CyberWire Daily

3271 Episodo

1. Laura Whitt-Winyard: Securing the world. [CISO] [Career Notes]

   Publicado: 27/11/2022
2. Encore: The secrets behind Docker.

   Publicado: 26/11/2022
3. Interview Select: Perry Carpenter on his new book "The Security Culture Playbook." [CW Pro]

   Publicado: 25/11/2022
4. Research Briefing: Emotet's return. LodaRAT improvements. Callback phishing leads to data theft extortion. [CW Pro]

   Publicado: 24/11/2022
5. Watch out for abuse of pentesting tools. Cyber attack on Guadeloupe. Ducktail’s evolution. Cybersecurity for ports. ICS security advisories. And stay safe shopping during the holidays.

   Publicado: 23/11/2022
6. Recent criminal activity–it’s as opportunistic as ever. Cyber risk to the pharma sector. Updates on the hybrid war. Returning Cobalt Strike to the legitimate red teams.

   Publicado: 22/11/2022
7. Callback phishing offers to solve your problem (it won’t). Mustang Panda’s recent activities. DEV0569’s malvertising campaign. 10 indicted in BEC case. Developing a cyber auxiliary force.

   Publicado: 21/11/2022
8. Omer Singer: The offense and the defense of cybersecurity. [Strategy] [Career Notes]

   Publicado: 20/11/2022
9. Another infection with new malware. [Research Saturday]

   Publicado: 19/11/2022
10. Government security advisories, and the difficulty of recovering from ransomware attacks. Authority for offensive cyber under deliberation. Google wins Glupteba suit.

    Publicado: 18/11/2022
11. CISA Alert AA22-321A – #StopRansomware: Hive Ransomware. [CISA Cybersecurity Alerts]

    Publicado: 18/11/2022
12. Privileged insiders and the abuse of “Oops.” Nemesis Kitten exploits Log4Shell. TrojanOrders in the holiday season. Emotet’s back. RapperBot notes. And an arrest in the Zeus cybercrime case.

    Publicado: 17/11/2022
13. Getting tangled up in the blockchain. RDS vulnerabilities. The language of fraud. An offer of help to the G19.Draft Episode for Nov 16, 2022

    Publicado: 16/11/2022
14. CISA Alert AA22-320A – Iranian government-sponsored APT actors compromise federal network, deploy crypto miner, credential harvester. [CISA Cybersecurity Alerts]

    Publicado: 16/11/2022
15. An update on three threat actors: Fangxiao, Killnet, and Billbug, one of them in it for money, another for the glory, and a third for the intell. Twitter and SMS 2FA. Zendesk patches. CISA adds a KEV.

    Publicado: 15/11/2022
16. Software supply chains, C2C markets, criminals, and cyber auxiliaries in a hybrid war. CISA releases its Stakeholder Specific Vulnerability Categorization (SSVC).

    Publicado: 14/11/2022
17. Lauren Campanara: Learn to forgive yourself. [SOC Analyst] [Career Notes]

    Publicado: 13/11/2022
18. An in-depth look on the Crytox ransomware family. [Research Saturday]

    Publicado: 12/11/2022
19. CSO Perspectives Bonus: Veterans Day special.

    Publicado: 11/11/2022
20. US midterms conclude without cyber interference. NATO on cyber defense. New APT41 activity identified. Russia’s FSB and SVR continue cyberespionage. Trends in phishing and API risks.

    Publicado: 10/11/2022