CyberWire Daily

2656 Episodes

1. Transportation as an espionage target. Expensive, elaborate cyber campaigns by unidentified threat actors. Infraud operators sentenced in Nevada.

   Published: 3/22/2021
2. Kevin Magee: Focus on the archer. (CSO) [Career Notes]

   Published: 3/21/2021
3. BendyBear: difficult to detect and downloader of malicious payloads. [Research Saturday]

   Published: 3/20/2021
4. Cyberespionage against Finland. Moscow’s displeasure. ICS security. Two indictments and why the PLA should stick to Buicks.

   Published: 3/19/2021
5. Radiation disinformation. CISA warns that Trickbot is surging. FBI releases Internet Crime Report, Crytpers get commodified. And notes from the underworld.

   Published: 3/18/2021
6. US report on 2020 foreign election meddling is out, and Russian and Iran are prominently mentioned in dispatches. Recovering from the Hafnium and Holiday Bear campaigns.

   Published: 3/17/2021
7. Cyberespionage prospects telecom companies: Operation Diànxùn. Working against exploitation of Exchange Server. And rerouting SMS messages (it cost only $16).

   Published: 3/16/2021
8. Looking for leaks in the Microsoft Exchange Server exploitation. International cyber conflict. Sky Global executives indicted in the US. Scammer demands £1000 pounds to go on do-not-call list.

   Published: 3/15/2021
9. Dinah Davis: Building your network. [R&D] [Career Notes]

   Published: 3/14/2021
10. SolarWinds, SUNBURST, and supply chain security. [CyberWire-X]

    Published: 3/14/2021
11. Keeping data confidential with fully homomorphic encryption. [Research Saturday]

    Published: 3/13/2021
12. Ransomware enters vulnerable Exchange Servers through the backdoor. REvil is out and active. SolarWinds and control systems. Molson Coors responds to a cyber incident.

    Published: 3/12/2021
13. More Exchange Server exploitation, and security advice. Updates on the SolarWinds compromise, criminal TTPs, and the Verkada hack. And news not you, but your friends might be able to use.

    Published: 3/11/2021
14. Patching, with special attention to Hafnium and the rest. Responding to the SolarWinds incident. Hactivists don’t like cameras. Dragnet in the Low Countries.

    Published: 3/10/2021
15. Dealing with Hafnium’s work against Microsoft Exchange Server and Holiday Bear’s visit to the SolarWinds supply chain. A plea for OSINT, and some wins for the cyber cops.

    Published: 3/9/2021
16. Exploitation of Exchange Server spreads rapidly across the globe. The US mulls its response to Russia over the SolarWinds compromise (and to China over Exchange Server hacks).

    Published: 3/8/2021
17. Stephen Hamilton: Getting the mission to the next level. [Military] [Career Notes]

    Published: 3/7/2021
18. Diving deep into North Korea's APT37 tool kit. [Research Saturday]

    Published: 3/6/2021
19. SUNSHUTTLE backdoor described. What the Exchange Server campaign was after. Misconfigured clouds. Airline IT service provided attacked. Criminal-on-criminal crime.

    Published: 3/5/2021
20. Happy Slam the Scam Day. Indian authorities continue to investigate grid incidents. CISA tells US Federal agencies to clean up Exchange bugs by noon tomorrow. Supply chain compromise.

    Published: 3/4/2021