# data[].attributes.headline
This article explains CISA's first emergency directive for dealing with an ongoing DNS attack affecting North America, Europe, and the Middle East. Attackers would steal credentials, and would replace website with their own code. Encryption certificates were also stolen which made it possible to unencrypt the data.  With multiple levels of authentication this would be less likely to happen to Gov websites. 

# data[].attributes.subject
This article explains CISA's first emergency directive for dealing with an ongoing DNS attack affecting North America, Europe, and the Middle East. Attackers would steal credentials, and would replace website with their own code. Encryption certificates were also stolen which made it possible to unencrypt the data.  With multiple levels of authentication this would be less likely to happen to Gov websites. 

# data[].attributes.attachment_link.readable_text
The Department of Homeland Security's newly created Cybersecurity and Infrastructure Security Agency (CISA) issued its first-ever emergency directive on Tuesday, instructing federal government agencies to take preventative measures against an ongoing DNS hijacking campaign that has recently affected several executive branch domains.

Cisco Systems' Talos research unit first reported on the DNS infrastructure tampering in November 2018. The attacks, which FireEye has tentatively attributed to Iran-sponsored actors, have hit targets not only in North America, but also in Middle East and North Africa and Europe.

In a typical scenario, the attackers compromise or steal credentials that allow them to access a specific organization's DNS records. They then modify those records by replacing the organization's legitimate website address with a malicious address, where unsuspecting site visitors will be redirected. The perpetrators also obtain valid encryption certificates for the target's domain names, which allows them to decrypt any sensitive data that gets redirected to them.

Under authorities granted by Congress in the Cybersecurity Act of 2015, CISA responded with Emergency Directive 19-01, which orders federal agencies to audit their public DNS records for all authoritative and secondary DNS servers to ensure users are directed to the correct online destination. To further mitigate risk, agencies are also to change DNS account passwords, add multi-factor authentication as a security feature. Agency officials have until Feb. 5 to comply.

The directive also states that within 10 business days, CISA will "begin regular delivery of newly added certificates to Certificate Transparency (CT) logs for agency domains..." Agencies must then respond by monitoring CT log data for any unauthorized certificates.

In turn, CISA will provide technology assistance to agencies that discover any anomalous DNS records.

The Cybersecurity and Infrastructure Security Agency was formed on Nov. 18, 2018 when President Donald Trump signed into law the Cybersecurity and Infrastructure Security Agency Act of 2018, which redesignated the National Protection and Programs Directorate (NPPD) as CISA.

In a blog post on Thursday, CISA Director Christopher Krebs explained why the threat prompted his agency to deliver a directive. "We know an active attacker is targeting government organizations," wrote Krebs. "Using techniques that aren't especially innovative, we know they can intercept and manipulate legitimate traffic, make services unavailable or cause delay, harvest information like credentials or emails, or cause a range of other malicious activities."

"We know that this type of attack isn't something many organizations monitor for or have tight controls around," he continued. We know an active attacker is targeting government organizations. "Because it's our responsibility to take actions to protect federal systems, we felt an urgent response was required to address the risk."

# data[].attributes.attachment_link.title
DHS issues emergency directive to address DNS hijacking campaign

# data[].attributes.attachment_link.description
The Department of Homeland Security's newly created Cybersecurity and Infrastructure Security Agency (CISA) issued its first-ever emergency directive on Tuesday, instructing federal government agencies to take preventative measures against an ongoing DNS hijacking campaign that has recently affected several executive branch domains. Cisco Systems' Talos research unit first reported on the DNS infrastructure tampering in November 2018.

