Bluepurple Pulse: week ending October 15th

Who is attacking Russia's semiconductor industry?

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading). Not everything makes it in, but the best bits do.

Operationally this week was the disclosure of the massive Distributed Denial of Service due a property of the HTTP2 protocol which was discovered and used in the wild against numerous large platforms.

In the high-level this week:

• Cyber resilience of the UK's critical national infrastructure - UK Parliament - call for evidence in the UK

• Record $7 billion in crypto laundered through cross-chain services - Cross-chain crime refers to the swapping of cryptoassets between different tokens or blockchains – often in rapid succession and with no legitimate business purpose

• Is it legal to pay ransomware where you are? - an open source project

• The emergence of non-personal data markets - The data economy in the transport and mobility sector is one of the five fastest growing and is expected to expand to nearly €25 billion annually by 2025. Data includes …