Bluepurple Pulse: week ending March 19th

Many zero days died to bring us this information..

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading). Not everything makes it in, but the best bits do.

Operationally this week you will see numerous zero days that were being exploited in the wild have been patched. Firewalls, email clients and security software all exploited produced by some of the most mature software vendors - yes really. Undertaken by governments (China / Russia) and organized cyber crime. Patch patch patch..

In the high-level this week:

• Wave of Stealthy China Cyberattacks Hits U.S., Private Networks - Defense contractors, government agencies, and technology and telecommunications firms appeared to be bearing the brunt of the newly discovered Beijing-linked attacks - it is almost like China are preparing for a conflict..

• US Cyber Command releases first full budget - documents released by the Pentagon detail Cybercom’s operations and maintenance budget request of $332.6 million for its headquarters, a procurement budget …