Sunday☕️

Time Is Money

Jul 28, 2024 • 7 min read

Trending:

KnowBe4 Cyber Threat
U.S. CENTCOM Activity

Week Recap:

President Joe Biden announced on Sunday that he will end his reelection campaign, responding to growing concerns within the Democratic Party about his ability to win a second term. At 81 years old, Biden's decision comes amid fears that his candidacy could jeopardize the party's chances in the upcoming November election. In a statement, Biden wrote, "I believe it is in the best interest of my party and the country for me to stand down and focus solely on fulfilling my duties as President for the remainder of my term." He added that he will speak more about his decision later this week.
Secret Service Director Kimberly Cheatle has resigned amid escalating pressure following a failed assassination attempt on former President Donald Trump in Butler, PA, last weekend, which highlighted critical vulnerabilities in the Secret Service's operations. On Monday, Cheatle appeared before Congress to address the incident, acknowledging that it was the “most significant operational failure in decades" for the agency. During the testimony, she faced intense questioning from both Republican and Democratic representatives.
On Tuesday, the first-ever spot Ethereum exchange-traded funds (ETFs) began trading in the U.S. after receiving final approval from the U.S. Securities and Exchange Commission (SEC). This significant milestone provides institutional and retail investors with regulated financial products for direct exposure to Ethereum, further embedding the cryptocurrency into traditional financial markets. The SEC's approval, following a thorough review, marks a growing acceptance of digital assets in regulated markets.
Meta has recently launched Llama 3.1, a new series of artificial intelligence models. This release includes Llama 3.1 405B, which is the largest and most capable open-source AI in the world. Llama, which stands for Large Language Model Meta AI, is designed to perform a wide range of tasks, from language translation to complex problem-solving. The latest version introduces significant improvements over its predecessors, such as a larger context length of 128K, support for eight languages, and enhanced reasoning abilities.
OpenAI announced the launch of SearchGPT, an AI-powered search engine designed to provide real-time access to information from the internet. This move places OpenAI in direct competition with Google's search engine, which has long dominated the market, as well as with Microsoft's Bing search. OpenAI has opened sign-ups for SearchGPT, currently in the prototype stage and being tested with a small group of users and publishers.
Apple Maps is now accessible on the web through a beta launched on Wednesday afternoon, allowing users to access driving and walking directions, as well as view ratings and reviews from a desktop or mobile browser. The web version, available at beta.maps.apple.com, offers many of the features found in the iOS app, such as viewing guides, ordering food directly from Maps, exploring cities, and obtaining business information.
On the day of the Olympics opening ceremony in Paris, France's train network was severely disrupted by a sabotage attack. At around 4 AM, assailants targeted and damaged high-speed railway cables leading into Paris by burning and cutting them. As a result, high-speed trains were forced to operate on regular-speed tracks, causing significant delays throughout the system. By the time commuters began their journeys, train stations were overcrowded with passengers. The French government announced that the disruptions would continue through the weekend, affecting approximately 800,000 people and preventing many from attending the opening ceremony.

KnowBe4 Cyber Threat:

KnowBe4, a U.S. security training company, discovered that it had mistakenly hired a North Korean hacker as a software engineer. The issue was identified when the hacker's company-issued Mac began loading malware immediately upon receipt. The Mac's security software detected the malware, prompting an investigation involving the FBI and Google’s security team Mandiant. This investigation revealed that the new hire, who had passed all interviews and background checks, was actually a North Korean posing as an IT worker.
The hacker manipulated session files and ran unauthorized software, including using a Raspberry Pi to load malware. Initially, the hacker claimed to be troubleshooting a router issue when contacted by KnowBe4’s IT team. Further investigation uncovered that the work computer had been shipped to an "IT mule laptop farm," which the hacker accessed via VPN. Fortunately, KnowBe4 was able to remotely contain the Mac before any internal systems were compromised.
This incident highlights the risks associated with remote hiring and the sophisticated tactics used by cybercriminals. It emphasizes the need for robust vetting processes, continuous security monitoring, and improved coordination between HR, IT, and security teams. KnowBe4 has advised other companies to conduct video interviews and thoroughly verify candidate references to prevent similar incidents. This case also aligns with previous US government warnings about North Korean hackers using stolen identities to secure remote jobs, thereby funding illegal activities and enabling further cyber attacks.

U.S. CENTCOM Activity:

In the past week, U.S. Central Command (CENTCOM) forces have conducted several successful operations against Iranian-backed Houthi forces in Yemen. These actions included the destruction of one UAV (uncrewed aerial vehicle) launcher, six UAVs, two missiles on launchers, and three uncrewed surface vessels (USVs). These operations took place in Houthi-controlled areas and off the coast of Yemen, where the identified weapons posed imminent threats to U.S. and coalition forces, as well as merchant vessels in the region.
The Houthis, officially known as Ansar Allah, are a decentralized insurgent group originating from Yemen’s Zaidi Shia Muslim minority. Their decentralized structure, characterized by various factions and local leaders operating semi-independently, makes it particularly challenging for their adversaries to effectively combat and neutralize them. This decentralization means that even if one faction or leader is targeted and neutralized, other factions can continue their operations independently. This structure complicates efforts to eliminate the group entirely, as there is no central command to dismantle.
The Houthis have been heavily supported by Iran, receiving military assistance, financial aid, and advanced weaponry. This support has allowed them to sustain a prolonged conflict against the Yemeni government and a coalition of Arab states led by Saudi Arabia. The Houthis have taken control of significant portions of Yemen, including the capital (Sana’s), and have engaged in activities such as launching missile and drone attacks on Saudi Arabia, targeting Yemeni government forces, and threatening international maritime routes in the Red Sea and Gulf of Aden.
CENTCOM, or U.S. Central Command, is one of the eleven unified combatant commands under the U.S. Department of Defense. It oversees U.S. military operations in the Middle East, Central Asia, and parts of South Asia, covering 20 countries from Egypt to Kazakhstan and Syria to Yemen. CENTCOM's mission is to promote regional security and stability, support U.S. national interests, and deter aggression through forward presence, security cooperation, and robust military capabilities. CENTCOM plays a critical role in coordinating and executing U.S. military strategy in this strategically vital and often volatile region.

Statistic: