@timdafoe

Canadian information security professional. CSA P125 TC and SMC JTC 1/SC 27 member. Former Guardent, UUNET. All opinions are my own.

 Toronto, Canada
Joined July 2009
  • Tweets1.6K
  • Following905
  • Followers975
37Media
Consequences of diminished public confidence in the telephone, scam scourge: contact tracers in MA and WA struggle to get contacts to answer their calls. wbur.fm/3fqMwJq bit.ly/2L5rvWM (3:15)

COVID-19 Contact Tracing Has Launched In Mass. Here's How The Effort Is Going So Far

So far, people who have tested positive for the coronavirus are identifying fewer close contacts than project organizers expected. Also, many of the people listed as close contacts aren't answering...

wbur.org
3
21
10
51
Nova Scotia announces new "Department of Cyber Security and Digital Solutions" - becoming the latest province to combine and elevate digital services and #cyber. 🇨🇦
Nova Scotia Gov.
@nsgov24 May 2023
New Department to Focus on Digital Services, Programs novascotia.ca/news/release/?…
Graphic design with a map of Nova Scotia that says Government of Nova Scotia News Release

ALT Graphic design with a map of Nova Scotia that says Government of Nova Scotia News Release

1
1,295
Happy 5th birthday, GDPR.
Digital EU 🇪🇺
@DigitalEU25 May 2023
🔐 Your data, your right & your choice. Today marks 5⃣ years since the #GDPR entered into force, ensuring Europeans stay in control 🎮 of their #PersonalData in the digital world. 🇪🇺 #EUDataProtection setting global standards🌍

1
567
That said, it's clear that serious concerns regarding member state enforcement persist.
440
Significant updates to the SPARTA #spacecyber framework, including a mapping to @ESA SPACE-SHIELD as of v1.3.1: bit.ly/3ohB2kY

SPARTA v1.3 — What’s New

The SPARTA framework offers space professionals a taxonomy of potential cyber threats to spacecraft and space missions. v1.3 delivers…

medium.com
420
Canada's National CIO Sub-Committee on Information Protection is now the National CISO Committee on Information Protection. 🇨🇦 #PSCIOC
Screenshot containing text content from a website briefly describing the function and membership of the National CISO Committee on Information Protection.

ALT Screenshot containing text content from a website briefly describing the function and membership of the National CISO Committee on Information Protection.

1
391
A welcome move up, and one that reflects how such roles are now structured in Canada's public sector.
315
Just after #CYSAT2023, @ESA released their own ATT&CK-inspired #spacecyber effort, SPACE-SHIELD: bit.ly/3O5yYam
267
Your poetry and melodies are an eternal inspiration. Rest in peace now, Gordon Lightfoot.
65
466
34
7,049
346,338
The @CanCOVID initiative ends operations today. Very proud to have joined in April 2020, contributing input on information handling to @ResDatAll and EN app risk to the COVID-19 Task Force, and sharing sector-specific alerts and training.
1
317
Met some great people, and I'm glad this opened the door to more @ResDatAll participation in the future.
255
Nice SPARTA framework shoutout in announcement Thu. that @SpaceISAC has stood up an Operational Watch Center: bit.ly/3G8zoYF #spacecyber
238
From today's @UptimeInstitute event: serious outages for DCs/services are down somewhat, but cost more when they happen. In fact, for some large bank/airline/co-lo outages 2019-on, Uptime reports losses in the ballpark of 50-100M USD.
1
255
more replies
Full @UptimeInstitute 2023 outages report available here: bit.ly/3G2ywV8

Annual Outage Analysis 2023

uptimeinstitute.com
1
221
One key finding seems oh so familiar: training and processes can help to mitigate human error, a factor in a "considerable" number of DC/service outages, but one that can be tackled directly.
184
Great working with @bbaileycyber on this latest post - how the #PCspooF TTEthernet paper influenced SPARTA countermeasures: bit.ly/3JWxM6q #spacecyber

A Look into SPARTA Countermeasures

SPARTA’s mission is to ensure space system engineers are informed about countermeasures available to aid in mitigation.

medium.com
1
189
Tim Dafoe retweeted
hex nomad@hexnomad14 Mar 2023
Couple of bugs I reported to @msftsecresponse got patched today. The most severe is classified as unauthenticated network RCE! #cve202323415 #cve202323426 Demo:
12
82
9
313
59,602
Nozomi Networks Labs discovers nine vulnerabilities in Sewio Real Time Locating Systems (RTLS). Of the nine disclosed, four are critical, while two are unpatched with fixes in progress. Read our blog to learn what you can do to safeguard affected devices. ow.ly/bpI350MFLua

Nozomi Networks Discovers Nine Vulnerabilities Affecting Sewio RTLS Studio

Our Labs team has discovered nine Sewio RTLS Studio vulnerabilities. This post analyzes these vulnerabilities and how to mitigate them.

nozominetworks.com
1
1
443
Multiple vulnerabilities in the OpenEMR health records and practice/billing suite discovered by @Sonar_Research, prompting a Jan. 31st sector alert from HHS: bit.ly/3YiuKhp #EHR

OpenEMR - Remote Code Execution in your Healthcare System

We recently discovered three vulnerabilities that allow arbitrary code execution on OpenEMR. Let’s see what we can learn from them and discuss their patches!

sonarsource.com
1
1
198
HHS HC3 alert here: bit.ly/3HrfojH (PDF)
138
Load more