06Jun

What’s the No. 1 ranked college in the National Cyber League?

Hint: It’s not a school you’ve likely heard of unless you live in California or you’ve competed in the NCL competition.

It’s Chico State, officially, California State University – Chico. For three semesters – the last two consecutive — the university in the far northern part of the state has come in at the top of the Cyber Power Rankings.

To achieve that distinction, Chico’s student team had to trump teams from more than 450 other colleges and universities in performing real-world cybersecurity tasks. Annually, some 10,000 students (including some still in high school) enter the National Cyber League competition, testing their skill at identifying hackers from forensic data, pentesting and auditing vulnerable websites, recovering from ransomware attacks and more.

Registration for the Fall 2020 competition is now open. Practice sessions begin Sept. 14 with the individual games starting Oct. 23 and the team competition set to begin Nov. 6th.

Besides the competitive aspect of the games, it’s a learning experience for the participants who are assigned a coach to advise them and help them through the tough practices. Competitors become part of a community lead by Cyber League “Ambassadors” who are experienced players. Some are working professionals; others are students.

Of special value are the scouting reports each player gets. These reports are detailed metrics of a participant’s performance in the competition, listing their national rank and percentile, bracket rank and percentile, performance score, accuracy and completions in each of the 9 categories, as well as the national and bracket averages.

cyber rankings.jpg

Job candidates often include these reports and rankings in their resume and applications. Employers can also source candidates from these reports. As one of the Ambassadors explained in a blog post, “Companies pay NCL to produce these scoring reports so that they can scout the best of the best collegiate cyber-athletes.”

The Cyber League was born in 2011 when a group of cybersecurity professionals and academics from several public agencies came together to create “an innovative way for students to apply what they were learning in class.” So they designed the competition to be both an exciting “game-meets-edutainment” and a learning opportunity.

Individuals can participate in the competition even if they don’t have a team. This is how many of the high school students are involved. In the preseason part their fundamental skills are tested so they get placed in the appropriate bracket. In the individual games, participants compete against others of the same skill level. The team game follows.

The power rankings are developed from the individual competition and team competition scores.

Photo by FLY:D on Unsplash

[bdp_post_carousel]

Homeland Security Issues Windows Bug Alert

Tens of thousands – perhaps hundreds of thousands — of Windows 10 users are vulnerable to a “wormable bug” so serious it has been given the highest score possible of the Common Vulnerability Scoring System.

Although Microsoft issued a fix for the bug in March, Homeland Security’s Cybersecurity and Infrastructure Security Agency issued an alert warning of the potential risk to systems that have not installed the fix.

Commonly referred to as SMBGhost, the vulnerability in Windows 10 systems was recently shown to be exploitable. That could give hackers complete access to the computer and, because the vulnerability is considered “wormable,” the exploit code can spread throughout a network, infecting all connected Windows 10 systems.

By default, Windows 10 automatically checks and installs updates. Home and small business users should already have the patch installed. You can check by following the directions from Microsoft.

However, estimates of the unprotected PCs range from the tens of thousands into the hundreds of thousands. For these systems, the risk of being successfully attacked and having the exploit spread is what prompted the Homeland Security warning. The agency warned that “Malicious cyber actors are targeting unpatched systems.”

In 2017, a wormable bug lead to the WannaCry ransomware spread, which disrupted businesses, government and transportation, and in the UK forced hospitals to halt activities and even turn patients away. Microsoft had issued a patch for the hacking tools that had been developed and stolen from the National Security Agency, but millions did not install it, leading to the disruption and damages worldwide estimated in the billions.

Photo by Caspar Camille Rubin on Unsplash

[bdp_post_carousel]