CyberWire Daily

3094 Odcinki

1. CISA warns of Telerik vulnerability exploitation. Cloud storage re-up attacks. Phishing tackle so convincing it will deceive the many. Cyber developments in Russia's hybrid war.

   Opublikowany: 16.03.2023
2. CISA Alert AA23-074A – Threat actors exploit progress telerik vulnerability in U.S. government IIS server. [CISA Cybersecurity Alerts]

   Opublikowany: 16.03.2023
3. Patch Tuesday notes. SVB's and the cybersecurity sector. SVR's APT29 is phishing for access to information. Trends in the Russo-Ukraine cyberwar. LockBit counts coup (says LockBit).

   Opublikowany: 15.03.2023
4. Silicon Valley Bank as phishbait. An “attack superhighway.” Unauthorized software in the workplace. YoroTrooper, a new cyberespionage threat actor. Hacktivists game, too. How crime pays.

   Opublikowany: 14.03.2023
5. Coping with Silicon Valley Bank's collapse. BatLoader's abuse of Google Search Ads. More on Emotet’s re-emergence. Medusa rising. NetWire collared. More-or-less quiet on the cyber front.

   Opublikowany: 13.03.2023
6. Bat El Azerad: Find your niche to bring to the table. [CEO] [Career Notes]

   Opublikowany: 12.03.2023
7. Files stolen from a sneaky SymStealer. [Research Saturday]

   Opublikowany: 11.03.2023
8. Cybercrime and cyberespionage: IceFire, DUCKTAIL, LIGHTSHOW, Remcsos, and a tarot card reader. US cyber budgets, strategy, and a DoD cyber workforce approach. Five new ICS advisories.

   Opublikowany: 10.03.2023
9. PlugX is now wormable. Compromised webcams found. Emotet is back. AI builds a keylogger. Cyber in the hybrid war. BEC comes to productivity suites.

   Opublikowany: 9.03.2023
10. Data breaches and IP. Current cyberespionage campaigns. A warning that the cyber phases of the hybrid war can’t be expected to be over, yet. Exfiltration via machine learning inference.

    Opublikowany: 8.03.2023
11. A new threat to routers. DoppelPaymer hoods collared. Ransomware hits a Barcelona hospital. Phishing in productivity suites. Espionage, hacktiism, and prank phone calls.

    Opublikowany: 7.03.2023
12. That crane might know what you’re shipping. Addressing the cybersecurity of water systems. Oakland’s ransomware incident is now a breach. Hybrid war. Investment scams.

    Opublikowany: 6.03.2023
13. Gabriela Smith-Sherman: Thriving in the chaos. [Cyber governance] [Career Notes]

    Opublikowany: 5.03.2023
14. New exploits are tricking Chrome. [Research Saturday]

    Opublikowany: 4.03.2023
15. More on how the US will implement its new National Cybersecurity Strategy. Emissary Panda and Mustang Panda are back. Responding to phishing. Royal ransomware. Water utility security.

    Opublikowany: 3.03.2023
16. CISA Alert AA23-061A – #StopRansomware: Royal ransomware.

    Opublikowany: 3.03.2023
17. CISA Alert AA23-059A – CISA red team shares key findings to improve monitoring and hardening of networks. [CISA Cybersecurity Alerts]

    Opublikowany: 3.03.2023
18. CyberWire commentary: Ukraine one year on. [Special Edition]

    Opublikowany: 3.03.2023
19. The US National Cybersecurity Strategy is out, and we have a preliminary look. CISA red-teams critical infrastructure. A new cryptojacker is out. Russia bans messaging apps. Hacktivist auxiliaries.

    Opublikowany: 2.03.2023
20. How an attack led to a breach that enabled further social engineering. Forensic visibility in the Google Cloud Platform. Hacktivist auxiliaries. Two 8Ks and a free decryptor.

    Opublikowany: 1.03.2023