Bluepurple Pulse: week ending June 25th

DDoS can have global cloud scale impact in 2023..

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading). Not everything makes it in, but the best bits do.

Operationally this week the usual constant contact of chaos but not anything overly standout other than Microsoft’s revelation of the DDoS attacks Azure experienced and the resulting impact in early June. That and fact there continues to be more MOVEit vulnerabilities - an exemplar of vuln surging in action..

In the high-level this week:

• UK to give Ukraine major boost to mount counteroffensive - Up to £25 million expansion to harden Ukraine’s cyber defences as Russia continues its callous attacks

• Justice Department Announces New National Security Cyber Section Within the National Security Division - This new section will allow NSD to increase the scale and speed of disruption campaigns and prosecutions of nation-state threat actors, state-sponsored cybercriminals, associated money launderers, and other cyber-enabled threats to national secur…