Direct IT News Update, November 2021
Tentative Conclusions About CMMC 2.0 From a Small Business Focused MSP/MSSP
The DoD’s announcement of CMMC 2.0 has the defense industrial base buzzing with questions. For some smaller parts manufacturers or service providers who work directly or indirectly for the department of defense, shifting standards and unclear deadlines are making it hard to prioritize investing in CMMC compliance.
CMMC is dead! Long Live CMMC 2.0!
CMMC is dead! Long Live CMMC 2.0! There was a major security-related announcement from the Office of the Under Secretary of Defense for Acquisition and Sustainment of the Department of Defense (DoD) today. The DoD released an overview of its plans moving forward for the CMMC program.
Missouri Governor Launches Investigation into “Hacker” Reporter
Last month, journalist Josh Renaud with the St. Louis Post-Dispatch discovered that the state of Missouri's Department of Elementary and Secondary Education (DESE) had teachers' confidential information, including social security numbers, unprotected on their website.
Top Industries Attacked in 2021
According to cybersecurity researchers at Digital Shadows, businesses within the industrial goods & services sector have been the top targets of ransomware attacks in the first three quarters of 2021.
As supply chain issues, which have existed since early in the pandemic, continue at a grueling pace, cybercriminals have exacerbated the issue by attacking companies that cannot stretch their bottom line, giving a higher possibility of ransom payment.
US Launches Cyber Offensive
The United States launched an offensive in its war against cybercrime last month as they successfully hacked Russian hacking group REvil, taking their servers and leak blogs offline.
The group was responsible for the attack on Colonial Pipeline last Spring, which used encryption software named "DarkSide.