• The Physical Threat Level is “ELEVATED.” ELEVATED means that FB-ISAO is unaware of any specific threats, but there is concern that an event is more likely than normal. We are also closely monitoring events and are considering an escalation to “SEVERE,” meaning that an event is highly likely, but decided to not escalate to that level at this time.
• The Cyber Threat Level is “ELEVATED.” ELEVATED means that FB-ISAO is unaware of any specific threats, but there is concern that an event is more likely than normal.

Scams

• FBI IC3 PSA - Scammers Solicit Fake Humanitarian Donations: “The FBI is warning the public that scammers are committing charity fraud by soliciting fake humanitarian donations during the Israel HAMAS conflict. Scammers quickly pivot to charity fraud when catastrophic events occur, such as a war, a natural disaster, or an epidemic.”
• Anonymous Sudan Claims KFC Cyberattack Amidst Geopolitical Tensions
• Shooting outside Upper Darby mosque under investigation: police
• Cops stop car showing anti-Israel slogans, swastikas; say loaded gun found inside. Driver reportedly aimed to 'educate the public' on Israel-Hamas war's 'true events.'
• Israel flag in front of Nash Co. church vandalized
• CAIR Video: Muslim Woman Targeted by Hateful Tirade in Maryland

AI. FACT SHEET: President Biden Issues Executive Order on Safe, Secure, and Trustworthy Artificial Intelligence.

Quick Hits

• Risky Biz News: CitrixBleed vulnerability goes from bad to disastrous.
• Mass exploitation of CitrixBleed vulnerability, including a ransomware group.
• CVE-2023-4966: Critical security update now available for NetScaler ADC and NetScaler Gateway
• Neuberger: New global initiatives will include information sharing, ransomware payment tracking
• DDoS threat report for 2023 Q3
• CISA Updates Guidance for Addressing Cisco IOS XE Web UI Vulnerabilities
• Cisco IOS XE Software Web UI Command Injection Vulnerability
• CISA Adds One Known Exploited Vulnerability to Catalog - CVE-2023-20273 Cisco IOS XE Web UI Unspecified Vulnerability
• Space ISAC Watch Center Prepares for Cyber Threats in Space
• Empowering Small and Medium-Sized Businesses; A Resource Guide for Developing a Resilient Supply Chain Risk Management Plan
• Logging Made Easy. CISA’s newest tool is a free and open logging and protective monitoring solution serving all organizations. Secure your Windows-based equipment today with Logging Made Easy.