<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Hackers attack Canada Revenue site in Tech Talk</title>
    <link>https://community.isc2.org/t5/Tech-Talk/Hackers-attack-Canada-Revenue-site/m-p/52839#M3618</link>
    <description>&lt;P&gt;&lt;A href="https://nationalpost.com/news/politics/nearly-13000-canadians-potentially-victims-of-cerb-fraud-after-hackers-accessed-their-mycra-account-in-2020" target="_blank"&gt;https://nationalpost.com/news/politics/nearly-13000-canadians-potentially-victims-of-cerb-fraud-after-hackers-accessed-their-mycra-account-in-2020&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;During the COVID crisis, the Canadian government offered a program to assist Canadians that lost their jobs.&amp;nbsp; It was intended to provide monies to allow them to pay rent/buy food/ etc.&amp;nbsp; The program was called Canada Emergency Response Benefit (CERB).&amp;nbsp; Seems that two separate cyber attacks compromised user credentials using "Credential Stuffing".&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thoughts?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;d&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 30 Aug 2022 22:21:06 GMT</pubDate>
    <dc:creator>dcontesti</dc:creator>
    <dc:date>2022-08-30T22:21:06Z</dc:date>
    <item>
      <title>Hackers attack Canada Revenue site</title>
      <link>https://community.isc2.org/t5/Tech-Talk/Hackers-attack-Canada-Revenue-site/m-p/52839#M3618</link>
      <description>&lt;P&gt;&lt;A href="https://nationalpost.com/news/politics/nearly-13000-canadians-potentially-victims-of-cerb-fraud-after-hackers-accessed-their-mycra-account-in-2020" target="_blank"&gt;https://nationalpost.com/news/politics/nearly-13000-canadians-potentially-victims-of-cerb-fraud-after-hackers-accessed-their-mycra-account-in-2020&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;During the COVID crisis, the Canadian government offered a program to assist Canadians that lost their jobs.&amp;nbsp; It was intended to provide monies to allow them to pay rent/buy food/ etc.&amp;nbsp; The program was called Canada Emergency Response Benefit (CERB).&amp;nbsp; Seems that two separate cyber attacks compromised user credentials using "Credential Stuffing".&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thoughts?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;d&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 30 Aug 2022 22:21:06 GMT</pubDate>
      <guid>https://community.isc2.org/t5/Tech-Talk/Hackers-attack-Canada-Revenue-site/m-p/52839#M3618</guid>
      <dc:creator>dcontesti</dc:creator>
      <dc:date>2022-08-30T22:21:06Z</dc:date>
    </item>
    <item>
      <title>Re: Hackers attack Canada Revenue site</title>
      <link>https://community.isc2.org/t5/Tech-Talk/Hackers-attack-Canada-Revenue-site/m-p/52848#M3619</link>
      <description>&lt;P&gt;&lt;a href="https://community.isc2.org/t5/user/viewprofilepage/user-id/715155969"&gt;@dcontesti&lt;/a&gt;Obviously they had not read SP800-207 Zero Trust security and had not even commenced that journey in terms of detecting and responding to such compromises.&amp;nbsp;&amp;nbsp; It appears their maturity level was at level 0.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Caute_Cautim&lt;/P&gt;</description>
      <pubDate>Wed, 31 Aug 2022 04:37:44 GMT</pubDate>
      <guid>https://community.isc2.org/t5/Tech-Talk/Hackers-attack-Canada-Revenue-site/m-p/52848#M3619</guid>
      <dc:creator>Caute_cautim</dc:creator>
      <dc:date>2022-08-31T04:37:44Z</dc:date>
    </item>
  </channel>
</rss>

