Call us now:
The German Government issued an advisory this week that could equally apply to any nation state with a defense industry. The advisory highlights the active threat North Korean hacking groups pose to the German defense sector. Attempting to acquire Defense IP from the west to update its military technology including ballistic missiles, reconnaissance satellites and submarines.
In the advisory German security agencies attribute recent IP theft to the North Korean group LAZARUS. Who have stolen defense information from defense maintenance contractors and manufacturers, that likely contributed to the construction of North Korean weapon systems. The advisory provide an overview of the Indicators of Compromise and 2 representative cases, demonstrating how easily it has been for the North Koreans to access defense IP. One wonders the extent of the information the LAZARUS group acquired. If related only to German weapon systems, given the depth and breadth of international defense manufacturing cooperation?
One would think that if the defense industry in general adopted the cyber standards required by U.S DoD covered entities under DFARS 252.204-7012. There would be greater protection of Defense IP and less of a risk of nation states stealing it. IP that could be used to attack countries that funded its creation in the first instance.
At a time when cyber is a national security issue for all nation states, wouldn’t harmonizing cybersecurity standards be the sensible approach?
Ted Dziekanowski Brian D. McCarthy George Sawyer Rich Waite, M.Ed.
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberlaw #lazarus
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7166016044673802240