
On this week's episode of the Security Sprint, Andy is joined by the Cybersecurity Evangelist herself, Jennifer Walker as well as Sadie Anne Jones! Together they covered the following topics:
Warm Open:
• Tribal-ISAC Unveils Cybersecurity Report & Tribal-ISAC cybersecurity report delivers data, insights into risks
• (TLP:CLEAR) WaterISAC Physical Security Advisory Committee: Insider Threat Management – Fact Sheet.
• Colin Wood on Bluesky: “October isn't only cyber awareness month. It's also National Popcorn Poppin' Month, National Adopt a Shelter Dog Month and Eczema Awareness Month. There's something for everyone, really” It's also National Pizza Month!
Main Topics:
CISA: Cybersecurity Awareness Month - Building a Cyber Strong America. October is Cybersecurity Awareness Month! This year’s theme is Building a Cyber Strong America, highlighting the need to strengthen the country's infrastructure against cyber threats, ensuring resilience and security.
• Cybersecurity Awareness Month Toolkit
• DHS and CISA Announce Cybersecurity Awareness Month 2025
• Article: DHS, CISA kick off Cybersecurity Awareness Month 2025 to protect critical services, boost national resilience
Cybersecurity Information Sharing Act of 2015 (CISA 2015):
• CISA 2015 sunsets: Cyber Threat sharing without a net?
• CISA Liability Protections Terminate - What Legal & InfoSec Need to Know Before Sharing Cyber Threat Information
• Cyber Threat Information Sharing at Risk: What Companies Should Consider if the Cybersecurity Information Sharing Act of 2015 Is Not Renewed
• Cyber defenders on edge amid shutdown furloughs, expired authorities
• Information sharing under CISA 2015 in limbo after government shuts down
Quick Hits:
• Judge temporarily blocks use of National Guard in Portland
• USNORTHCOM statement regarding protection of federal property and personnel in the Portland Area
• Trump says US is in ‘armed conflict’ with drug cartels after ordering strikes in the Caribbean
• Venezuela says it detected 5 US ‘combat planes’ flying 75km from its coast, calls it a ‘provocation’
• Clop extortion emails claim theft of Oracle E-Business Suite data
• Active exploitation of vulnerability affecting Oracle E-Business Suite
• Oracle Security Alert Advisory - CVE-2025-61882
• CISA and UK NCSC Release Joint Guidance for Securing OT Systems
• Shutdown guts U.S. cybersecurity agency at perilous time
• CISA to furlough 65% of staff if government shuts down this week
• UK NPSA - Manchester Incident
• Security boost for Irish Jews after Manchester synagogue attack
• Global Exposure of 180,000 ICS/OT Devices Raises Safety Concerns