CyberWire Daily

2656 Episodes

1. SVR was reading the US Attorneys’ emails. Deliveries still lag as South African ports reopen. EA hackers dump game source code. Another look at criminal markets. And Mr. Hushpuppi cops a plea.

   Published: 8/2/2021
2. Behavioral transparency – the patterns within. [CyberWire-X]

   Published: 8/1/2021
3. Andrew Hammond: Understanding the plot. [Historian and Curator] [Career Notes]

   Published: 8/1/2021
4. China's influence grows through Digital Silk Road Initiative. [Research Saturday]

   Published: 7/31/2021
5. Multiple Cozy Bear sightings (at least the bear tracks). Spyware in a Chinese employee benefits app. Phishing campaigns. DoppelPaymer rebrands. And ignore that bot--it hasn’t been watching you surf.

   Published: 7/30/2021
6. Public Wi-Fi advice from NSA. South African ports recover from ransomware. Iranian rail incident was a wiper attack. Developments in the criminal-to-criminal market. Intercept vendors under scrutiny.

   Published: 7/29/2021
7. US ICS Cybersecurity Initiative formalized. Developments in the ransomware world. Addressing known vulnerabilities. Caucasus coinmining crackdown. A long-running IRGC catphishing campaign.

   Published: 7/28/2021
8. South African ports invoke force majeure over cyberattack. Documents indicate Iranian interest in control systems attacks. Dark web wanted ads. Cyber diplomacy. Lousy cafeteria food?

   Published: 7/27/2021
9. The source of Kaseya’s REvil key remains unknown. Cyber incident disrupts port operations at Cape Town and Durban. Updates on the Pegasus Project. And a guilty plea in a swatting case.

   Published: 7/26/2021
10. Ingrid Toppelberg: Knowing how to take risks will pay off. [Cybersecurity education] [Career Notes]

    Published: 7/25/2021
11. Is enhanced hardware security the answer to ransomware? [CyberWire-X]

    Published: 7/25/2021
12. Free malware with cracked software. [Research Saturday]

    Published: 7/24/2021
13. Cyber threats to, and around, the Olympic Games. Kaseya got a decryptor, from somewhere…. NSO says it’s not responsible for Pegasus misuse. US cyber policy toward China. Fraud Family busted.

    Published: 7/23/2021
14. Extortion is the motive in the Saudi Aramco incident. Updates on the Pegasus Project. Chinese cyberespionage and Beijing’s tu quoque. FIN7 resurfaces, and a post-mortem on Egregor.

    Published: 7/22/2021
15. Historical threats to industrial control systems inform current security practices. Ransomware privateering and side-hustling. Updates on the Pegasus Project.

    Published: 7/21/2021
16. APT side hustles and evidence of espionage. NSO replies to the Pegasus Project, and AWS removes NSO from its CloudFront CDM. Other data breaches and ransomware incidents.

    Published: 7/20/2021
17. Microsoft Exchange Server hacks officially attributed to China. Indictment in industrial espionage case. Entities List expands. Abuse of NSO Group’s Pegasus tool reported.

    Published: 7/19/2021
18. Peter Baumann: Adding value to data. [CEO] [Career Notes]

    Published: 7/18/2021
19. Enabling connectivity enables exposures. [Research Saturday]

    Published: 7/17/2021
20. DDoS at Russia’s MoD. Facebook disrupts Iranian catphishing operation. An intercept tool vendor’s activities are exposed. No signs of the US softening on Huawei bans.

    Published: 7/16/2021