CyberWire Daily

3094 Episodes

1. Cyberespionage, from war floating to phishing. An update on ESXiArgs. Fresh sanctions against ransomware operators, and more takedowns may be in the offing.

   Published: 2/9/2023
2. CISA Alert AA23-039A – ESXiArgs ransomware virtual machine recovery guidance. [CISA Cybersecurity Alerts]

   Published: 2/9/2023
3. An ICS update from CISA. Ransomware notes: LockBit, Clop, and ESXiArgs. Vulnerability in Toyota’s GSPIMS. Two new Russian cyberespionage efforts hit Ukraine. And a direction for US privacy policy.

   Published: 2/8/2023
4. Update: VMware ESXi exploitations. Super Bowl cyber risks. Scalping bots. The curious case of the Moscow billboards.

   Published: 2/7/2023
5. Unpatched VMware ESXi instances attacked. Okatpus is back. Update on LockBit’s ransomware attack on ION. Charlie Hebdo hack attributed to Iran.

   Published: 2/6/2023
6. “Shift Left”: A case for threat-informed pentesting. [CyberWire-X]

   Published: 2/5/2023
7. Yasmin Abdi: Find your community. [Security Engineer] [Career Notes]

   Published: 2/5/2023
8. Can ransomware turn machines against us? [Research Saturday]

   Published: 2/4/2023
9. Cyberespionage, and ransomware as misdirection. A new Python-based supply chain attack. Traffic on the Static Expressway. KillNet continues to plague hospitals. And Telegram may be compromised.

   Published: 2/3/2023
10. Cisco fixes vulnerabilities in ICS appliances. NIST’s anti-phishing guidelines. OneNote exploitation. HeadCrab malware. Recent actions by Russian threat actors. Trends in state-directed cyber ops.

    Published: 2/2/2023
11. How the C2C market sustains ransomware gangs. In Russia’s war, intelligence services deploy wipers, and hacktivist auxiliaries handle the DDoS. And a look into other corners of the cyber underworld.

    Published: 2/1/2023
12. The cybercriminal labor market and the campaigns it’s supporting. Russia’s Killnet is running DDoS attacks against US hospitals, but Russia says, hey, it’s the real victim here.

    Published: 1/31/2023
13. Criminal evolutions, disgruntled insiders, and gangsta wannabes. New wiper attacks hit Ukrainian targets, with less effect than the first rounds early last year. And support your local hacktivist?

    Published: 1/30/2023
14. Charlie Moore: Pilot to head honcho in cyber. [Cyber Command] [Career Notes[

    Published: 1/29/2023
15. Interview with the AI, part one. [Special Editions]

    Published: 1/29/2023
16. Flagging firmware vulnerabilities. [Research Saturday]

    Published: 1/28/2023
17. An update on the Hive ransomware takedown. More DDoS from Killnet. Advisories from CISA, and an addition to the Known Exploited Vulnerabilties Catalog.

    Published: 1/27/2023
18. Remote monitoring and management tools abused. Russian and Iranian cyberespionage reported. The world according to the CIO. And if volume is your secret, maybe look for a better secret.

    Published: 1/26/2023
19. CISA Alert AA23-025A – Protecting against malicious use of remote monitoring and management software. [CISA Cybersecurity Alerts]

    Published: 1/26/2023
20. TA444 and crypto theft on behalf of the Dear Successor. CryptoAPI spoofing vulnerability described. New Python-based malware campaign. User headspace. Tanks vs. hacktivists.

    Published: 1/25/2023