CyberWire Daily

Latest Episodes:

The usual suspects are up to their usual tricks. Mar 13, 2024

Show notes

ODNI’s Annual Threat Assessment highlights the usual suspects. The White House meets with UnitedHealth Group’s CEO. A convicted LockBit operator gets four years in prison. The Clop ransomware group leaks data from major universities. Equilend discloses a data breach. Fortinet announces critical and high-severity vulnerabilities. GhostRace exploits speculative race conditions in popular CPUs. Incognito Market pulls the rug and extorts its users. Patch Tuesday notes. On the Learning Layer, Sam Meisenberg talks with Joe Carrigan from Johns Hopkins University Information Security Institute, and co-host of Hacking Humans podcast. They explore Joe's journey on the road to taking his CISSP test. And, I do not authorize Facebook, Meta or any of its subsidiaries to use this podcast.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Join us as a Learning Layer special series kicks off. Over the next several weekly episodes of the Learning Layer, host Sam Meisenberg talks with Joe Carrigan from Johns Hopkins University Information Security Institute, and co-host of Hacking Humans podcast. On this episode, they explore Joe's journey as he embarks on the road to taking his CISSP test after fourteen years in the cyber industry, and why he decided to get it now. Learn more about ISC2’s Certified Information Systems Security Professional (CISSP) certification, and explore our online certification courses, practice tests, and labs that ensure that you’re ready for exam day.

Selected Reading

ODNI's 2024 Threat Assessment: China, Russia, North Korea pose major cyber threats amid global instability - Industrial Cyber (Industrial Cyber)

White House meets with UnitedHealth CEO over hack (Reuters)

LockBit ransomware affiliate gets four years in jail, to pay $860k (bleepingcomputer)

Stanford University ransomware attack impacts 27K (SC Media)

EquiLend Employee Data Breached After January Ransomware Attack (HACKread)

Fortinet reports two critical and three high severity issues, plan to patch (beyondmachines)

Major CPU, Software Vendors Impacted by New GhostRace Attack (SecurityWeek)

Incognito Market: The not-so-secure dark web drug marketplace (Graham Cluley)

Microsoft Patch Tuesday – Major Flaws In Office, Exchange And SQL Server (cybersecuritynews)

New Facebook photo rule hoax spreads (Malwarebytes)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Biden's budget boost for cybersecurity. Mar 12, 2024

Show notes

Biden’s budget earmarks thirteen billion bucks for cybersecurity. DOJ targets AI abuse. A US trade mission to the Philippines includes cyber training. CISA and OMB release a secure software attestation form. CyberArk explores AI worms. Russia arrests a South Korean on cyber espionage charges. French government agencies are hit with DDoS attacks. Jessica Brandt is named director of the Foreign Malign Influence Center. Afternoon Cyber Tea host Ann Johnson speaks with her guest Keren Elazari about the hacker mindset. Google builds itself the Bermuda Triangle of Broadband.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Afternoon Cyber Tea host Ann Johnson talks with her guest Keren Elazari about the hacker mindset. To hear the full conversation, please listen to the episode of Afternoon Cyber Tea.

Selected Reading

US Federal Budget Proposes $27.5B for Cybersecurity (GovInfo Security)

Justice Department Beefs up Focus on Artificial Intelligence Enforcement, Warns of Harsher Sentences (SecurityWeek)

Microsoft to train 100,000 Philippine women in AI, cybersecurity (South China Morning Post)

US launches secure software development attestation form to enhance federal cybersecurity (Industrial Cyber)

The Rise of AI Worms in Cybersecurity (Security Boulevard)

South Korean detained earlier this year is accused of espionage in Russia, state news agency says (Associated Press)

Massive cyberattacks hit French government agencies (Security Affairs)

ODNI appoints new election security leader ahead of presidential race (The Record)

Google’s self-designed office swallows Wi-Fi “like the Bermuda Triangle” ( Ars Technica)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Kyla Guru: You are a key piece to our national security. [Education] [Career Notes] Mar 12, 2024

Show notes

Founder and CEO of nonprofit Bits N' Bytes Cybersecurity Education and undergraduate student at Stanford University, Kyla Guru shares her journey from GenCyber Camp to becoming a cybersecurity thought leader. Seeing the need. for cybersecurity education in her own community spurred Kyla into action engaging our civilian population in understanding their role in the cybersecurity space. Kyla recommends putting yourself out there: taking courses, getting more knowledge, getting internships, meeting people and going to conferences. Kyla thinks her generation has an inquisitive mind and feels that is where advocacy and education come in with cybersecurity. She shares for any young person "thinking about maybe starting something in security, this is definitely the time to do so." And, we thank Kyla for sharing her story with us.

