In The News

In a new cyber espionage campaign, China’s Volt Typhoon is suspected of exploiting a high-severity vulnerability in Versa SD-WAN software, posing a significant threat to U.S. critical infrastructure. The flaw, tracked as CVE-2024-39717, has allowed attackers to plant credential-harvesting web shells on affected networks. Doug Britton, Chief Strategy Officer at RunSafe Security, explains that this attack aligns with Volt Typhoon’s known tactics of targeting edge systems to infiltrate and exploit critical infrastructure. Britton emphasizes the urgency for secure-by-design approaches to mitigate such risks and future-proof technologies against both known and unknown vulnerabilities.

The FAA has proposed new cybersecurity rules to strengthen defenses against growing cyber threats targeting aviation systems, networks, and equipment. These rules require identifying vulnerabilities, assessing risks, and establishing response procedures for pilots. While RunSafe Security CEO Joseph Saunders supports the initiative, he emphasizes the need for further action to address unknown vulnerabilities and ensure long-term safety.

The FAA has proposed new cybersecurity regulations for airplanes, engines, and propellers due to their increasing connectivity to internal and external networks. These rules aim to standardize “special conditions” previously issued on a case-by-case basis, reducing certification complexity and costs. The proposal mandates identifying and mitigating cybersecurity risks, especially those that could impact flight safety. While experts support the move, some argue it doesn’t fully address protection against unknown vulnerabilities.

The FAA has proposed new cybersecurity regulations for future airplanes and critical aviation equipment, aiming to address vulnerabilities due to increasing connectivity, such as satellite communications and internet devices. The proposed rules would require design applicants to conduct security risk analyses and mitigate identified threats. These regulations seek to standardize cybersecurity criteria, reduce certification costs, and enhance safety. RunSafe Security CEO Joe Saunders praised the move but suggested it doesn’t fully address the need for multi-layer defenses against unknown vulnerabilities.

RunSafe Security, in partnership with CIQ, now provides the most advanced cybersecurity protection tools available for users of Rocky Linux. RunSafe Security’s patented Alkemist technology gives users the tools to defeat cyber attacks using cyber hardening technologies and is now integrated within CIQ’s platform, developed to deliver dedicated support options for enterprises and organizations using Rocky Linux.

“RunSafe Security is the pioneer of a patented cyberhardening transformation process designed to disrupt attackers and protect vulnerable embedded systems and devices. With the ability to make each device functionally identical but logically unique, RunSafe Security renders threats inert by eliminating attack vectors, significantly reducing vulnerabilities and denying malware the uniformity required to propagate. Headquartered in McLean, Virginia, with an office in Huntsville, Alabama, RunSafe Security’s customers span the critical infrastructure, IIoT, automotive, medical, and national security industries.”

Many organizations may question if there is sufficient protection for information that is to be shared with customer, new business partner or the general public. If a crucial system is compromised, what will be the business impact? For a security program to be effective, it must exhibit value to the business while preventing the traditional threats associated with the perception of security. Meet Joe Saunders, founder and CEO of RunSafe Security, pioneer of cyber hardening technology for embedded systems and devices and industrial control systems.

Data centers using Cisco routers with the IOS XR software need to be on alert. Cisco issued a warning last week that attackers were actively exploiting a vulnerability in the Cisco Discovery Protocol, part of a set of vulnerabilities called CDPwn.

“Making matters even worse, scanning tools often don’t catch these kinds of vulnerabilities, said Doug Britton, CTO at RunSafe Security.”