CyberWire Daily

2656 Episodes

1. Albania attributes major cyberattack to Iran. TikTok denies breach. New Linux malware.

   Published: 9/7/2022
2. CISA Alert AA22-249A – #StopRansomware: Vice Society.” [CISA Cybersecurity Alerts]

   Published: 9/6/2022
3. Notes on the C2C market. A new cyberespionage threat actor has surfaced. Sharkbot made a brief return to Google Play. Privateering and catphishing in the hybrid war.

   Published: 9/6/2022
4. New CISO responsibilities: supply chain. [CSO Perspectives]

   Published: 9/5/2022
5. Anjali Hansen: Cross team collaboration works best. [Privacy Counsel] [Career Notes]

   Published: 9/4/2022
6. LockBit's contradiction on encryption speed. [Research Saturday]

   Published: 9/3/2022
7. Ransomware groups continue to shift identities and targets. Assessments of the cyber phases of a hybrid war. Is wartime tough for criminals? Anonymous counts coup…against Moscow’s taxis.

   Published: 9/2/2022
8. News on three ransomware operations: BianLian, Cuba, and Ragnar Locker. How the gangs are recruiting. Mobile app supply chain blues. Happy Insider Threat Month.

   Published: 9/1/2022
9. Securing multi-cloud identity with orchestration. [CyberWire-X]

   Published: 9/1/2022
10. Malicious Chrome extensions. BEC in Kentucky. Dispatches from a hybrid war, including state-directed, partisan, and criminal action. ICS advisories. “Cosplaying” hardware.

    Published: 8/31/2022
11. Cyberespionage around the South China Sea. Oktapus and the Twilio compromise. Notes from Russia’s hybrid war. And the LockBit gang looks beyond double extortion.

    Published: 8/30/2022
12. How a hybrid war spreads its cyber effects. Russian and Chinese cyber ops in Latin America. Greenwashing influence. Iranian threat actor exploits Log4j vulnerabilities against Israeli targets.

    Published: 8/29/2022
13. David Nosibor: Taking calculated risks. [Product Lead] [Career Notes]

    Published: 8/28/2022
14. How a wide scale Facebook campaign stole 1 million credentials. [Research Saturday]

    Published: 8/27/2022
15. A Black Basta update. Okta talks Scatter Swine. Nobelium's MagicWeb. Wartime stress in the cyber underworld. LastPass security incident. CISA adds to its Known Exploited Vulnerabilities Catalog.

    Published: 8/26/2022
16. Notes from six months of hybrid war. Oktapus criminal campaign. Exotic Lily and Bumblebee Loader. Insights derived from DNS traffic. US DHS shutters its Disinformation Governance Board.

    Published: 8/25/2022
17. Ransomware attack hits a French hospital. Lessons for the fifth domain from six months of hybrid war. Deepfake scams have arrived. Threat actors prepare to exploit Hikvision camera vulnerability.

    Published: 8/24/2022
18. Iranian APT data extraction tool described. LockBit gang comes under DDoS. Twitter whistleblower security claims made public. Greek natural gas supplier under cyberattack. Updates on a hybrid war.

    Published: 8/23/2022
19. Bogus DDoS protection pages distribute malware. Estonia deals with DDoS attacks. Roskomnadzor's Internet panopticon.And data-tampering attacks are regarded as a growing risk.

    Published: 8/22/2022
20. Roya Gordon: Becoming a trailblazer. [Research] [Career Notes]

    Published: 8/21/2022