Cybersecurity News: FTC Warns on Censorship, Bipartisan Cyber Job Bill, and IT Worker Scams

International Data Regulation and Free Speech

• ⚖️ The FTC has warned US tech companies that complying with European and British online content rules could violate American law, specifically citing concerns about foreign censorship efforts.
• ⚠️ Chairman Andrew Ferguson stated that following laws like the EU's Digital Services Act and Britain's Online Safety Act may breach FTC Act prohibitions against unfair or deceptive practices, and cautioned against weakening encryption protections.

Federal Cybersecurity Workforce Development

• 🏛️ A new bipartisan bill, the Cyber Security Hiring Modernization Act, aims to reduce barriers to federal cyber jobs by prioritizing skills over degrees.
• 🚀 Sponsored by Representatives Nancy Mace and Shantel Brown, the bill seeks to expand the federal cyber talent pool by cutting red tape and allowing skilled applicants without four-year diplomas to serve.
• 📊 The bill directs the Office of Personnel Management to track changes to education requirements and collect data on new hires' backgrounds, while allowing agencies to still require degrees if legally mandated or tied to job competencies.

Evolving Cyber Threats and Adversaries

• ☁️ Murky Panda, a China-linked adversary, is increasingly targeting North American government, technology, academia, legal, and professional services, focusing on cloud compromises and exploiting internet-facing appliances.
• ⚡ MITRE has updated its list of common hardware weaknesses, highlighting 11 key issues including sensitive information not removed before reuse, emphasizing that hardware flaws can limit software mitigations.
• 📱 Customs and Border Protection is conducting a record number of electronic device searches at US borders, raising privacy concerns among civil liberties advocates.
• 🎣 A recent hoax impersonating Europole exposed weaknesses in the cybersecurity community's information verification methods, underscoring the need for stronger fact-checking and collaboration.
• 🌍 Interpol dismantled a vast cybercriminal network spanning Africa, leading to over 1,200 arrests, the seizure of $97 million, and the takedown of significant malicious infrastructure.

IT Worker Scams and Social Engineering

• 🇰🇵 Brandon Karpf shared his experience with fake North Korean IT job applicants, noting sophisticated resumes optimized for applicant tracking systems and deceptive tactics like using anglicized first names with Hispanic last names.
• 🗣️ The trend of impersonation as a service is growing, with demand for English-speaking social engineering doubling, involving coaching, scripts, and tech support scams, often leveraging AI and targeting major companies.
• 💡 Karpf recommends emphasizing high-touch, face-to-face interviews with specific personal questions to uncover inconsistencies and trusting one's gut feeling, as perfectly optimized resumes can also be a red flag.