Learn more about your ad choices. Visit megaphone.fm/adchoices

CISA’s news trifecta. Mar 11, 2024

Show notes

A roundup of news out of CISA. California reveals data brokers selling the sensitive information of minors. Permiso Security shares an open-source cloud intrusion detection tool. Darktrace highlights a campaign exploiting DropBox. EU's Cyber Solidarity Act forges ahead. A White House committee urges new economic incentives for securing OT systems. Paysign investigates claims of a data breach. Our guest is Alex Cox, Director Threat Intelligence, Mitigation, and Escalation at LastPass, to discuss what to expect after LockBit. And Axios highlights the clowns and fools behind ransomware attacks.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Guest Alex Cox, Director, Threat Intelligence, Mitigation, Escalation (TIME) at LastPass, joins us to discuss what to expect after LockBit.

Selected Reading

Top US cybersecurity agency hacked and forced to take some systems offline (CNN Politics)

CISA’s open source software security initiatives detailed (SC Media)

GAO uncovers mixed feedback on CISA's OT cybersecurity services when it comes to addressing risks (Industrial Cyber)

Dozens of data brokers disclose selling reproductive healthcare info, precise geolocation and data belonging to minors (The Record)

New Open Source Tool Hunts for APT Activity in the Cloud (SecurityWeek)

Dropbox Abused in New Phishing, Malspam Scam to Steal SaaS Logins (HACKREAD)

Everything you need to know about the EU's Cyber Solidarity Act (ITPro)

White House advisory group says market forces ‘insufficient’ to drive cybersecurity in critical infrastructure (CyberScoop)

Paysign investigating reports of consumer information data breach (The Record)

The clowns and fools behind ransomware attacks (Axios)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: Swati Shekhar: Challenges increase your risk appetite. [Engineering] [Career Notes] Mar 10, 2024

Show notes

Ground Labs' Head of Engineering, Swati Shekhar, shares her circuitous route from and back to engineering. Always being interested in leveraging the tools available to solve problems, Swati talks about how she found her place in engineering. She mentions how she had her first real experience with a computer when she was 17 in her first year at college. Aside from being one of 30 young women in a sea of 500 young men there, Swati described it as a "good culture shock because anything that takes you out of your comfort zone actually makes you learn and grow." She notes that challenges experienced in life increase your risk appetite so significantly. Swati advises those looking to make a job change to be certain of what is attracting them and to be yourself. We thank Swati for sharing her story with us.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Setting better cyber job expectations to attract and retain talent. [Special Edition] Mar 10, 2024

Show notes

In honor of Women's History Month, please enjoy this encore of Dr. Sasha Vanterpool's webinar.

In this webinar, N2K Networks Cyber Workforce Consultant Dr. Sasha Vanterpool shares how to update job descriptions to better reflect cyber role expectations to improve hiring, training, and retention.

To view the original webinar on demand, visit here.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Understanding the multi-tiered impact of ransomware. [Research Saturday] Mar 09, 2024

Show notes

This week we are joined by Jamie MacColl and Dr. Pia Hüsch from RUSI discussing their work on "Ransomware: Victim Insights on Harms to Individuals, Organisations and Society." The research reveals some of the harms caused by ransomware, including physical, financial, reputational, psychological and social harms.

Researchers state "Based on interviews with victims and incident responders, this paper outlines the harm ransomware causes to organisations, individuals, the UK economy, national security and wider society."

