As November approaches and National Cybersecurity Awareness Month draws to a close, I would like to draw your attention to an event the Congressional Cybersecurity Caucus is hosting entitled “Hack the Staff” that will take place on Monday, October 29, at 10am in 2168 Rayburn.
Each of us has a role to play in staying safe online. This event will highlight how government employees can better protect themselves at work. Join us for a briefing with officials from DHS’s National Protection and Programs Directorate who will discuss capabilities and provide details about security assessment services that they currently provide to Federal, State, Local, Tribal, Territories, and critical infrastructure stakeholders. Those services include Cyber Hygiene, Phishing Campaign Assessment, Risk and Vulnerability Assessment, Red Team Assessment, and Validated Architecture Design Review.
A live demonstration of how their penetration testing teams execute a spear phishing attack will also be provided. The demonstration will show how an adversary identifies a target, crafts the email, creates a specific payload (malware) to deliver, and the result when a phished user activates (clicks on the attachment) the payload. The demo will include the tools and methodology used in a typical National Cybersecurity Assessments and Technical Services (NCATS) assessment that includes Phishing Assessment. Time for questions and answers will follow the demonstration.
I hope you’ll take some time next week to Hack the Staff!