CyberWire Daily

3271 Episodo

1. Marcelle Lee: Cyber sleuth detecting emerging threats. [Research] [Career Notes]

   Publicado: 25/4/2021
2. Bulletproof hosting (BPH) and how it powers cybercrime. [Research Saturday]

   Publicado: 24/4/2021
3. Three ransomware gangs up their game. The US Postal Inspection Service’s “Internet Covert Operations Program.” GCHQ warns of dependence on Chinese tech. Undersea cable security.

   Publicado: 23/4/2021
4. VPN users remediate systems. New Supernova infection. Cryptojacking botnet afflicts vulnerable Exchange Servers. Facebook takes down spyware groups. Ransomware. Cellebrite bug found.

   Publicado: 22/4/2021
5. SonicWall, Pulse Secure products under exploitation (mitigations are available). Power grid security. Cyber conflict in the Near Abroad. ISIS worries about Bitcoin. Bad passwords.

   Publicado: 21/4/2021
6. Codecov supply chain attack update. Babuk’s victim service. Catphishing in LinkedIn. Sanctioned company responds. SolarWinds, Exchange compromise TFs stand down. 5 Eyes notes. IoT risk.

   Publicado: 20/4/2021
7. Codecov may have sustained a supply chain attack. Natanz sabotage update. Big data gangs. Protecting ransomware gangs. Counterretaliation in the SolarWinds affair.

   Publicado: 19/4/2021
8. Aviv Grafi: There needs to be fundamental changes in security. [CEO] [Career Notes]

   Publicado: 18/4/2021
9. Social engineering: MINEBRIDGE RAT embedded to look like job résumés. [Research Saturday]

   Publicado: 17/4/2021
10. International reactions to US sanctions against Russia (positively reviewed in Europe and the UK, but panned by Russia). Continuing threats to the cold chain. Natanz back in business? Data breach note

    Publicado: 16/4/2021
11. Imposing costs and sending signals (and prominently naming Cozy Bear). More speculation about the Natanz explosion. And a shift in the criminal-to-criminal economy.

    Publicado: 15/4/2021
12. The IAEA investigates the Natanz incident (amid conflicting reports on the nature of the sabotage). Mopping up the SolarWinds Exchange Server hacks.

    Publicado: 14/4/2021
13. Natanz pre-emptive sabotage updates. NAME:WRECK DNS vulnerabilities. Tax phishing. ATM cards and advance-fee scams. Ransomware-induced cheese shortage.

    Publicado: 13/4/2021
14. Apparent cyber sabotage at Natanz. Arrest made in alleged plot to blow up AWS facility. Scraped data for sale in criminal fora. US senior cyber appointments expected soon.

    Publicado: 12/4/2021
15. Debra Danielson: Be fearless. [CTO] [Career Notes]

    Publicado: 11/4/2021
16. Strategic titles point to something more than a commodity campaign. [Research Saturday]

    Publicado: 10/4/2021
17. A new Lazarus backdoor. Malvertising for a bogus Clubhouse app. Cryptojacking the academy. When is a cartel not a cartel? Strategic competition between the US and China. Choking Twitter.

    Publicado: 9/4/2021
18. Cring ransomware hits manufacturing plants. Distance learning difficulties. Hafnium’s patient approach to vulnerable Exchange Servers. The Entity List grows. 5G security standards.

    Publicado: 8/4/2021
19. A Chinese cyberespionage campaign is active against Vietnamese targets. The European Commission acknowledges cyberattacks are under investigation. Data scraping. Bogus apps. Molerats are dudes.

    Publicado: 7/4/2021
20. Watering holes, from Kiev to Canada. File transfer blues. What’s up in the criminal-to-criminal market. And an update on the old Facebook breach.

    Publicado: 6/4/2021