Bluepurple Pulse: week ending January 15th

Further regulation is coming..

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading). Not everything makes it in, but the best bits do.

Operationally this week there has been a literal torrent of mainstream news reporting on incidents. From ship management software affecting 7,000 ships, Britain’s Royal Mail with a unspecified cyber incident, DDoS attacks on the Danish central banks and seven private banks as the tip of the iceberg. Let alone theories and hyperbole around the US FAA outages. Below you will see variety of reporting both high and low level which indicate the tempo is not reducing.

In the high-level this week:

• The Biden national cyber strategy is unlike any before it - Washington Post covering Chris Inglis’s office work - the big takeaway for me is the US has historically been hesitant to regulate widely on cyber matters - this hesitancy seems to be subsiding.

• Kyiv argues Russian cyberattacks could be war crimes - war time evidence collection in support of fut…