# data[].attributes.headline
Cyberscammers Attack during hurricane (Group 9)

# data[].attributes.subject
Cyberscammers Attack during hurricane (Group 9)

# data[].attributes.body
The is a short article talking about some of the phishing emails going around trying to take advantage of the disaster. Just goes to show there are people trying to take advantage of people even when they've already been knocked down so it's good to know to look for it after hurricane's since we live in Florida.

https://www.scmagazine.com/home/news/cyber-scammers-using-hurricane-florence-as-a-hook-for-malicious-emails/

# data[].attributes.headline
Philadelphia Eagles are the NFL team most often referenced in credentials (Group 6)

# data[].attributes.subject
Philadelphia Eagles are the NFL team most often referenced in credentials (Group 6)

# data[].attributes.body
In his September 10th article, “Pass’ words: Philadelphia Eagles are the NFL team most often referenced in credentials,” Bradley Barth highlights how die-hard football fans, like many other end users, tend to use common and easily remembered words when choosing a password. Unfortunately, choosing a password that is easy to remember oftentimes means choosing a password that is easy to guess and leaves an individual at risk. Recognizing previous instances where such a common practice has caused individuals’ accounts to be compromised and using stronger criteria when setting up one’s own accounts is one of the easiest ways someone can protect themselves.”

Passwords are a big deal mostly because they defend your personal and private information but also because they are a part of you. That’s why having a strong password is for the best. That being said using the same password repeatedly, strong or not for multiple networks and emails is a bad thing. One account could be compromised without the user’s knowledge which would put all your other accounts at risk before the website may be able to alert the user of this breach.

It is not uncommon to want to use something important to you in your password that you can remember, but having such a simplistic password is too high of a risk. It is best to understand the cardinal rules about passwords: 1.) a password should include capital and lowercase letters, numbers, and symbols if possible. and 2.) the longer the password, the harder it is to crack. If you are intent in using your team’s name, then consider adding symbols and randomized letters and numbers around the word. You can also replace i’s with 1’s, and the letter o with the number 0, as well as a’s with @’s. Another smart consideration is to have a small amount of designated access points that have more than read-only settings, and notifications if an unregistered account attempts to access your account. You can still support your team, but how are you going to buy those tickets if a hacker wipes your account clean?

https://www.scmagazine.com/home/news/pass-words-philadelphia-eagles-are-the-nfl-team-most-often-referenced-in-credentials/

# data[].attributes.headline
Nearly one-third of breached companies reported job losses after data breach (Group 4)

# data[].attributes.subject
Nearly one-third of breached companies reported job losses after data breach (Group 4)

# data[].attributes.body
This article is about a survey done that talks about the job losses that occur after a data breach with a company. A relatively large percentage of jobs in a company are lost on average to cover the costs of a data breach for larger companies. It just goes to show that access control is a very important factor to consider and try to secure when security professionals design a company's security policies.

https://www.scmagazine.com/home/news/survey-nearly-one-third-of-breached-companies-reported-job-losses-after-data-breach/

# data[].attributes.headline
Hackers steal data on 380,000 British Airways customers (Group 4)

# data[].attributes.subject
Hackers steal data on 380,000 British Airways customers (Group 4)

# data[].attributes.body
This article shows that even major multinational corporations still struggle with limiting access. They are unsure of how the hackers managed to steal the data at this time. The extent of the breach is also not yet know, however, they do not believe that any passports were leaked.

https://www.scmagazine.com/home/news/hackers-steal-data-on-380000-british-airways-customers/

# data[].attributes.headline
Amazon Employees Allegedly Sharing Internal Data (Group 3)

# data[].attributes.subject
Amazon Employees Allegedly Sharing Internal Data (Group 3)

# data[].attributes.body
This article shows the security concerns beyond user authentication, as humans prove susceptible to bribery.  Amazon employees are being investigated for sharing internal data as well as deleting negative product reviews and reinstating users who have had their accounts removed.  Despite needing to be authorized to access information, it is difficult to have complete control over secure data, when monitoring of employees can only be implemented in terms of business practices, and simple exterior communications can dissolve the practices so painstakingly put into place.
https://www.scmagazine.com/home/news/report-amazon-employees-under-investigation-for-allegedly-sharing-internal-data-with-merchants/

