CyberWire Daily

2656 Episodo

1. Some movement in the cyber underworld. Vishing impersonates the US Social Security Administration. More SVB-themed phishing. And compromise without user interaction.

   Publicado: 17/3/2023
2. CISA warns of Telerik vulnerability exploitation. Cloud storage re-up attacks. Phishing tackle so convincing it will deceive the many. Cyber developments in Russia's hybrid war.

   Publicado: 16/3/2023
3. CISA Alert AA23-074A – Threat actors exploit progress telerik vulnerability in U.S. government IIS server. [CISA Cybersecurity Alerts]

   Publicado: 16/3/2023
4. Patch Tuesday notes. SVB's and the cybersecurity sector. SVR's APT29 is phishing for access to information. Trends in the Russo-Ukraine cyberwar. LockBit counts coup (says LockBit).

   Publicado: 15/3/2023
5. Silicon Valley Bank as phishbait. An “attack superhighway.” Unauthorized software in the workplace. YoroTrooper, a new cyberespionage threat actor. Hacktivists game, too. How crime pays.

   Publicado: 14/3/2023
6. Coping with Silicon Valley Bank's collapse. BatLoader's abuse of Google Search Ads. More on Emotet’s re-emergence. Medusa rising. NetWire collared. More-or-less quiet on the cyber front.

   Publicado: 13/3/2023
7. Bat El Azerad: Find your niche to bring to the table. [CEO] [Career Notes]

   Publicado: 12/3/2023
8. Files stolen from a sneaky SymStealer. [Research Saturday]

   Publicado: 11/3/2023
9. Cybercrime and cyberespionage: IceFire, DUCKTAIL, LIGHTSHOW, Remcsos, and a tarot card reader. US cyber budgets, strategy, and a DoD cyber workforce approach. Five new ICS advisories.

   Publicado: 10/3/2023
10. PlugX is now wormable. Compromised webcams found. Emotet is back. AI builds a keylogger. Cyber in the hybrid war. BEC comes to productivity suites.

    Publicado: 9/3/2023
11. Data breaches and IP. Current cyberespionage campaigns. A warning that the cyber phases of the hybrid war can’t be expected to be over, yet. Exfiltration via machine learning inference.

    Publicado: 8/3/2023
12. A new threat to routers. DoppelPaymer hoods collared. Ransomware hits a Barcelona hospital. Phishing in productivity suites. Espionage, hacktiism, and prank phone calls.

    Publicado: 7/3/2023
13. That crane might know what you’re shipping. Addressing the cybersecurity of water systems. Oakland’s ransomware incident is now a breach. Hybrid war. Investment scams.

    Publicado: 6/3/2023
14. Gabriela Smith-Sherman: Thriving in the chaos. [Cyber governance] [Career Notes]

    Publicado: 5/3/2023
15. New exploits are tricking Chrome. [Research Saturday]

    Publicado: 4/3/2023
16. More on how the US will implement its new National Cybersecurity Strategy. Emissary Panda and Mustang Panda are back. Responding to phishing. Royal ransomware. Water utility security.

    Publicado: 3/3/2023
17. CISA Alert AA23-061A – #StopRansomware: Royal ransomware.

    Publicado: 3/3/2023
18. CISA Alert AA23-059A – CISA red team shares key findings to improve monitoring and hardening of networks. [CISA Cybersecurity Alerts]

    Publicado: 3/3/2023
19. CyberWire commentary: Ukraine one year on. [Special Edition]

    Publicado: 3/3/2023
20. The US National Cybersecurity Strategy is out, and we have a preliminary look. CISA red-teams critical infrastructure. A new cryptojacker is out. Russia bans messaging apps. Hacktivist auxiliaries.

    Publicado: 2/3/2023