CyberWire Daily

3094 Episodes

1. Name collision. Spawn of LockBit. Quishing the unwary and the hasty. Trends in healthcare cybersecurity. Inquiries surrounding Russia’s hybrid war against Ukraine.

   Published: 8/29/2023
2. DPRK's Lazarus Group exploits ManageEngine issues. SIM swapping as a threat to organizations. Ransomware hits a cloud provider. Spawn of LockBit. Train whistling. Influence laundering.

   Published: 8/28/2023
3. Dina Haines: Keep the boat afloat. [Partnership manager] [Career Notes]

   Published: 8/27/2023
4. Google's not being ghosted from vulnerabilities. [Research Saturday]

   Published: 8/26/2023
5. Phishing kits in the C2C market. Cyberespionage, Pyongyang and Beijing editions. Ransomware under the radar. A new hacktivist group says it doesn’t much care for NATO corruption.

   Published: 8/25/2023
6. Trends in the cybercriminal underworld. The prosecution of Lapsus$ and Tornado Cash. More developments in Russia’s hybrid war.

   Published: 8/24/2023
7. A creepy new geolocation payload for Smoke Loader. Speed of criminal attack, malware delivery, and the evolution of malicious AI. Ransomware at a Belgian social services agency.

   Published: 8/23/2023
8. A cyberespionage operation of unclear provenance shifts its targets. Cyberattacks on voting in Ecuador. Other notes from the cyber underworld. And doxing the Duma.

   Published: 8/22/2023
9. DPRK tried to hit RoK-US military exercises. Australian domain administrator auDA may have been breached. WoofLocker's tech support scam. US warns of cyber threats to space systems.

   Published: 8/21/2023
10. Luke Vander Linden: With age comes knowledge. [VP] [Career Notes]

    Published: 8/20/2023
11. Politicians targeted by RomCom. [Research Saturday]

    Published: 8/19/2023
12. Phishing for Zimbra credentials. Developments in PlayCrypt and Cuba ransomware. #NoFilter exploitation. Cyber gangs (and some services) threaten security researchers. Anglo-Saxonia update.

    Published: 8/18/2023
13. A seemingly legitimate but actually bogus host for a proxy botnet. PowerShell Gallery vulnerabilities. Cyber incident at Clorox. Scamming would be beta-testers. Cyber updates from Russia’s hybrid war.

    Published: 8/17/2023
14. China accuses the US of cyberespionage. Backdoors found in NetScaler. Account hijacking campaigns. Raccoon Stealer gets an update. Cryptocurrency recovery scams. Narrative control in the hybrid war.

    Published: 8/16/2023
15. Investigating China’s Storm-0558. Monti ransomware is back. Evasive phishing. Realtors’ MLS taken down in ransomware incident. News from Russia’s hybrid war. And in-game scams.

    Published: 8/15/2023
16. Attacks on industrial systems in Europe and Africa. LolekHosted arrests. Notes from the hybrid war. The CSRB will investigate the cyberespionage campaign that exploited Microsoft Exchange.

    Published: 8/14/2023
17. Dr. Georgianna Shea: Don't wait to take the initiative. [Technologist] [Career Notes]

    Published: 8/13/2023
18. It's raining credentials. [Research Saturday]

    Published: 8/12/2023
19. Tehran’s social engineering. CSRB reports on Lapsus$. Call for comment on open-source standards. Coping with a tight labor market. Two private sector incidents in Russia’s hybrid war.

    Published: 8/11/2023
20. A new Magecart campaign. Gootloader’s legal bait. Cryptowallet vulnerabilities. News from the hybrid war. And DARPA’s AI Cybersecurity Challenge.

    Published: 8/10/2023