CyberWire Daily

3094 Episodes

1. CISA warns of Telerik vulnerability exploitation. Cloud storage re-up attacks. Phishing tackle so convincing it will deceive the many. Cyber developments in Russia's hybrid war.

   Published: 3/16/2023
2. CISA Alert AA23-074A – Threat actors exploit progress telerik vulnerability in U.S. government IIS server. [CISA Cybersecurity Alerts]

   Published: 3/16/2023
3. Patch Tuesday notes. SVB's and the cybersecurity sector. SVR's APT29 is phishing for access to information. Trends in the Russo-Ukraine cyberwar. LockBit counts coup (says LockBit).

   Published: 3/15/2023
4. Silicon Valley Bank as phishbait. An “attack superhighway.” Unauthorized software in the workplace. YoroTrooper, a new cyberespionage threat actor. Hacktivists game, too. How crime pays.

   Published: 3/14/2023
5. Coping with Silicon Valley Bank's collapse. BatLoader's abuse of Google Search Ads. More on Emotet’s re-emergence. Medusa rising. NetWire collared. More-or-less quiet on the cyber front.

   Published: 3/13/2023
6. Bat El Azerad: Find your niche to bring to the table. [CEO] [Career Notes]

   Published: 3/12/2023
7. Files stolen from a sneaky SymStealer. [Research Saturday]

   Published: 3/11/2023
8. Cybercrime and cyberespionage: IceFire, DUCKTAIL, LIGHTSHOW, Remcsos, and a tarot card reader. US cyber budgets, strategy, and a DoD cyber workforce approach. Five new ICS advisories.

   Published: 3/10/2023
9. PlugX is now wormable. Compromised webcams found. Emotet is back. AI builds a keylogger. Cyber in the hybrid war. BEC comes to productivity suites.

   Published: 3/9/2023
10. Data breaches and IP. Current cyberespionage campaigns. A warning that the cyber phases of the hybrid war can’t be expected to be over, yet. Exfiltration via machine learning inference.

    Published: 3/8/2023
11. A new threat to routers. DoppelPaymer hoods collared. Ransomware hits a Barcelona hospital. Phishing in productivity suites. Espionage, hacktiism, and prank phone calls.

    Published: 3/7/2023
12. That crane might know what you’re shipping. Addressing the cybersecurity of water systems. Oakland’s ransomware incident is now a breach. Hybrid war. Investment scams.

    Published: 3/6/2023
13. Gabriela Smith-Sherman: Thriving in the chaos. [Cyber governance] [Career Notes]

    Published: 3/5/2023
14. New exploits are tricking Chrome. [Research Saturday]

    Published: 3/4/2023
15. More on how the US will implement its new National Cybersecurity Strategy. Emissary Panda and Mustang Panda are back. Responding to phishing. Royal ransomware. Water utility security.

    Published: 3/3/2023
16. CISA Alert AA23-061A – #StopRansomware: Royal ransomware.

    Published: 3/3/2023
17. CISA Alert AA23-059A – CISA red team shares key findings to improve monitoring and hardening of networks. [CISA Cybersecurity Alerts]

    Published: 3/3/2023
18. CyberWire commentary: Ukraine one year on. [Special Edition]

    Published: 3/3/2023
19. The US National Cybersecurity Strategy is out, and we have a preliminary look. CISA red-teams critical infrastructure. A new cryptojacker is out. Russia bans messaging apps. Hacktivist auxiliaries.

    Published: 3/2/2023
20. How an attack led to a breach that enabled further social engineering. Forensic visibility in the Google Cloud Platform. Hacktivist auxiliaries. Two 8Ks and a free decryptor.

    Published: 3/1/2023