Threat actors may influence US midterm elections, DIB org attached with APT, an interesting approach to password expiration policies, an updated primer and review on cyber insurance, and Uber's CISO convicted on two counts related to breach actions - plus more thoughts on ethics.
<ul>
 <li>https://www.ic3.gov/Media/PDF/Y2022/PSA221006.pdf</li>
 <li>https://www.bleepingcomputer.com/news/security/hackers-stole-data-from-us-defense-org-using-impacket-covalentstealer/amp/</li>
 <li>https://www.helpnetsecurity.com/2022/10/04/mandatory-password-expiration-helping-or-hurting-password-security/</li>
 <li>https://www.csoonline.com/article/3643054/cyber-insurance-explained.amp.html</li>
 <li>https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html</li>
 <li>https://www.justice.gov/usao-ndca/press-release/file/1306781/download</li>
</ul>
 

--- 

Send in a voice message: https://anchor.fm/virtual-ciso-moment/message

VCM Quick Strike for Monday, October 10, 2022

The Virtual CISO Moment dives into the stories of information security, information technology, and risk management pros; what drives them and what makes them successful while helping small and midsized business (SMB) security needs. No frills, no glamour, no transparent whiteboard text, no complex graphics, and no script - just honest discussion of SMB information security risk issues. Quick strike and wrap up audio-only episodes drop Mondays and Fridays; Throwback Thursday episodes are repeats. email greg.schaffer@secondchancebook.org. A Second Chance Publishing, LLC podcast.