CyberWire Daily

3271 Odcinki

1. Ransomware and materiality. MetaStealer hits businesses. Two looks at cloud risks. His Highness, the Large Language Model.

   Opublikowany: 14.09.2023
2. How one access broker gets its initial access (it’s through novel phishing). Be alert for deepfakes, US authorities say. The Pentagon’s new cyber strategy. And a reminder: yesterday was Patch Tuesday.

   Opublikowany: 13.09.2023
3. Phishing with Facebook Messenger bots. Redfly hits a national power grid. Nice platform you got there…shame if something happened to it. MGM Resorts grapples with a “cybersecurity issue.”

   Opublikowany: 12.09.2023
4. UK's NCA and NCSC release a study of the cybercriminal underworld. HijackLoader's growing share of the C2C market. Russia's hacker diaspora in Turkey. Cyber diplomacy, free and frank..

   Opublikowany: 11.09.2023
5. Caroline Wong: A passion for teaching. [CSO] [Career Notes]

   Opublikowany: 10.09.2023
6. No honor in being a criminal. [Research Saturday]

   Opublikowany: 9.09.2023
7. Apple issues an emergency patch. Aerospace sector under attack. DPRK spearsphishes security researchers. Notes from the hybrid war, including Starlink’s judgments on jus in bello.

   Opublikowany: 8.09.2023
8. Microsoft releases results of investigation into cloud email compromise. A buggy booking service. Adversary emulation for OT networks. Identity protection trends. Notes from the hybrid war.

   Opublikowany: 7.09.2023
9. Agent Tesla still hits unpatched systems. Hot wallet hacks. AI and DevSecOps. Notes on Fancy Bear and NoName057(16). And some curious trends in the cyber labor market.

   Opublikowany: 6.09.2023
10. In today’s symposium, we talk about a new strand of Chae$ malware, some developments in social engineering, privateers in a hybrid war, cyber ops as combat support, and some default passwords.

    Opublikowany: 5.09.2023
11. Interview Select: Jeff Welgan, Chief Learning Officer at N2K Networks is expanding on the NICE framework in strategic workforce intelligence. [Interview selects]

    Opublikowany: 4.09.2023
12. Rick Doten: There is a rainbow of different roles in cybersecurity. [VP] [Career Notes]

    Opublikowany: 3.09.2023
13. Thwarting Muddled Libra. [Research Saturday]

    Opublikowany: 2.09.2023
14. DPRK cyberespionage update. New cybercriminal TTPs. The state of DevSecOps. Hacktivism and the nation-state. Cyberwar lessons learned. A free decryptor for Key Group ransomware.

    Opublikowany: 1.09.2023
15. GREF and Earth Estries from China. GRU’s Sandworm surfaces again, wielding “Infamous Chisel.” Hacktivist nuisances in the hybrid war. A zero-day is discovered. And the Wolverines are back online.

    Opublikowany: 31.08.2023
16. An international hunt bags Qakbot’s infrastructure. Anticipating remediation. Adversaries in the middle. More effective phishbait. Air travel disruption was a glitch, not an attack. Hybrid war update.

    Opublikowany: 30.08.2023
17. A joint advisory on post-quantum readiness. [Special Edition]

    Opublikowany: 30.08.2023
18. Name collision. Spawn of LockBit. Quishing the unwary and the hasty. Trends in healthcare cybersecurity. Inquiries surrounding Russia’s hybrid war against Ukraine.

    Opublikowany: 29.08.2023
19. DPRK's Lazarus Group exploits ManageEngine issues. SIM swapping as a threat to organizations. Ransomware hits a cloud provider. Spawn of LockBit. Train whistling. Influence laundering.

    Opublikowany: 28.08.2023
20. Dina Haines: Keep the boat afloat. [Partnership manager] [Career Notes]

    Opublikowany: 27.08.2023