Bluepurple Pulse: week ending November 13th

EU starting to tie itself in knots on back of spyware scandal ..

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading). Not everything makes it in, but the best bits do.

Operationally this week nothing of note other than what feels like an uptick in vulnerabilities which rock our very foundations.

In the high-level this week:

• Joint statement of intent from the for Agile Nations Working Group on Cyber Security for Consumer Connected Products - UK, Canada and Singapore get alignment

  • Related Google also published their Principles for IoT Security Labelling

• OFAC-OFSI Enhanced Partnership - financial sanctions are a powerful tool for a variety of cyber and not cyber related purposes. The UK and US confirm their partnership with further enhancements.

  • somewhat related this CIA paper which was declassified in 2011 titled Economic Sanctions: A Historical Analysis is worth a flick through

• Committee of Inquiry to investigate the use of Pegasus and equivalent surveillance spyware released (or had released) its draft report