ZeroFox Cyber Intelligence Daily Brief

ZeroFox Cyber Intelligence Daily Brief - January 7, 2024

ZeroFox Intelligence collects, curates, and analyzes information derived from open and proprietary sources. Here is today’s daily roundup to give you and your clients an advantage over the adversary.

Brief Highlights

Pentagon Wants Feedback on Revised Cybersecurity Maturity Model Certification Program
Hackers Attack U.K.’s Nuclear Waste Services Through LinkedIn
Russian Intelligence Hack Webcams in Kyiv to Aid Missile Strikes

Pentagon Wants Feedback on Revised Cybersecurity Maturity Model Certification Program

The U.S. Department of Defense (DoD) is seeking comments from the interested public on a new proposal under the ambit of its Cybersecurity Maturity Model Certification (CMMC) Program. The proposal relates to a mechanism to ensure defense contractors and subcontractors have implemented necessary security measures for specific priority programs. The department will receive the comments till February 26, 2024.

Hackers Attack U.K.’s Nuclear Waste Services Through LinkedIn

The United Kingdom’s Radioactive Waste Management (RWM) company recently faced a cyberattack attempt that targeted the organization through LinkedIn. The RWM manages the 50 billion GBP Geological Disposal Facility (GDF) project, which aims to create an underground nuclear waste repository in the United Kingdom. Specific details, whether it involved phishing or an attempt to trick employees into installing malware, are unknown. The attack was detected and thwarted by the company's multi-layered defense systems, preventing unauthorized access.

Russian Intelligence Hacks Webcams in Kyiv to Aid Missile Strikes

A recent missile strike on Kyiv, aided by two webcams in the Ukranian capital city hacked by Russian agents, has evoked concerns among Ukraine’s security agencies. The Security Service of Ukraine (SSU) has stated that Russian intelligence services gained operational control of the two webcams, both of which were situated in residential areas, to monitor the surroundings, collect data, and “adjust strikes on Kyiv.” The SSU has also asked webcam owners and operators to restrict broadcasts from their devices to prevent Russian intelligence from further using the feeds for military surveillance against strategic targets.