CyberWire Daily

3271 Episodo

1. Miriam Wugmeister: Technology's not as complicated as you think. [Data Security] [Career Notes]

   Publicado: 22/1/2023
2. The power of web data in cybersecurity. [CyberWire-X]

   Publicado: 22/1/2023
3. Billbug infests government agencies. [Research Saturday]

   Publicado: 21/1/2023
4. Ransomware in Costa Rica. Cyberespionage against unpatched FortiOS instances. Credential stuffing PayPal, breaching T-Mobile. Utility business systems hit. Hackathons and phishing in Russia.

   Publicado: 20/1/2023
5. Criminal-on-criminal action in the dark web. The cyber phases of the hybrid war heat up. ICS vulnerabilities. Codespaces and malware servers. Blank-image attacks. Social engineering.

   Publicado: 19/1/2023
6. ICS security–vulnerabilities, mitigations, and threats. A Chinese APT prospects Iranian targets. The persistence of nuisance-level hacktivism. And war takes a toll on the criminal economy.

   Publicado: 18/1/2023
7. Phishing campaigns (one uses mobilization as phishbait). Credential-stuffing attack affects Norton LifeLock users. Trends in security. Azure SSRF issues fixed. Calls for a “digital UN.”

   Publicado: 17/1/2023
8. Andy Greenberg Interview: Tracers in the Dark. [CSO Perspectives]

   Publicado: 16/1/2023
9. Gene Fay: Lead from the front. [CEO] [Career Notes]

   Publicado: 15/1/2023
10. DUCKTAIL waddles back again. [Research Saturday]

    Publicado: 14/1/2023
11. Updates on the hybrid war, and on the incidents at the Royal Mail, the FAA, and the Guardian. Royal ransomware exploits Citrix vulnerability. CISA’s annual report is out.

    Publicado: 13/1/2023
12. Trojanized VPN installers circulate in Iran. A trip down the static expressway. Hacktivism-for-profit. IT incidents disrupt NOTAMs and Royal Mail. HR phishbait.

    Publicado: 12/1/2023
13. Notes on patches. Dark Pink industrial cyberespionage campaign in Asia. Kinsing cryptojacking. Hacktivist DDoS against Iran. Healthcare cyber risk management. Pokémon NFTs.

    Publicado: 11/1/2023
14. Some trends in threats and defense. The possibility of cyber war crimes. RSAC innovation showcases are open for application. And common KEVs in the financial sector.

    Publicado: 10/1/2023
15. Social engineering shenanigans, by both crooks and spies. Suing social media over alleged mental health damages. And how to earn an “F.”

    Publicado: 9/1/2023
16. Teresa Rothaar: Outwork the competition. [Analyst] [Career Notes]

    Publicado: 8/1/2023
17. Stealer malware from Russia. [Research Saturday]

    Publicado: 7/1/2023
18. CISA releases three ICS Advisories. Squealing cars. Rotate your secrets. Russian cyberespionage updates.

    Publicado: 6/1/2023
19. PurpleUrchin’s freejacking. Bluebottle versus the banks. A supply-chain attack on a machine-learning framework. The ransomware leaderboard. And cyber ops in a hybrid war.

    Publicado: 5/1/2023
20. Terms of service and GDPR. LastPass breach update. GhostWriter resurfaces in action against Poland and its neighbors. Cellphones, opsec, and rocket strikes.

    Publicado: 4/1/2023