CyberWire Daily

3271 Episodo

1. CyberWire Pro Research Briefing from 12/21/2021.

   Publicado: 25/12/2021
2. The CyberWire: The 12 Days of Malware.

   Publicado: 25/12/2021
3. CyberWire Pro Interview Selects: Hatem Naguib of Barracuda Networks.

   Publicado: 24/12/2021
4. Log4j updates, including one deadline. Other, non-Log4j, challenges. RSAC postpones itself until June. A German court awards pain-and-suffering damages in a breach case.

   Publicado: 23/12/2021
5. The Five Eyes have some joint advice on detecting, defending against, and responding to Log4j exploitation. Notes on ransomware, espionage, and cyber conflict.

   Publicado: 22/12/2021
6. Belgium’s MoD suffers Log4shell attack. A man-in-the-middle concept. APT activity. Five Russians face US charges (one’s in custody). Fortunes of coin-mining. Holiday greetings from CISA and the FBI.

   Publicado: 21/12/2021
7. Log4j: new exploitation, new mitigations, new risk assessments. Service interruptions, Space Force’s capture-the-flag, and official interventions.

   Publicado: 20/12/2021
8. Ed Amoroso: Security shouldn't be the main dish. [Computer Science] [Career Notes]

   Publicado: 19/12/2021
9. Discovering ChaosDB, a critical vulnerability in the CosmosDB. [Research Saturday]

   Publicado: 18/12/2021
10. Log4j updates, with a side of Fancy Bear. Roots of Huawei’s career as a security risk. Tropic Trooper is back. Meta boots “cyber mercenaries.” Other cyberespionage incidents.

    Publicado: 17/12/2021
11. Log4Shell exploited by criminals and intelligence services. Private sector offensive cyber capabilities. Noberus ransomware used in double-extortion attacks. Squid Game phishbait.

    Publicado: 16/12/2021
12. Log4j and Log4shell updates. Cyberespionage and C2C market developments. Patch Tuesday notes. And how do you pronounce that, anyway?.

    Publicado: 15/12/2021
13. Log4Shell updates. Payroll provider disrupted by ransomware. Companies supporting surveillance distance themselves from the business. Cybercrime and IRL punishment.

    Publicado: 14/12/2021
14. Updates on Log4shell, now being exploited in the wild. India PM’s Twitter account is hijacked. Extortion at Brazil’s Ministry of Health and Volvo. Phishing sites’ lifespan. Sentence passed.

    Publicado: 13/12/2021
15. Hannah Kenney: Focused on people. [Risk] [Career Notes]

    Publicado: 12/12/2021
16. FIN7 repositioning focus into ransomware. [Research Saturday]

    Publicado: 11/12/2021
17. Cyberespionage in Southeast Asia. Two young extortion gangs make their bones. Bot-herders like MikroTik devices. Log4Shell zero-day exploited in the wild. Update on the Assange case.

    Publicado: 10/12/2021
18. Ransomware gangs, paycard skimmers, and Grinchbots. Russia blocks Tor, and the US Senate holds hearings on social media and its arguably malign influence on youth.

    Publicado: 9/12/2021
19. AWS resolves service issues. A summit stand-off. Dark web chatter, and arbitrage courts in the C2C world. Looking for stolen or lost alt-coin.

    Publicado: 8/12/2021
20. The Russo-US summit is expected to take up tension over Ukraine and tensions in cyberspace. Microsoft disrupts APT15. Google disrupts Glupteba. Satoshi Nakamoto is...out there still?

    Publicado: 7/12/2021