Short Takes – 6-7-23

Adversaries increasingly using vendor and contractor accounts to infiltrate networks. TalosIntelligence.com blog post. Pull quote: “Vendors may remotely access the environment intermittently or at unusual times, making it difficult for the information security team to establish an activity baseline for those accounts. How would an organization detect a time-of-day authentication anomaly if their contracted development team had members around the world working their own unique shifts? What about for a contractor who only connects remotely a few times a month based on their schedule? Or one that only logs in for ad hoc troubleshooting?”

Russia's Reliance on Trenches Leaves Troops Vulnerable. NewsWeek.com article. Pull quote: “In the meantime, Ukraine's military has been targeting fuel depots and other supply sites. Spencer called these strikes an "absolutely critical tactic" and said taking out supplies—from ammunition to food and water—will make being stationed in trenches unsustainable for the Russians.”

Ohio resident sought by scientists may have had ‘cryptic’ COVID strain for 2 years. TheHill.com article. Pull quote: ““How many cases are there like this? What are their symptoms? Is this related to long COVID?” Johnson said. “There are a lot of people who got COVID and never really got over it, and we don’t know why. It’s probable most of them are not chronic infections, but some of them might be, which would actually be good, because that’s theoretically treatable, and they actually get better.””

The Hill’s Morning Report — Debt ceiling fight sets stage for appropriations. TheHill.com article. Pull quote: “Some experts say the doomsday contingency of the debt ceiling fight is more evidence of polarization within U.S. politics, citing the fact that cooperation and compromise between the parties can only happen when the stakes are almost preposterously high.”

Incentives for Advanced Cybersecurity Investment. Federal Register FERC final rule correction notice. Summary: “In FR Doc. 2023–08929 [link added] appearing on pages 28348–28380, in the Federal Register of Wednesday, May 3, 2023, the following corrections are made:”

House floor paralyzed by conservative revolt. TheHill.com article. Pull quote: “But it’s the longer-term implications that might prove more significant, raising new questions about how McCarthy and GOP leaders can build up enough trust to unite the restive conference — before more consequential items need addressing, including the extension of government funding to prevent a shutdown.”