Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
Last week I was invited to provide input to a tabletop exercise for city-level crisis managers on cyber security risks and the role of CSIRTs. The organizers brought a color-coded threat-level sheet (based on the CISA Alert Levels) to the discussion and asked whether we also do color-coded alerts in Austria and what I think … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
The EU has been pushing the concept of the “European Cyber Shield” within the Digital Europe Programme as well as with the proposed “Cyber Solidarity Act”. After a presentation on this topic at the CSIRTs Network meeting in June, I’ve written a long-form paper to lay out my thinking on this topic. Executive Summary The … Read more
We are continuing to support IntelMQ, an open-source solution for collecting and processing security feeds. Recently, the IntelMQ Community announced the release of new version 3.2.0. In the new release, IntelMQ received support for running bots as a library, which should allow for better integration with other tools. A significant contribution from our side is … Read more
Preface I wrote most of this text quickly in January 2021 when the European Commission asked me to apply my lessons learned from the CSIRTs Network to a potential European Network of SOCs. During 2022, the plans for SOC collaboration have been toned down a bit, the DIGITAL Europe funding scheme proposes multiple platforms where … Read more
This is a TLP:WHITE summary of my presentation at the 15th CSIRTs Network meeting in Ljubljana on November 11th. This is not a complete review of the current state of the NIS2 discussions. Overall, I think the council should abandon the idea of finishing the text this year. There is too much in flux and … Read more
Shortly after the 3.0.1 release, an IntelMQ user reported general performance issues, which we investigated over the following days. We identified two causes for them at the heart of IntelMQ: As it turned out, they just affected the data feed-collection components “collectors” with high load (streaming data or just a few big reports were not … Read more
During the development of the next feature release IntelMQ 3.1.0, we corrected some issues that were found in the IntelMQ 3.0.0 release together with the IntelMQ community. We release new versions of IntelMQ, the IntelMQ API and the graphical user-interface IntelMQ Manager. The upgrade-instructions can be found in the documentation. An important upgrade hint is … Read more
The new Constituency Portal “Tuency” was designed by CERT.at and the development has been delegated to the software development company Intevation. Tuency’s web portal allows you to manage your constituency members who then can manage their relevant data themselves. This is important, for example, if IP subnets or email addresses change. Highlights In order to … Read more
We are happy to announce the completion of the IntelMQ 3.0 milestone. The addition of 2 developers to the IntelMQ development team in October 2020 allowed us to work on major IntelMQ 3.0 changes – new features as well as architectural changes. The most important new features are: Domain-based workflow (Capability to use domain-based data) … Read more
Due to the COVID-19 pandemic the FIRST conference 2021 moved online and so did the annual CTF organized by the FIRST Security Lounge SIG. Thomas Pribitzer, Dimitri Robl, and Sebastian Waldbauer from CERT.at participated as a team, scoring the 9. place out of 42 teams. This post is a writeup of the challenges we were … Read more