FireEye will provide NATO with intel about hackers

NATO, as the face of an allied Europe, faces a categorically different class of cyberthreats than nearly any other organization. Over the last several years, the alliance’s Cooperative Cyber Defense Centre of Excellence has been progressively building a network of threat intelligence partnerships that spans multiple prominent U.S. firms, including Cisco and Symantec. On Thursday, NATO signed on another partner, a firm uniquely position to provide both technical and human intelligence about hackers: FireEye.

NATO, as the face of an allied Europe, faces a categorically different class of cyberthreats than nearly any other organization. Over the last several years, the alliance’s Cooperative Cyber Defense Centre of Excellence has been progressively building a network of threat intelligence partnerships that spans multiple prominent U.S. firms, including Cisco and Symantec. On Thursday, NATO signed on another partner, a firm uniquely position to provide both technical and human intelligence about hackers: FireEye.

To predict cyberattacks, find vulnerabilities, better understand targeting and ultimately build a better defensive strategy, NATO enters into bilateral information sharing programs with corporate powers. The firms provide these intel feeds — highly complex scanning systems worth thousands of dollars, typically sold on a subscription basis — to NATO free of charge.In turn, partnered contractors get a rare look into the cyberattacks hitting NATO in realtime, said spokesperson Michal Olejarnik.

“NATO will interface through our Information Security Operations team and Threat intelligence Relationship manager not directly through our research analysts. This agreement will improve information sharing efforts via formalized relationships that we will explore and utilize to ascertain what data is available to fill gaps at NATO in their threat posture picture and vice versa for FireEye,” said Tony Cole, FireEye global government chief technology officer.

The FireEye contract is limited to a two year period, upon which the contract will be reviewed for potential renewal, said NATO spokesperson Michal Olejarnik. Acceptance into the program has no impact on decisions made by NATO’s technology acquisition and development offices, said Olejarnik.

The partnership between FireEye and NATO was unveiled Thursday at a D.C.-based hotel, with NATO Communications and Information Agency General Manager Koen Gisjbers shaking handson stage with FireEye executives Tony Cole, John Watters and Pat Sheridan. The move represents NATO’s ninth such partnership and it comes at a time when the organization’s more than 200-person cyber-defense unit is preparing to invest upward of $70 million in new capabilities.

“If we are going to move faster than the cyberthreats we face, then it is absolutely imperative that we exchange timely and actionable threat information with industry,” Gijsbers said. “Our existing [Industry Partnership Agreements] have already shown impressive results that are making a real difference to [NATO] and our industry partners. FireEye’s depth of expertise from responding to many of the largest cyber-breaches in the world will be very valuable to the IPA framework, and we look forward to a productive partnership.”

Trellix, McAfee, FireEye, Mandiant: What’s next for four big names in cyber

With the arrival of Trellix, there was a lot of talk about integrating pieces of McAfee and FireEye. But in some ways, the move represents disintegration, too.

Chinese hackers posed as Iranians to breach Israeli targets, FireEye says

How FireEye attributed the SolarWinds hacking campaign to Russian spies

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure