Bluepurple Pulse: week ending July 23th

North Korea and their supply chain attacks Part [number]..

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading). Not everything makes it in, but the best bits do.

Operationally this week JumpCloud issued their incident writeup which has been potentially linked to North Korea and a whole rash of vulnerabilities we would prefer didn’t exist in Microsoft Office, Microsoft Outlook and more (see reporting below)..

In the high-level this week:

• Biden-⁠Harris Administration Announces Cybersecurity Labeling Program for Smart Devices to Protect American Consumers - “U.S. Cyber Trust Mark” is the latest in a series of actions President Biden and the Biden-Harris Administration have taken to protect hard-working families.

• Fact Sheet: Office of the National Cyber Director Requests Public Comment on Harmonizing Cybersecurity Regulations - request for information (RFI) on cybersecurity regulatory harmonization and regulatory reciprocity. The  RFI builds on the commitment the Administration made in the National Cybers…