So let’s do some good security news. More free tools from CISA. Here’s the list released Monday.
- Cybersecurity Evaluation Tool (CSET): assists organizations in evaluating their enterprise and asset cybersecurity posture
- SCuBAGear (Secure Cloud Business Applications Gear): helps compare configs against CISA M365 baseline recommendations
- Untitled Goose Tool: helps detect signs of malicious activity in Microsoft cloud environments
- Decider: helps generate MITRE ATT&CK mapping reports
- Memory Forensic on Cloud (Japan CERT): builds memory forensic environment on Amazon Web Services (AWS)
Also, on the security front, let’s talk labeling. Launched Tuesday, the new US Cyber Trust Mark (not to be confused with CompTIA’s Trustmarks) is the label for smart devices previously discussed. The program covers connected devices commonly found in the home, like smart refrigerators, microwaves, smart televisions, and smart climate control systems. The announcement also lists “smart fitness trackers” as a device that would be covered by the certification and labeling program and may expand further.
It’s a two-part voluntary program. A logo on the box and a QR code to scan to verify the device is still certified as threats evolve and change. Labels should start appearing on devices in 2024.
Free tools to do your job and make your practice better. Courtesy of the US government.