CyberWire Daily

2656 Episodo

1. TA444 and crypto theft on behalf of the Dear Successor. CryptoAPI spoofing vulnerability described. New Python-based malware campaign. User headspace. Tanks vs. hacktivists.

   Publicado: 25/1/2023
2. Cyber Marketing Con 2022: From the horse’s mouth: CISO Q&A on solving the cyber marketer’s dilemma. [Special Editions]

   Publicado: 25/1/2023
3. Disentangling cybercrime from cyberespionage. A threat to the IoT supply chain. What do you do with the hacktivists when they stop being hacktivists? A retired FBI Special Agent is indicted.

   Publicado: 24/1/2023
4. Contractor error behind FAA outage. OneNote malspam. Vastflux ad campaign disrupted. Ukraine moves closer to CCDCOE membership. Alerts for gamblers and gamers.

   Publicado: 23/1/2023
5. Miriam Wugmeister: Technology's not as complicated as you think. [Data Security] [Career Notes]

   Publicado: 22/1/2023
6. The power of web data in cybersecurity. [CyberWire-X]

   Publicado: 22/1/2023
7. Billbug infests government agencies. [Research Saturday]

   Publicado: 21/1/2023
8. Ransomware in Costa Rica. Cyberespionage against unpatched FortiOS instances. Credential stuffing PayPal, breaching T-Mobile. Utility business systems hit. Hackathons and phishing in Russia.

   Publicado: 20/1/2023
9. Criminal-on-criminal action in the dark web. The cyber phases of the hybrid war heat up. ICS vulnerabilities. Codespaces and malware servers. Blank-image attacks. Social engineering.

   Publicado: 19/1/2023
10. ICS security–vulnerabilities, mitigations, and threats. A Chinese APT prospects Iranian targets. The persistence of nuisance-level hacktivism. And war takes a toll on the criminal economy.

    Publicado: 18/1/2023
11. Phishing campaigns (one uses mobilization as phishbait). Credential-stuffing attack affects Norton LifeLock users. Trends in security. Azure SSRF issues fixed. Calls for a “digital UN.”

    Publicado: 17/1/2023
12. Andy Greenberg Interview: Tracers in the Dark. [CSO Perspectives]

    Publicado: 16/1/2023
13. Gene Fay: Lead from the front. [CEO] [Career Notes]

    Publicado: 15/1/2023
14. DUCKTAIL waddles back again. [Research Saturday]

    Publicado: 14/1/2023
15. Updates on the hybrid war, and on the incidents at the Royal Mail, the FAA, and the Guardian. Royal ransomware exploits Citrix vulnerability. CISA’s annual report is out.

    Publicado: 13/1/2023
16. Trojanized VPN installers circulate in Iran. A trip down the static expressway. Hacktivism-for-profit. IT incidents disrupt NOTAMs and Royal Mail. HR phishbait.

    Publicado: 12/1/2023
17. Notes on patches. Dark Pink industrial cyberespionage campaign in Asia. Kinsing cryptojacking. Hacktivist DDoS against Iran. Healthcare cyber risk management. Pokémon NFTs.

    Publicado: 11/1/2023
18. Some trends in threats and defense. The possibility of cyber war crimes. RSAC innovation showcases are open for application. And common KEVs in the financial sector.

    Publicado: 10/1/2023
19. Social engineering shenanigans, by both crooks and spies. Suing social media over alleged mental health damages. And how to earn an “F.”

    Publicado: 9/1/2023
20. Teresa Rothaar: Outwork the competition. [Analyst] [Career Notes]

    Publicado: 8/1/2023