Today the Cyber Safety Review Board releases the findings of its second review, focused on the activities carried out by a criminal group called Lapsus$. Learn more here ⬇️🧵 1/11 https://t.co/HS4l1uzRagdhs.gov/news/2023/08/1…
Lapsus$ wasn’t a gang of master hackers. Some were teenagers. Their tactics, though, allowed them to consistently break into the most well-defended companies evading industry-standard security tools. 2/11

The CSRB conducted an exhaustive review of the events surrounding the December 2021 disclosure of a vulnerability in #Log4j, which led to one of the most intensive cybersecurity responses in history. Highlights from the report 🧵 1/ #Log4j is one of the most serious software vulnerabilities ever. It’s an endemic vulnerability and unpatched versions will remain in systems for years to come, perhaps a decade or longer. The #Log4j event is not over. Risk remains and network defenders must stay vigilant. 2/

Today the Cyber Safety Review Board is proud to release its first-ever report on the #Log4j vulnerability. Learn more ⬇️ cisa.gov/sites/default/… The CSRB is a ground-breaking public-private partnership. Never before have industry and government #cyber leaders come together in this way to review serious incidents, identify what happened & advise the entire community on how we can do better in the future.

Last week, I was in Qatar and the UAE for important engagements to expand security cooperation between the United States and each nation, and to advance key homeland security arrangements and objectives. Read more 👇
dhs.gov/news/2022/07/1… I signed several arrangements with Prime Minister and Interior Minister @KBKAIThani to deepen @DHSgov security partnerships on aviation security and visa fraud, including support for Qatar’s preparations to host a safe and secure @FIFAWorldCup. dhs.gov/news/2022/07/0…