[The security box] US to increase scrutiny on cryptocurrency, federal contractors in effort to slow hacking

Jared Rimer jaredrimer at 986themix.com
Fri Oct 8 13:17:15 EDT 2021


www.grc.com/securitynow will take you directly to the security now page.

Jared Rimer
Check out my shows on 986 the mix. www.986themix.com/schedule for more 
info. Shows are on Wednesdays, Saturdays and Sundays
Wednesday's show is on the independent channel. Check schedule for time
www.jaredrimer.net for my other site.

On 10/8/2021 8:58 AM, Jennifer Martinez via Thesecuritybox wrote:
> 
> What is the URL exactly? Web address? Www.GRC.org?
> Sent from Yahoo Mail on Android 
> <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature>
> 
>     On Thu, Oct 7, 2021 at 12:21 PM, Jared Rimer via Thesecuritybox
>     <thesecuritybox at 986themix.com> wrote:
>     If you want a good starting point, start at the beginning at episode 1,
>     going back to March 2006.  You'll have to do that through GRC's web
>     site
>     though as the main RSS only holds 10 or so at a time.  It walks you
>     through how the Internet works, a discussion of honeypots and lots more.
> 
>     Jared Rimer
>     Check out my shows on 986 the mix. www.986themix.com/schedule for more
>     info. Shows are on Wednesdays, Saturdays and Sundays
>     Wednesday's show is on the independent channel. Check schedule for time
>     www.jaredrimer.net for my other site.
> 
>     On 10/7/2021 12:15 PM, Jennifer Martinez via Thesecuritybox wrote:
>      > I will try to pull up to 250 of SN if my player will let me.
>     Looks like
>      > 1 episode I can learn from. We all can learn something from. SN
>     but I
>      > was wondering where I should begin. I needed a good starting place.
>      > Thank you so much.
>      >
>      > Sent from Yahoo Mail on Android
>      >
>     <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers⁡_wl=ym⁡_sub1=Internal⁡_sub2=Global_YGrowth⁡_sub3=EmailSignature
>     <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature>>
>      >
>      >    On Thu, Oct 7, 2021 at 11:27 AM, Jared Rimer via Thesecuritybox
>      >    <thesecuritybox at 986themix.com
>     <mailto:thesecuritybox at 986themix.com>> wrote:
>      >    Jennifer,
>      >
>      >    Crypto can't be tracked unless its through the traceable ledger of
>      >    transactions.  You only see the amount, and the wallet details
>     from
>      >    what
>      >    I understand of this ordeal.  With that said, I don't know how it
>      >    can be
>      >    taxed since it isn't owned by anyone.  It was created by a
>     guy, but I
>      >    don't think he's involved in it anymore.  Security Now talks
>     about this
>      >    in full detail I believe in episode 250 which was done many
>     years ago.
>      >    A lot has changed by now, but it is not taxable because it can't.
>      >
>      >    Jared Rimer
>      >    Check out my shows on 986 the mix. www.986themix.com/schedule
>     for more
>      >    info. Shows are on Wednesdays, Saturdays and Sundays
>      >    Wednesday's show is on the independent channel. Check schedule
>     for time
>      >    www.jaredrimer.net for my other site.
>      >
>      >    On 10/7/2021 5:02 AM, Jennifer Martinez via Thesecuritybox wrote:
>      >      > Good morning! No, not happy to be up so early. But since I
>     am, I
>      >    decided
>      >      > to read some. Even at 4 a.m. my brain is on. Like the
>     Energizer
>      >    Bunny my
>      >      > brain keeps on going and going. Yes, I even thought of a great
>      >    question.
>      >      > Crypto, since it is so dirty...its probably not a bad
>     idea...to TAX.
>      >      > Crypto cash like you would tax most other income. Sorry folks.
>      >    I'm not
>      >      > making sense this early. Perhaps, if.crypto. becomes
>     taxable, the
>      >      > criminal community may be deterred from using it? Then, if
>     taxes on
>      >      > crypto are not paid...and we all know...dirty criminals do
>     NOT,
>      >    most of
>      >      > them WILL NOT PAY TAXES. That being said, they could later be
>      >    charged
>      >      > with TAX EVASION and go away for not paying raves on their
>     crypto
>      >    riches.
