Postcards From The Rus

Reuters reporter Christopher Bing has reported a new 'probe' instantiated by the United States Federal Bureau of Investigation targeting a Rus-linked postcard (of-all-things) sent to FireEye, Inc. Chief Executive Officer Kevin Mandia after the information and cyber security consulting company unearthed the now known to be widespread attack on SolarWinds systems management products in both the private and public sectors.

'The postcard carries FireEye’s logo, is addressed to CEO Kevin Mandia, and calls into question the ability of the Milpitas, California-based firm to accurately attribute cyber operations to the Russian government. People familiar with Mandia’s postcard summarized its content to Reuters. It shows a cartoon with the text: “Hey look Russians” and “Putin did it!” ' - via Christopher Bing, reporting at Reuters

The Nonattribution Approximation →

via Jordan Drysdale, writing at the Black Hills Infosec blog, regales us with a well attributed post, detailing a fucntional non-attribution hardware and software package... Today's Must Read.

Fingered →

Relatively new fingerprinting techniques were brought to my attention last week (H/T), that (reportedly) focus on the identification of browser users and utilization across multiple application deployments. Enjoy.

Sunday Security Maxim →

“Accountability Maxim: Organizations that talk a lot about holding people accountable for security will never have good security. Security needs to be motivated, not threatened.”

Excerpt From: Roger Johnston. “Security Sound Bites: Important Ideas About Security From Smart-Ass, Dumb-Ass, and Kick-Ass Quotations.”