Bluepurple Pulse: week ending May 15th

Thank you for all the feedback...

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading).

Operationally this week the big thing was the next F5 Big-IP vulnerability - it was disclosed, exploited and then used to start wiping devices. That is a radical means of technical debt reduction across the globe. Unclear who or why - is this a new style of cyber Robin Hood to protect organisations and the Internet from even worse consequences?

In the high-level this week:

• UK sanctioned Russian technology firms including Baikal Electronics and MCST (Moscow Center of SPARC Technologies) who are enabling the destabilising of Ukraine through things like chip production.

• US State Department has put up Reward Offers for Information to Bring Conti Ransomware Variant Co-Conspirators to Justice - two bounties put up at $10 million and $5 million.

• The Chinese Offensive Cyber Landscape - sponsored by DARPA, an overview of the Chinese eco-system for offensive cyber.

• PHMSA Issues Proposed Civil Penalty of…