>      >      > Sent from Yahoo Mail on Android
>      >      >
>      >   
>     <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers⁡_wl=ym⁡_sub1=Internal⁡_sub2=Global_YGrowth⁡_sub3=EmailSignature
>     <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers⁡_wl=ym⁡_sub1=Internal⁡_sub2=Global_YGrowth⁡_sub3=EmailSignature>
>      >   
>     <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers⁡_wl=ym⁡_sub1=Internal⁡_sub2=Global_YGrowth⁡_sub3=EmailSignature
>     <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature>>>
>      >      >
>      >      >    On Wed, Oct 6, 2021 at 9:22 PM, Jared Rimer via
>     Thesecuritybox
>      >      >    <thesecuritybox at 986themix.com
>     <mailto:thesecuritybox at 986themix.com>
>      >    <mailto:thesecuritybox at 986themix.com
>     <mailto:thesecuritybox at 986themix.com>>> wrote:
>      >      >
>      >      >    US to increase scrutiny on cryptocurrency, federal
>     contractors in
>      >      >    effort to slow hacking
>      >      >    Cyberscoop »   /  Tim Starks
>      >      >
>      >      >
>      >   
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/>
>      >   
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/>>>
>      >      >
>      >      >    U.S. officials unveiled a suite of cybersecurity
>     initiatives
>      >      >    Wednesday, from cracking down on illicit cryptocurrency
>     usages to
>      >      >    increasing transparency about data breaches, as part of
>     an ongoing
>      >      >    White House effort to slow rampant cybercrime.
>      >      >
>      >      >    The Justice Department signaled it will increase its
>     focus on
>      >      >    illicit use of virtual money, which is frequently used in
>      >    ransomware
>      >      >    attacks, and move to punish federal contractors that
>     hide security
>      >      >    incidents. In a separate plan, the Transportation Security
>      >      >    Administration this year will require top air and rail
>      >      >    transportation companies to report cyberattacks to the
>     government,
>      >      >    name an internal cyber chief capable of corresponding
>     about cyber
>      >      >    incidents and develop a plan for recovering from attacks.
>      >      >
>      >      >    Deputy Attorney General Lisa Monaco unveiled two
>     initiatives: a
>      >      >    national cryptocurrency enforcement team and a civil
>     cyber fraud
>      >      >    initiative. Ransomware and cryptocurrency are
>     “inexorably linked”
>      >      >    because of the anonymity that cryptocurrency payments
>     help afford,
>      >      >    Monaco said at the Aspen Cyber Summit.
>      >      >
>      >      >    “We want to strengthen our capacity to dismantle the
>     financial
>      >      >    ecosystem that enables these criminal actors to
>     flourish, quite
>      >      >    frankly, and to profit from what they’re doing,” Monaco
>     said. “And
>      >      >    we’re going to do that by drawing on our cyber experts
>     and cyber
>      >      >    prosecutors are money laundering experts.”
>      >      >
>      >      >    Elsewhere, Department of Homeland Security Secretary
>     Alejandro
>      >      >    Mayorkas  announced the TSA requirements, which expand on
>      >      >    regulations the agency has already put in place for
>     pipeline
>      >      >    operators
>      >      >
>      >   
>     <https://www.cyberscoop.com/tsa-cyber-regulations-colonial-pipeline/
>     <https://www.cyberscoop.com/tsa-cyber-regulations-colonial-pipeline/>
>      >   
>     <https://www.cyberscoop.com/tsa-cyber-regulations-colonial-pipeline/
>     <https://www.cyberscoop.com/tsa-cyber-regulations-colonial-pipeline/>>>.
>      >      >
>      >      >    The plans are the latest moves by the Biden
>     administration to take
>      >      >    action on ransomware
>      >    <https://www.cyberscoop.com/tag/ransomware/
>     <https://www.cyberscoop.com/tag/ransomware/>
>      >    <https://www.cyberscoop.com/tag/ransomware/
>     <https://www.cyberscoop.com/tag/ransomware/>>>
>      >      >    after major attacks this summer on Colonial Pipeline,
>     JBS and
>      >      >    Kaseya. They come days after the White House announced
>     another
>      >    plan
>      >      >    to convene 30 nations to tackle ransomware collectively
>      >      >
>      >   
>     <https://www.cnn.com/2021/10/01/politics/blinken-cybersecurity-alliance/index.html
>     <https://www.cnn.com/2021/10/01/politics/blinken-cybersecurity-alliance/index.html>
>      >   
>     <https://www.cnn.com/2021/10/01/politics/blinken-cybersecurity-alliance/index.html
>     <https://www.cnn.com/2021/10/01/politics/blinken-cybersecurity-alliance/index.html>>>.
>      >      >
>      >      >    The second DOJ initiative will make use of the False
>     Claims Act,
>      >      >    which authorizes what Monaco deemed “very, very hefty
>     fines” for
>      >      >    government contractors, when they skirt federal cyber
>      >    guidelines or
>      >      >    fail to disclose breaches. The focus comes after
>     suspected Russian
>      >      >    hackers breached the federal contractor SolarWinds
>      >      >
>      >   
>     <https://www.cyberscoop.com/solarwinds-cyber-command-dhs-russia/
>     <https://www.cyberscoop.com/solarwinds-cyber-command-dhs-russia/>
>      >   
>     <https://www.cyberscoop.com/solarwinds-cyber-command-dhs-russia/
>     <https://www.cyberscoop.com/solarwinds-cyber-command-dhs-russia/>>> in
>      >      >    2020, using the federal contractor as a foothold into
>     nine U.S.
