039| Deconstructing the Dukes: A Researcher's Retrospective of APT29

039| Deconstructing the Dukes: A Researcher's Retrospective of APT29

APT29, aka Cozy Bear or the Dukes, is a cyber espionage group whose misdeeds include famously hacking into the DNC servers in the run-up to the 2016 US election. Now, as the subject of MITRE's latest ATT&CK Evaluation, the group is in focus again. The Dukes are familiar to F-Secure's Artturi Lehtio, who extensively researched them in 2015. But hindsight is 20/20, and Artturi joins the show to discuss how his views on the group have changed since his research.

Also in this episode: How APT groups behave after being burned and why the Dukes are different; why calling them a single organization is too strong; and why published APT research has generally dwindled in recent years.

Links:

Episode 39 transcript

The Dukes: 7 Years of Russian Cyberespionage - F-Secure whitepaper

MITRE ATT&CK Evaluation: APT29

Operation Ghost - ESET

No Easy Breach by Matthew Dunwoody & Nick Carr - DerbyCon 2016

Dukes activity after their "return" in 2016 - Volexity

Jaksot(95)

086| Why showing value is more important for CISOs than ever

086| Why showing value is more important for CISOs than ever

CISOs find themselves at the forefront of safeguarding sensitive information, ensuring regulatory compliance, and protecting their organizations from constantly evolving cyber risks. Today, we are joi...

3 Tammi 202438min

085| NIST Cyber Security Framework V.2 – Help or Hindrance?

085| NIST Cyber Security Framework V.2 – Help or Hindrance?

The NIST Cyber Security Framework has helped secure organizations for nearly a decade and while it's proven to be an invaluable tool, it's gotten a bit long in the tooth for a cyber security landscape...

22 Marras 202344min

084| Let's Talk About Threats Baby

084| Let's Talk About Threats Baby

A successful cyber defense should protect an organization's critical assets from today's threats, not yesterday's. For this episode, we sat down with threat intelligence analysts Stephen Robinson and ...

1 Marras 202331min

083| Security by design for CISOs

083| Security by design for CISOs

The term Shifting Left has not been traditionally associated with cyber security. In this episode, WithSecure CISO Christine Bejerasco lays out the case for how shifting left can evolve beyond its ori...

9 Loka 20239min

082| Hyped and Hacked - AI in Cyber Security

082| Hyped and Hacked - AI in Cyber Security

As Mikko Hyppönen said recently, we are indeed in the midst of the hottest AI summer ever, and the hype level is off the charts. Yes, AI presents amazing opportunities, but unfortunately, also threats...

20 Syys 202313min

081| Mudge - the man, the myth, the mythbusting

081| Mudge - the man, the myth, the mythbusting

We have the pleasure of being joined by the one and only Peiter "Mudge" Zatko, network security expert, open-source programmer, writer, and hacker, with a rapid-fire discussion on some myths in the cy...

28 Elo 202312min

080| The Power Of Putting Security Outcomes First

080| The Power Of Putting Security Outcomes First

As security is primarily about stopping bad things from happening, victories are often silent. At the same time, failures are often very public, so how can organizations tell when their security i...

7 Elo 202316min

079|(Mind the) Detection and Response Gap

079|(Mind the) Detection and Response Gap

The time that an attacker spends on a network before attempting to achieve their objective is decreasing rapidly, making many organizations' typical detection and response solutions ineffective. Speed...

17 Heinä 202331min

Suosittua kategoriassa Liike-elämä ja talous

sijotuskasti
mimmit-sijoittaa
rss-rahapodi
psykopodiaa-podcast
hyva-paha-johtaminen
rss-oivalluksia-rahasta-elamasta
rss-rahamania
inderespodi
rss-lahtijat
ostan-asuntoja-podcast
rahapuhetta
oppimisen-psykologia
lakicast
rss-bisnesta-bebeja
rss-sisalto-kuntoon
rss-inderes
leadcast
mihin-sita-saastais
rss-rikasta-elamaa
rss-40-ajatusta-aanesta