# data[].attributes.headline
Chase ‘glitch’ grants customers access to random accounts (Group 5)

# data[].attributes.subject
Chase ‘glitch’ grants customers access to random accounts (Group 5)

# data[].attributes.body
A glitch that is thought to have occurred within Chase Bank's mobile app allowed some users to accidentally access other users accounts when attempting to log in to their own account. However, their communication director stated a very small number of customers were affected and the issue only lasted from 6:30pm-9pm.

https://www.scmagazine.com/home/network-security/chase-glitch-grants-customers-access-to-random-accounts/

# data[].attributes.headline
Interpol warns IoT devices at risk(Group 8)

# data[].attributes.subject
Interpol warns IoT devices at risk(Group 8)

# data[].attributes.body
This article said crime is so high everywhere you turn. You think you are safe and boom you've been hacked. Certifying those IOT devices would be a good idea, but people are always figuring out ways to steal.

https://www.scmagazine.com/home/news/iot/interpol-warns-iot-devices-at-risk/

# data[].attributes.headline
Two keyless entry door locks vulnerable to unauthenticated requests (Group 2)

# data[].attributes.subject
Two keyless entry door locks vulnerable to unauthenticated requests (Group 2)

# data[].attributes.body
This article explains that hackers were able to navigate around the authorizartion process in two keyless entry door locks. The hackers were also able to produce their own RFID badges and authenticate them by sending signals and gaining unauthorized access to the user's phone.

https://www.scmagazine.com/home/news/two-keyless-entry-door-locks-vulnerable-to-unauthenticated-requests/

# data[].attributes.headline
New standard accepted by Federal Energy Regulatory Commission for critical infrastructure protection (Group 1)

# data[].attributes.subject
New standard accepted by Federal Energy Regulatory Commission for critical infrastructure protection (Group 1)

# data[].attributes.body
Our group chose this article because it directly relates to the concept of access control. The government has updated their security regarding critical infrastructure protection standards. This in theory should reduce the vulnerabilities that plague the american power grid system by limiting what devices have access to the ability to alter critical infrastructure properties. These measures also put in place policy for contractors working with the grid to respond to breaches in a timely manner. This new reliability standard was approved in April of this year.
https://www.scmagazine.com/home/network-security/new-standard-accepted-by-federal-energy-regulatory-commission-for-critical-infrastructure-protection/

# data[].attributes.headline
New standard accepted by Federal Energy Regulatory Commission for critical infrastructure protection (Group 1)

# data[].attributes.subject
New standard accepted by Federal Energy Regulatory Commission for critical infrastructure protection (Group 1)

# data[].attributes.headline
Wisconsin county clerk reportedly accused of local government breach affecting 250K-plus individuals (Group 11)

# data[].attributes.subject
Wisconsin county clerk reportedly accused of local government breach affecting 250K-plus individuals (Group 11)

# data[].attributes.body
This article details how one individual was able to use their internal privileges to gain unauthorized access to confidential local government information.  This is a perfect example of why P.O.L.P is important to limit individuals access level.  The employee used a keylogger to capture from county computers. As a remedy they have limited control/or authorize access to on designated individual.

https://www.scmagazine.com/home/news/cybercrime/wisconsin-county-clerk-reportedly-accused-of-local-government-breach-affecting-250k-plus-individuals/

# data[].attributes.headline
Intel Flaw allows admin Authorization to systems through bios with default Admin password (Group 7)

# data[].attributes.subject
Intel Flaw allows admin Authorization to systems through bios with default Admin password (Group 7)

# data[].attributes.body
Article explains that anyone can gain remote access to a system with any special software if they are able to physically login to the bios of the machine. The article goes into more detail of the simple attack, however the the solution to the "Evil Maid" attack is to be sure to change the default bios password so that malicious persons can't not gain auther
https://www.komando.com/happening-now/437579/new-intel-flaw-allows-hackers-full-remote-access-to-network-computers