>      >      >    agencies.
>      >      >
>      >      >    “For too long, companies have chosen silence, under the
>     mistaken
>      >      >    belief that it’s less risky to hide a breach than to
>     bring it
>      >      >    forward and to report it. Well, that changes today,”
>     she said. “We
>      >      >    are announcing for the first time that we will use our
>     civil
>      >      >    enforcement tools to pursue companies — those who are
>     government
>      >      >    contractors and receive federal funds — when they fail
>     to follow
>      >      >    required cybersecurity standards, because we know that
>     puts all of
>      >      >    us at risk.”
>      >      >
>      >      >    The federal government won’t tolerate “those who are
>     entrusted
>      >    with
>      >      >    government dollars, who are trusted to work on sensitive
>      >    government
>      >      >    systems, [who] fail to follow required cybersecurity
>     standards,”
>      >      >    Monaco said.
>      >      >
>      >      >    She also said the department would take steps to protect
>      >      >    whistleblowers who report those failings. Monaco also
>     wrote an
>      >    op-ed
>      >      >    published by CNBC Wednesday
>      >      >
>      >   
>     <https://www.cnbc.com/2021/10/06/deputy-ag-congress-must-create-standard-to-encourage-companies-to-report-cyberattacks.html
>     <https://www.cnbc.com/2021/10/06/deputy-ag-congress-must-create-standard-to-encourage-companies-to-report-cyberattacks.html>
>      >   
>     <https://www.cnbc.com/2021/10/06/deputy-ag-congress-must-create-standard-to-encourage-companies-to-report-cyberattacks.html
>     <https://www.cnbc.com/2021/10/06/deputy-ag-congress-must-create-standard-to-encourage-companies-to-report-cyberattacks.html>>>
>      >      >    encouraging Congress to act on legislation requiring
>     companies to
>      >      >    report attacks.
>      >      >
>      >      >    Speaking at the Billington CyberSecurity Summit,
>     Mayorkas unveiled
>      >      >    the requirements on air and transport companies. TSA
>     put in place
>      >      >    similar mandates on pipeline operators in May following the
>      >    Colonial
>      >      >    Pipeline ransomware attack
>      >      >
>      >   
>     <https://www.cyberscoop.com/colonial-pipeline-ransomware-senate-hack/ <https://www.cyberscoop.com/colonial-pipeline-ransomware-senate-hack/
>      ><https://www.cyberscoop.com/colonial-pipeline-ransomware-senate-hack/ <https://www.cyberscoop.com/colonial-pipeline-ransomware-senate-hack/>>>.
>      >      >
>      >      >    “Mirroring those steps … TSA is now laying the
>     foundation for more
>      >      >    secure and resilient aviation and surface transportation
>      >    sector,” he
>      >      >    said.
>      >      >
>      >      >    Mayorkas signaled future plans for more such rules:
>     “TSA will
>      >    expand
>      >      >    the covered entities gradually to other relevant
>     entities in
>      >      >    consider additional measures.”
>      >      >
>      >      >    A rail industry group, the Association of American
>     Railroads, took
>      >      >    issue with Mayorkas’ rollout of the plan, saying
>     industry only had
>      >      >    three days to evaluate and respond to the proposal,
>     which included
>      >      >    many things the industry is doing already, according to
>     the group.
>      >      >
>      >      >    “AAR hopes the substantive comments provided will be
>     thoroughly
>      >      >    considered in the decision on whether to proceed with the
>      >    directive
>      >      >    and to ensure any actions taken enhance, not hinder,
>     coordinated
>      >      >    cybersecurity efforts,” a spokesperson for the group said.
>      >      >
>      >      >    The second DOJ initiative and new TSA steps reflect the
>      >    ongoing push
>      >      >
>      >   
>     <https://www.cyberscoop.com/warren-ross-ransomware-notification-bill/ <https://www.cyberscoop.com/warren-ross-ransomware-notification-bill/
>      ><https://www.cyberscoop.com/warren-ross-ransomware-notification-bill/ <https://www.cyberscoop.com/warren-ross-ransomware-notification-bill/>>>
>      >      >    within the Biden administration and in Congress to
>     mandate that a
>      >      >    larger swath of companies report major hacks and
>      >    cyberattack-related
>      >      >    information to the federal government.
