Bluepurple Pulse: week ending March 27th

Hot takes they might be - but I can't find the evidence to refute

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading).

Operationally this week Lapsus$ drove activity both in actual breaches within clients but also secondarily with their big hacks causing wider concern. Beyond that a number of organisations with exposure to Russian business have made adjustments due to the rising threats from the likes of Anonymous. We also published Mining data from Cobalt Strike beacons where we released just over three years worth of over 128,000 beacons from over 24,000 active Cobalt Strike Team Servers to help defenders and researchers.

In the high-level this week:

• The White House (not me): Statement by President Biden on our Nation’s Cybersecurity - basically says get on with it - “This is a critical moment to accelerate our work to improve domestic cybersecurity and bolster our national resilience.” (so in fact could be me).

• United States Senate Committee on Homeland Security and Governmental Affairs report titled Amer…