The National Security Agency (NSA), Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and international allies have published a new Cybersecurity Advisory (CSA) titled "Russian Military Cyber Actors Target US and Global Critical Infrastructure." It details the malicious activity attributed to cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155). This article continues to discuss the new CSA on Russian military cyber actors.

To fill over half a million job openings in cyber, technology and AI, the White House Office of the National Cyber Director put out a new program to fill the shortfalls. The program called Service for America aims to reach job candidates without formal backgrounds in computer science and engineering degrees. This effort as well as a national cyber workforce and education strategy that came out in July are part of the push to upgrade workforce skills to help prevent cyberattacks.

Three men pleaded guilty in a British court to running an online criminal service called "OTPAgency," advertised to evade Multi-Factor Authentication (MFA) defenses for banks such as HSBC, Lloyds, and Monzo. They were the administrators of OTPAgency, a subscription-based service that helps fraudsters socially engineer targets, obtain One-Time Passcodes (OTPs), drain victims' bank accounts, and more. The service targeted the information of over 12,500 people. This article continues to discuss the automated service that helped subscribers trick victims into sharing OTPs.

The US Department of Homeland Security (DHS) Science and Technology Directorate (S&T) has made a Request for Information (RFI) from commercial port operators in order to advance the Directorate's Maritime Port Resiliency and Security Research Testbed project. This project explores vulnerabilities in US ports as well as the effectiveness of current protections and mitigations. S&T will use the information it receives to make actionable cybersecurity recommendations for the maritime port industry.

A new report by the Atlantic Council's Cyber Statecraft Initiative and researchers at American University highlights that spyware vendors can evade sanctions partly because of a complex network of interrelated entities and different jurisdictions. Hack-for-hire services and spyware tools have come under fire in recent months as many countries use them to bolster their legal response to human rights and security violations. This article continues to discuss the spyware landscape and the Atlantic Council's anti-spyware policy recommendations.

"Tropic Trooper," a China-linked Advanced Persistent Threat (APT) group, is conducting an espionage campaign targeting government entities in the Middle East. The group itself has targeted government, healthcare, transportation, and high-tech sectors in Taiwan, the Philippines, and Hong Kong since 2011. Their current effort began in June 2023, targeting government entities that publish human rights studies in the Middle East related to the Israel-Hamas war.