status.spacehey.com/cm98jcn1p0… SpaceHey is dead. It's over. #spacehey #incident #outage

Website outage - Incident deta...

status.spacehey.com/cm98jcn1p0…

SpaceHey is dead. It's over.

Biting on one end of a curly vegetable stick can cause the other end to thrust itself up your nose in self defense.

And it briefly works, because biting does stop for a moment.

I'm looking for a #Tabletop #Cybersecurity incident exercise.
Idealy a sufficiently detailed scenario, similare to a (Solo) Adventure RPG Gamebook.

Any hints?

The #CISA Cybersecurity Scenarios https://www.cisa.gov/resources-tools/resources/cybersecurity-scenarios are going into this direction but contain too little details for me. I just have too little #Incident handling experience to create a coherent exercise which is addapted to participant actions.

Ransomware attack disrupts health system network in Micronesia's Yap state
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/ransomware-attack-disrupts-health-system-network-in-micronesia-s-yap-state-s-k-g-9-c/gD2P6Ple2L

Guide to Interpreting Security Incident #Announcements:

"extremely sophisticated attack" : The attackers put more time into the attack than we spent designing our defences.

"no evidence customer #data was accessed" : We lack audit records and the logs have been rotated out.

"due to a misconfiguration issue" : We deployed with default #insecure settings.

"possible for only a short window" : We didn't dig too deep to determine how far back the bug existed.

"crafted invalid request data" : We forgot to add input #validation.

"supplementary fix" : We didn't understand the problem as well as we thought, so our previous fix was insufficient.

"may have been exploited" : We're positive they got away with data, but they deleted our #logs.

"multiple threat actors" : Everyone was in our systems before we noticed.

"most customers are unaffected" : There are corner cases that aren't as #vulnerable.

"error in a third-party component" : We forgot to update our dependencies.

"could lead to remote code execution" : You're #p0wned.

"malicious activity has been observed" : The issue has already appeared in the press.

"review equipment inventory to verify if devices require other mitigations" : You need to buy new stuff.

"remotely exploited to allow authentication bypass" : We forgot to require #login for this function.

"not aware of any exploits in the wild" : The attackers aren't bragging on darkweb fora yet.

4 years ago this disaster gave us the chance to distinguish between real system administrators and those who just pretend to be.
Isn't it? @stefano
#ovh #cloud #incident

Bank of America reports data breach of third party document destruction vendor
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/bank-of-america-reports-data-breach-of-third-party-document-destruction-vendor-h-e-5-s-6/gD2P6Ple2L

A massive power outage has left 19000000 people without electricity. #chile #energies #incident #outage #online #internet #services #threats [ https://www.reuters.com/world/americas/power-outage-hits-vast-swaths-chile-largest-copper-mine-santiago-streets-2025-02-25/ ] #informatique

coastguard said it detained eight (8) mainland crew members of a cargo ship suspected of damaging an undersea communication cable #taiwan #undersea #incident #sea #cables #disruptions #outage #vessels #maritime [ https://www.reuters.com/world/asia-pacific/taiwan-detains-china-linked-cargo-ship-after-undersea-cable-disconnected-2025-02-25/ ]

The cause of the undersea cable breakage, whether due to intentional sabotage or an accident, is pending an investigation.

Hackers get hacked - Black Basta ransomware gang chat logs leaked
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/hackers-get-hacked-black-basta-ransomware-gang-chat-logs-leaked-1-q-j-9-d/gD2P6Ple2L

De ProRail incidentenbestrijding was nog nooit zo snel op de plek van het incident..

https://nos.nl/artikel/2555896-goederentrein-rijdt-tegen-prorail-busje-in-de-botlek

NorthBay Healthcare Corporation reports data breach exposing half a million people
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/northbay-healthcare-corporation-reports-data-breach-exposing-half-a-million-people-t-d-9-c-h/gD2P6Ple2L

IntelBroker claims breach of Hewlett Packard Enterprise, offers data for sale
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/intelbroker-claims-breach-of-hewlett-packard-enterprise-offers-data-for-sale-x-w-m-f-p/gD2P6Ple2L

Philippines National Bureau of Investigation (NBI) investigates claimed data breach and leak
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/philippines-national-bureau-of-investigation-nbi-investigates-claimed-data-breach-and-leak-z-f-4-6-1/gD2P6Ple2L

Akira ransomware gang claims breach of Italian company divimast
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/akira-ransomware-gang-claims-breach-of-italian-company-divimast-a-k-8-r-h/gD2P6Ple2L

Russian ISP Nodex confirms Ukrainian hackers breached and destroyed its network infrastructure
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/russian-isp-nodex-confirms-ukrainian-hackers-breached-and-destroyed-its-network-infrastructure-7-x-b-r-n/gD2P6Ple2L

Hackers claim breach of Gravy Analytics
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/hackers-claim-breach-of-gravy-analytics-a-2-r-4-v/gD2P6Ple2L