CyberWire Daily

3094 Episodes

1. Cyberespionage by several intelligence services, some of contracted out. Developments in the cyber underworld. Vulnerabilities reported in CPUs. Some notes on Patch Tuesday.

   Published: 8/9/2023
2. Challenges to intelligence-sharing. The complexity of supply-chain security. Ransomware developments. Notes on Russia’s hybrid war, including possible sensor data manipulation.

   Published: 8/8/2023
3. Pyongyang’s new friendship with Moscow apparently only goes so far. Reptile rootkit in the wild. Cloudzy updates. Cl0p’s torrents. And notes on cyber phases of Russia’s hybrid war.

   Published: 8/7/2023
4. Manuel Hepfer: Discipline, self motivation, and steam. [Research] [Career Notes]

   Published: 8/6/2023
5. Who is that stealing my credentials? [Research Saturday]

   Published: 8/5/2023
6. 2022’s top exploited vulnerabilities are still a risk. Rilide in the wild. Abusing a legitimate tool. Malicious PyPi packages. A brief update on the cyber aspects of Russia’s hybrid war.

   Published: 8/4/2023
7. Action in the cybercriminal underworld. Russia’s FSB and SVR are both active, and so are their hacktivist auxiliaries. NSA offers advice on configuring next-generation firewalls.

   Published: 8/3/2023
8. An illicit market in account restoration. Resilience and the cyber workforce: a snapshot. New post-exploitation technique in Amazon Web Services.

   Published: 8/2/2023
9. Cyberespionage tradecraft, including shopping in the C2C market. Seeking satcom resilience. Sanctions against disinformation. A quick look at current OT threats.

   Published: 8/1/2023
10. The US has a new cyber workforce and education strategy. US hunts disruptive Chinese malware staged in US networks. Malware warnings, and an update on Russia’s hybrid war.

    Published: 7/31/2023
11. Morgan Adamski: Seeing around corners. [Collaboration] [Career Notes]

    Published: 7/30/2023
12. Phishing for leeches. [Research Saturday]

    Published: 7/29/2023
13. A new joint advisory from the US and Australia. BackConnect evolution. Cl0p counts coup. Ransomware trends. DDoS for influence. It’s “dot-mil,” Nigel.

    Published: 7/28/2023
14. Mirai hits the honeypots. Medical device telemetry attacked. More on infostealers in the C2C market. Third-party risk management practices. Cyber skills gaps in the UK. SiegedSec hits NATO sites

    Published: 7/27/2023
15. A malign AI tool: FraudGPT. Stealer logs in the C2C market. Signs in the blockchain that some Conti alumni are working with the Akira gang. And a kinetic strike against a cyber target.

    Published: 7/26/2023
16. Norway continues to investigate a cyberattack. The view from Russia. Trends in data breaches, ransom payments, and security self-perception. Apple patches iOS.

    Published: 7/25/2023
17. DPRK’s RGB shows improved targeting and tool-sharing. Cl0p updates. Two new RATs. Weak radio encryption standard. Razzlekhan will cop a plea.

    Published: 7/24/2023
18. Don Welch: Being a good leader. [CIO] [Career Notes]

    Published: 7/23/2023
19. Infostealer Malware 101: mitigating risks and strengthening defenses against this insidious threat. [CyberWire-X]

    Published: 7/23/2023
20. Welcome to New York, it's been waitin' for you. [Research Saturday]

    Published: 7/22/2023