Volume 3 📰 April 12-25, 2023

This is the bi-weekly newsletter that keeps you up to speed on everything HAIKU and shares important updates and information from the cybersecurity industry.

As always, if you have any questions about Haiku, sales, launches, or anything mentioned here in this article, please don't hesitate to reach out to us HERE.

Let's jump in!

AFCEA Events

The Haiku Team is proud to attend and sponsor the Armed Forces Communications & Electronics Association (AFCEA) events on April 26th & 27th, 2023 in Nevada.

The AFCEA serves the intelligence and IT communities in the greater Las Vegas area including Nellis AFB and Creech AFB, local contractors, and businesses.

• Creech AFB Tech & Cyber Day: Wednesday, April 26, 2023
• Nellis AFB Tech & Cyber Day: Thursday, April 27, 2023

Girl Scouts Cybersecurity Workshop

On April 1, 2023, Cyber Center of Excellence (CCOE) in collaboration with the Girl Scouts San Diego, Booz Allen Hamilton and First Citizens Bank hosted a 3-hour interactive workshop for 60 San Diego Girl Scouts – from fourth to eighth graders.

Through interactive, industry-led activities including the World of Haiku cybersecurity video game, the girls learned how to stay safe and keep information private online. They also flexed their investigative skills to help spot problems and vulnerabilities in the cyber world. And best of all, the girls were armed with a toolkit to teach and encourage their families, friends, and communities to be more cyber-savvy and secure online.

“My favorite part was the challenge of pretending to hack into something.” – Junior Girl Scout

In addition to earning their cybersecurity badges, the Girl Scouts learned about the different roles, in-demand skill sets, and career pathways available in the high-paying field of cybersecurity. The industry experts inspired the girls with their personal career stories.

“As a woman working in the cybersecurity industry, the opportunity to co-lead cybersecurity badge training for the Girl Scouts was an incredibly rewarding experience. I was surprised the girls already knew so much about technology and coding, and seeing their excitement and curiosity as they learned even more was truly inspiring and left a lasting impact on me.” – Corporate Social Responsibility Manager, ESET North America

Haiku Inc. looks forward to supporting the growth and advancement of women in cybersecurity through our ongoing support of Girl Scouts, Wicked6, and many other organizations that are actively pursuing innovation and excellence in the field.

💻 New HP Range -- Recon Wackamole 3 --

The Wackamole group is back at it again...

If you take them down another one just pops up. Their tactics have been adapted to evade detection and remain hidden. Scan the infrastructure, identify services, open ports, close, and filter ports, and connect to the services that are operational.

KEY LEARNING OBJECTIVES:

• Reconnaissance
• Password Cracking
• System Hacking
• Network Hacking
• Footprinting

This is an EASY DIFFICULTY range built to develop skills including HTTP Requests, Information Gathering, OWASP, Bash, and network fundamentals.

EPA Recommendation: Improve Water System Cybersecurity

Recent EPA guidelines will require the 100,000+ public water systems to improve, and in some cases, install an effective cybersecurity program.

United States - If you were to ask the average American what their thoughts are when they hear the word cybersecurity, you’ll likely hear data protection, hacking, stolen identities, and the like.

But what you will not likely hear is the word water.

But that’s exactly what the priority is for the EPA. It was mandated by the EPA that all state regulators add a minimum amount of cybersecurity protocols to their existing program – if any exist at all.

As the world continues to integrate technology into various parts of society like water, energy, utilities, etc., so will the need to protect this technology.

Radhika Fox, assistant administrator at the EPA told the media, “Cyberattacks that are targeting water systems pose a real and significant threat to our national security. This is not hypothetical.” Fox continued, “Many don’t even have basic cybersecurity practices in place.” CLICK HERE TO READ MORE...

Cybersecurity Professionals Starting To Demand Higher Salaries

With the demand continuing to far exceed the supply of cybersecurity professionals, workers are understanding their true value and asking for higher pay.

Employers worldwide, especially in the United States are still on the hunt to hire qualified cybersecurity professionals. As the technological world continues to advance and more organizations become increasingly reliant on computer software, the need for protection also grows.

The demand for cybersecurity professionals is currently very high. According to a survey by Cybersecurity Ventures, there was a shortage of over three million cybersecurity professionals worldwide in 2019.

Qualified cybersecurity professionals are becoming more aware of the steady high demand for their critical services.

And they are beginning to act on it... CLICK HERE TO READ MORE...

Serve Your Country Without Enlisting Into The Military

As the cyber threats against American targets continue to grow, a new way to serve and protect your country is available that doesn’t include military service.

America has long been the premier world superpower in just about every category; military strength, economy, freedom, and so on. And when you are on top of the world, literally and figuratively, there’s only one direction left to go, down.

And as is typically the case when you are on top, there are plenty of opponents nipping at your heels trying to get you to fall.

America is no exception.

World adversaries like China and Russia have long been trying to compete with America in every way possible. And lately, they are becoming more successful.

In 2021, China has surpassed America as having the largest Navy in the world, a major milestone and seen by people sympathetic to China as a major symbolic victory. But it goes beyond military capabilities. CLICK HERE TO READ MORE...

The US Is Sending Money to Countries Devastated by Cyberattacks

The White House is providing $25 million to Costa Rica, after giving Albania similar aid following aggression by hackers linked to Iran.

Last Spring, tht Costa Rican government suffered a series of ransomware attacks that hobbled critical systems around the country. As imports and exports, health care, and other public services were disrupted, Costa Rican President Rodrigo Chaves Robles declared a state of emergency, and the recovery has been a months-long ordeal. Almost a year after the crisis began, a senior White House official told reporters today that the United States plans to provide $25 million in cybersecurity assistance to help Costa Rica strengthen its digital infrastructure.

CLICK HERE TO VIEW FULL ARTICLE...

AlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud Services

A new "comprehensive toolset" called AlienFox is being distributed on Telegram as a way for threat actors to harvest credentials from API keys and secrets from popular cloud service providers.

"The spread of AlienFox represents an unreported trend towards attacking more minimal cloud services, unsuitable for crypto mining, in order to enable and expand subsequent campaigns," SentinelOne security researcher Alex Delamotte said in a report shared with The Hacker News.

The cybersecurity company characterized the malware as highly modular and constantly evolving to accommodate new features and performance improvements. CLICK HERE TO VIEW FULL ARTICLE...

Top 10 Cybersecurity Trends for 2023: From Zero Trust to Cyber Insurance

As technology advances, cyberattacks are becoming more sophisticated. With the increasing use of technology in our daily lives, cybercrime is on the rise, as evidenced by the fact that cyberattacks caused 92% of all data breaches in the first quarter of 2022. Staying current with cybersecurity trends and laws is crucial to combat these threats, which can significantly impact business development.

In 2023, the cybersecurity market is expected to see new trends, and businesses must be adequately prepared for any developments. Andrey Slastenov, Head of Web Security at Gcore, shares his insights on these trends in this article.

CLICK HERE TO VIEW FULL ARTICLE...

Thanks for checking out this volume of What's New With Haiku, your up-to-date resource for everything cybersecurity related. If you enjoyed this content, please consider subscribing to the newsletter and sharing it here on LinkedIn.