CyberWire Daily

2656 Episodes

1. A new member of the Winnti Cluster is described. Cobalt Strike used against unpatched VMware Horizon servers. Ukraine blames Russia for what seems to be a destructive supply chain attack.

   Published: 1/18/2022
2. SOAR - a first principle idea. [CSO Perspectives}

   Published: 1/17/2022
3. Marina Ciavatta: Going after the human error. [Social engineer] [Career Notes]

   Published: 1/16/2022
4. Keeping APIs on the radar: Evaluating the banking industry. [Research Saturday]

   Published: 1/15/2022
5. Influence operations in the grey zone. FSB raids REvil. Open Source Software Security Summit looks to public-private cooperation. Privateering and state-sponsored cybercrime.

   Published: 1/14/2022
6. A public-private conference takes up open source software security at the White House. MuddyWater attributed to Iran. Espionage and ransomware arrests.

   Published: 1/13/2022
7. The US and EU seek to shore up cybersecurity as Russo-Ukraininan tensions run high. NIST updates secure system standards. Ransomware exploits Log4shell. Dog bites man: fraud in social media.

   Published: 1/12/2022
8. Software supply chains and the free-rider problem. An APT is bitten by its own RAT. Europol told to clean up its data. A leak investigation in Denmark. QR-code phishbait.

   Published: 1/11/2022
9. CISA provides an account of progress toward Log4shell remediation. Other issues are reported in open-source libraries. Undersea cable security. FIN7’s BadUSB campaign. Security and Yealink.

   Published: 1/10/2022
10. Julian Waits: Find a way to help society. [Serial Entrepreneur] [Career Notes]

    Published: 1/9/2022
11. The rise of Karakurt Hacking Team.

    Published: 1/8/2022
12. Kazakhstan shuts down its Internet as civil unrest continues (and one consequence is a disruption of alt-coin mining in that country). More on Log4j. Ransomware hits school website provider.

    Published: 1/7/2022
13. Log4j and industrial control systems. Regulators consider the software supply chain. Malsmoke hits an old vulnerability. Social engineering via Google Docs. Call spoofing and robocalls.

    Published: 1/6/2022
14. CISA reports progress on Log4j. The FTC warns US businesses about taking Log4j risk mitigation seriously. Gangland updates, and some notes on hybrid war.

    Published: 1/5/2022
15. Log4j issues persist. Konni RAT found in New Year’s greetings. Hacktivism or state-directed cyber action? Moscow worries about Mr. Klyushin’s knowledge. The Show-Me-Too-Much State.

    Published: 1/4/2022
16. Log4j updates, including an Aquatic Panda sighting. Cyberattacks hit news services in Norway, Israel, and Portugal. Addressing Y2K22.

    Published: 1/3/2022
17. Cybersecurity predictions for 2022. [CyberWire-X]

    Published: 1/2/2022
18. Dr. Rois Ni Thuama: Get into the game. [Cyber governance] [Career Notes]

    Published: 1/2/2022
19. Encore: When big ransomware goes away, where should affiliates go? [Research Saturday]

    Published: 1/1/2022
20. CyberWire Pro Interview Selects: Jaclyn Miller from NTT, Ltd.

    Published: 12/31/2021