>      >      >
>      >      >    *Updated, 10/6/21:* /to include commentary from the
>     Association of
>      >      >    American Railroads./
>      >      >
>      >      >    The post US to increase scrutiny on cryptocurrency, federal
>      >      >    contractors in effort to slow hacking
>      >      >
>      >   
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/>
>      >   
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/>>>
>      >      >    appeared first on CyberScoop
>     <https://www.cyberscoop.com <https://www.cyberscoop.com>
>      >    <https://www.cyberscoop.com <https://www.cyberscoop.com>>>.
>      >      >
>      >      >
>      >      >
>      >      >    Original Article:
>      >      >
>      >
>     https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/>
>      >   
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/>>
>      >      >
>      >   
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/>
>      >   
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/
>     <https://www.cyberscoop.com/lisa-monaco-alejandro-mayorkas-doj-tsa-cryptocurrency-air-rail-cyber-fraud-initiative/>>>
>      >      >
>      >      >
>      >      >
>      >      >    Jared Rimer
>      >      >    Check out my shows on Saturdays and Sundays right here
>     on the mix.
>      >      >    Www.986themix.com for more details. Jared Rimer
>      >      >    Check out my show on www.986themix.com from 7 pm to 10
>     pm where we
>      >      >    play Magnatune and other indipendant artists
>      >      >    Thank you for subscribing to the Security Box email
>     list.  If you
>      >      >    need list management options, please see the link for a
>     section to
>      >      >    log in, manage your subscription, and possibly other
>     options that
>      >      >    may be of interest.
>      >      >
>      >      >    Need help?  write the owner, and the owner will get
>     back to you as
>      >      >    quickly as possible.  Be clear on what you need.
>      >      >
>      >      >    Thanks for subscribing!
>      >      >
>      >      >    --
>      >      >    Thesecuritybox mailing list
>      >      > Thesecuritybox at 986themix.com
>     <mailto:Thesecuritybox at 986themix.com>
>      >    <mailto:Thesecuritybox at 986themix.com
>     <mailto:Thesecuritybox at 986themix.com>>
>      >    <mailto:Thesecuritybox at 986themix.com
>     <mailto:Thesecuritybox at 986themix.com>
>      >    <mailto:Thesecuritybox at 986themix.com
>     <mailto:Thesecuritybox at 986themix.com>>>
>      >      >
>      >
>     http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com>
>      >   
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com>>
>      >      >
>      >   
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com>
>      >   
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com>>>
>      >      >
>      >      >
>      >      > Thank you for subscribing to the Security Box email list. 
>     If you
>      >    need list management options, please see the link for a section to
>      >    log in, manage your subscription, and possibly other options that
>      >    may be of interest.
>      >      >
>      >      > Need help?  write the owner, and the owner will get back
>     to you
>      >    as quickly as possible.  Be clear on what you need.
>      >      >
>      >      > Thanks for subscribing!
> 
>      >
>      >      >
>      >
>      >    Thank you for subscribing to the Security Box email list.  If you
>      >    need list management options, please see the link for a section to
>      >    log in, manage your subscription, and possibly other options that
>      >    may be of interest.
>      >
>      >    Need help?  write the owner, and the owner will get back to you as
>      >    quickly as possible.  Be clear on what you need.
>      >
>      >    Thanks for subscribing!
>      >
>      >    --
>      >    Thesecuritybox mailing list
>      > Thesecuritybox at 986themix.com
>     <mailto:Thesecuritybox at 986themix.com>
>     <mailto:Thesecuritybox at 986themix.com
>     <mailto:Thesecuritybox at 986themix.com>>
>      >
>     http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com>
>      >   
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com>>
>      >
>      >
>      > Thank you for subscribing to the Security Box email list.  If you
>     need list management options, please see the link for a section to
>     log in, manage your subscription, and possibly other options that
>     may be of interest.
>      >
>      > Need help?  write the owner, and the owner will get back to you
>     as quickly as possible.  Be clear on what you need.
>      >
>      > Thanks for subscribing!
>      >
> 
>     Thank you for subscribing to the Security Box email list.  If you
>     need list management options, please see the link for a section to
>     log in, manage your subscription, and possibly other options that
>     may be of interest.
> 
>     Need help?  write the owner, and the owner will get back to you as
>     quickly as possible.  Be clear on what you need.
> 
>     Thanks for subscribing!
> 
>     -- 
>     Thesecuritybox mailing list
>     Thesecuritybox at 986themix.com <mailto:Thesecuritybox at 986themix.com>
>     http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com
>     <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com>
> 
> 
> Thank you for subscribing to the Security Box email list.  If you need list management options, please see the link for a section to log in, manage your subscription, and possibly other options that may be of interest.
> 
> Need help?  write the owner, and the owner will get back to you as quickly as possible.  Be clear on what you need.
> 
> Thanks for subscribing!
> 




More information about the Thesecuritybox mailing list