CyberWire Daily

3271 Episodo

1. Updates on the cyber phases of a hybrid war. Alleged booters busted. Progress report from the US anti-ransomware task force. Suspicion in AIIMS hack turns toward China.

   Publicado: 15/12/2022
2. InfraGard data for sale. Cyberespionage warnings. Data sharing practices. Malicious drivers with legitimate signatures. Patch Tuesday. Task Force KleptoCapture indicts five Russian nationals.

   Publicado: 14/12/2022
3. Uber’s breach. Phishing in Ukraine’s in-boxes. What’s Russia been up to anyway? (Not the same thing, probably, NATO would be up to.) And the ransomware leader board.

   Publicado: 13/12/2022
4. Ransomware updates: TrueBot, Cl0p, and Royal. Iranian cyberattacks. An update on the cyberattack against the Met. Notes on the hybrid war, with a focus on allies and outside actors.

   Publicado: 12/12/2022
5. Commercial threat intelligence proves invaluable for the public sector. [CyberWire-X]

   Publicado: 11/12/2022
6. Jameeka Aaron: Sometimes you just have to follow two paths. [CISO] [Career Notes]

   Publicado: 11/12/2022
7. Cybersecurity during the World Cup. [Research Saturday]

   Publicado: 10/12/2022
8. Cobalt Mirage deploys Drokbk malware. Zombinder in the C2C market. Impersonation scams. CISA releases three new ICS advisories. And criminals prey on other criminals.

   Publicado: 9/12/2022
9. The IT Army of Ukraine claims VTB DDoS. DPRK exploits Internet Explorer vulnerability. New variant of Babuk ransomware reported. Blind spots in air-gapped networks. And, dog and cat hacking.

   Publicado: 8/12/2022
10. Ransomware, third-party risk, cyberespionage, social engineering, and a software supply-chain threat..

    Publicado: 7/12/2022
11. CISA Alert AA22-335A – #StopRansomware: Cuba Ransomware [CISA Cybersecurity Alerts]

    Publicado: 7/12/2022
12. Cyberespionage, privateering, hacktivism and influence operations, in Ukraine, Russia, the Middle East, and elsewhere. Criminals need quality control, too. A new entry in CISA’s KEV Catalog.

    Publicado: 6/12/2022
13. Swapping cyberattacks in a hybrid war. Privateers or just a side-hustle? US CSRB will investigate Lapsu$ Group. Notes on the cyber underworld.

    Publicado: 5/12/2022
14. Rohit Dhamankar: Never close doors prematurely. [Vice President] [Career Notes]

    Publicado: 4/12/2022
15. Old malware returns in a new way. [Research Saturday]

    Publicado: 3/12/2022
16. Cuba ransomware pulls in $60 million. CISA releases three ICS advisories. Google announces new support for Ukraine. DDoSing the Vatican. Google supports Ukrainian startups in wartime.

    Publicado: 2/12/2022
17. Cyberespionage, cybercrime, and patriotic hacktivism. The Heliconia framework described. Cyber risk for the telecom and healthcare sectors. Notes on the hybrid war. Predictions for 2023.

    Publicado: 1/12/2022
18. LockBit 3.0 and Punisher ransomware described. Leave that USB right in the parking lot where you found it. Killnet’s woofing. Lilac Wolverine’s big new BEC. And World Cup scams.

    Publicado: 30/11/2022
19. DDoS as a holiday-season threat to e-commerce. TikTok challenge spreads malware. Meta's GDPR fine. US Cyber Command describes support for Ukraine's cyber defense.

    Publicado: 29/11/2022
20. Keeping pentesting tools out of criminal hands. Updates from an intensified cyber phase in Russia’s hybrid war. Fars reports sustaining a cyber attack. The most common password remains “password.”

    Publicado: 28/11/2022