CyberWire Daily

3094 Episoder

1. LockBit 3.0 and Punisher ransomware described. Leave that USB right in the parking lot where you found it. Killnet’s woofing. Lilac Wolverine’s big new BEC. And World Cup scams.

   Udgivet: 30.11.2022
2. DDoS as a holiday-season threat to e-commerce. TikTok challenge spreads malware. Meta's GDPR fine. US Cyber Command describes support for Ukraine's cyber defense.

   Udgivet: 29.11.2022
3. Keeping pentesting tools out of criminal hands. Updates from an intensified cyber phase in Russia’s hybrid war. Fars reports sustaining a cyber attack. The most common password remains “password.”

   Udgivet: 28.11.2022
4. Laura Whitt-Winyard: Securing the world. [CISO] [Career Notes]

   Udgivet: 27.11.2022
5. Encore: The secrets behind Docker.

   Udgivet: 26.11.2022
6. Interview Select: Perry Carpenter on his new book "The Security Culture Playbook." [CW Pro]

   Udgivet: 25.11.2022
7. Research Briefing: Emotet's return. LodaRAT improvements. Callback phishing leads to data theft extortion. [CW Pro]

   Udgivet: 24.11.2022
8. Watch out for abuse of pentesting tools. Cyber attack on Guadeloupe. Ducktail’s evolution. Cybersecurity for ports. ICS security advisories. And stay safe shopping during the holidays.

   Udgivet: 23.11.2022
9. Recent criminal activity–it’s as opportunistic as ever. Cyber risk to the pharma sector. Updates on the hybrid war. Returning Cobalt Strike to the legitimate red teams.

   Udgivet: 22.11.2022
10. Callback phishing offers to solve your problem (it won’t). Mustang Panda’s recent activities. DEV0569’s malvertising campaign. 10 indicted in BEC case. Developing a cyber auxiliary force.

    Udgivet: 21.11.2022
11. Omer Singer: The offense and the defense of cybersecurity. [Strategy] [Career Notes]

    Udgivet: 20.11.2022
12. Another infection with new malware. [Research Saturday]

    Udgivet: 19.11.2022
13. Government security advisories, and the difficulty of recovering from ransomware attacks. Authority for offensive cyber under deliberation. Google wins Glupteba suit.

    Udgivet: 18.11.2022
14. CISA Alert AA22-321A – #StopRansomware: Hive Ransomware. [CISA Cybersecurity Alerts]

    Udgivet: 18.11.2022
15. Privileged insiders and the abuse of “Oops.” Nemesis Kitten exploits Log4Shell. TrojanOrders in the holiday season. Emotet’s back. RapperBot notes. And an arrest in the Zeus cybercrime case.

    Udgivet: 17.11.2022
16. Getting tangled up in the blockchain. RDS vulnerabilities. The language of fraud. An offer of help to the G19.Draft Episode for Nov 16, 2022

    Udgivet: 16.11.2022
17. CISA Alert AA22-320A – Iranian government-sponsored APT actors compromise federal network, deploy crypto miner, credential harvester. [CISA Cybersecurity Alerts]

    Udgivet: 16.11.2022
18. An update on three threat actors: Fangxiao, Killnet, and Billbug, one of them in it for money, another for the glory, and a third for the intell. Twitter and SMS 2FA. Zendesk patches. CISA adds a KEV.

    Udgivet: 15.11.2022
19. Software supply chains, C2C markets, criminals, and cyber auxiliaries in a hybrid war. CISA releases its Stakeholder Specific Vulnerability Categorization (SSVC).

    Udgivet: 14.11.2022
20. Lauren Campanara: Learn to forgive yourself. [SOC Analyst] [Career Notes]

    Udgivet: 13.11.2022