CyberWire Daily

2656 Episodes

1. CyberWire Pro Interview Selects: Sir David Omand.

   Published: 12/30/2021
2. CyberWire Pro Interview Selects: Zan Vautrinot on boards.

   Published: 12/29/2021
3. CyberWire Pro Interview Selects: Bill Wright of Splunk.

   Published: 12/28/2021
4. CSO Perspectives: Pt 2 – Mitre ATT&CK: from the Rick the Toolman Series.

   Published: 12/27/2021
5. Encore: Andrew Hammond: Understanding the plot. [Historian and Curator] [Career Notes]

   Published: 12/26/2021
6. CyberWire Pro Research Briefing from 12/21/2021.

   Published: 12/25/2021
7. The CyberWire: The 12 Days of Malware.

   Published: 12/25/2021
8. CyberWire Pro Interview Selects: Hatem Naguib of Barracuda Networks.

   Published: 12/24/2021
9. Log4j updates, including one deadline. Other, non-Log4j, challenges. RSAC postpones itself until June. A German court awards pain-and-suffering damages in a breach case.

   Published: 12/23/2021
10. The Five Eyes have some joint advice on detecting, defending against, and responding to Log4j exploitation. Notes on ransomware, espionage, and cyber conflict.

    Published: 12/22/2021
11. Belgium’s MoD suffers Log4shell attack. A man-in-the-middle concept. APT activity. Five Russians face US charges (one’s in custody). Fortunes of coin-mining. Holiday greetings from CISA and the FBI.

    Published: 12/21/2021
12. Log4j: new exploitation, new mitigations, new risk assessments. Service interruptions, Space Force’s capture-the-flag, and official interventions.

    Published: 12/20/2021
13. Ed Amoroso: Security shouldn't be the main dish. [Computer Science] [Career Notes]

    Published: 12/19/2021
14. Discovering ChaosDB, a critical vulnerability in the CosmosDB. [Research Saturday]

    Published: 12/18/2021
15. Log4j updates, with a side of Fancy Bear. Roots of Huawei’s career as a security risk. Tropic Trooper is back. Meta boots “cyber mercenaries.” Other cyberespionage incidents.

    Published: 12/17/2021
16. Log4Shell exploited by criminals and intelligence services. Private sector offensive cyber capabilities. Noberus ransomware used in double-extortion attacks. Squid Game phishbait.

    Published: 12/16/2021
17. Log4j and Log4shell updates. Cyberespionage and C2C market developments. Patch Tuesday notes. And how do you pronounce that, anyway?.

    Published: 12/15/2021
18. Log4Shell updates. Payroll provider disrupted by ransomware. Companies supporting surveillance distance themselves from the business. Cybercrime and IRL punishment.

    Published: 12/14/2021
19. Updates on Log4shell, now being exploited in the wild. India PM’s Twitter account is hijacked. Extortion at Brazil’s Ministry of Health and Volvo. Phishing sites’ lifespan. Sentence passed.

    Published: 12/13/2021
20. Hannah Kenney: Focused on people. [Risk] [Career Notes]

    Published: 12/12/2021