The research can be found here:

Ransomware: Victim Insights on Harms to Individuals, Organisations and Society

Learn more about your ad choices. Visit megaphone.fm/adchoices

From breach to battle: The escalating threat of Midnight Blizzard. Mar 08, 2024

Show notes

Russian hackers persist against Microsoft’s internal systems. Change Healthcare systems are slowly coming back online. Russian propaganda sites masquerade as local news. Swiss government info is leaked on the darknet. Krebs on Security turns the tables on the Radaris online data broker. The NSA highlights the fundamentals of Zero Trust. The British Library publishes lessons learned from their ransomware attack. Researchers run a global prompt hacking competition. CheckPoint looks at Magnet Goblin. Experts highlight the need for psychological safety in cyber security. Our guest is Dinah Davis, Founder and Editor-In-Chief of Code Like A Girl, sharing the work they do to inspire young women to consider a career in technology. And the I-Soon leak reveals the seedy underbelly of Chinese cyber operations.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Guest is Dinah Davis, Founder and Editor-In-Chief of Code Like A Girl, sharing the work they do to inspire young women to consider a career in technology.

Selected Reading

Microsoft says Russian-state sponsored hackers have been able to access internal systems (Reuters)

Change Healthcare brings some systems back online after cyberattack (The Record)

Spate of Mock News Sites With Russian Ties Pop Up in U.S (The New York Times)

Play ransomware attack on Xplain exposed 65,000 files containing data relevant to the Swiss Federal Administration (Security Affairs)

A Close Up Look at the Consumer Data Broker Radaris (krebsonsecurity)

NSA Details Seven Pillars Of Zero Trust (GB Hackers)

LEARNING LESSONS FROM THE CYBER-ATTACK British Library cyber incident review (British Library)

A Taxonomy of Prompt Injection Attacks (Schneier on Security)

https://arxiv.org/pdf/2311.16119.pdf (Research)

Magnet Goblin Targets Publicly Facing Servers Using 1-Day Vulnerabilities (Check Point Research)

Why 'psychological safety' is so important for building a robust security culture (ITPro)

Inside Chinese hacking company’s culture of influence, alcohol and sex (C4isernet)

International Women's Day (International Women’s Day)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: Breaking Through: Securing the advancement of women in cybersecurity. {Special Editions] Mar 08, 2024

Show notes

In honor of International Women's Day, please enjoy this encore of our 2023 Women in Cyber panel.

In the dynamic field of cybersecurity, it’s well established that creating more opportunities for diversity and inclusion is essential for developing a highly skilled workforce. As an industry, we are starting to see the fruits of that labor, but there is a growing need for diverse leadership to nurture continuous innovation and resilience in cybersecurity.

As part of N2K’s 2023 Women in Cyber content series, we’re excited to host an engaging virtual panel discussion moderated by N2K's President Simone Petrella featuring insights, experiences, and strategies for advancing more women into leadership roles within the field.

This virtual discussion explores different areas including:

Navigating the Cybersecurity Landscape: Gain insights into our guests' career journeys, including mentors, challenges, and success, and how the evolving landscape may present different challenges and opportunities for women.
Building a Supportive Ecosystem: Explore the importance of mentorship, allyship, and a strong network in propelling women into leadership, and how to create an environment where everyone can thrive.
Closing the Gender Gap: Delve into actionable strategies and best practices for organizations to promote gender diversity in their cybersecurity leadership teams.
The Future of Cybersecurity Leadership: Gain a forward-looking perspective on the evolving role of women in shaping the future of cybersecurity.

This panel discussion is a must-listen event for professionals, leaders, and aspiring cybersecurity experts who are committed to promoting diversity and empowering women to excel in cybersecurity leadership. Don't miss the opportunity to be part of this inspiring conversation and drive positive change in the industry.

Panelists:

Abisoye Ajayi, Cyber & Analytics Manager at Tulsa Innovation Labs
Koma Gandy, VP, Leadership & Business at Skillsoft
Lauren Zabierek, Sr. Advisor at CISA

Learn more about your ad choices. Visit megaphone.fm/adchoices

A secret scheme resulting in stolen secrets. Mar 07, 2024

Show notes

A former Google software engineer is charged with stealing AI tech for China. State attorneys general from forty-one states call out Meta over account takeover issues. Researchers demonstrate a Stuxnet-like attack using PLCs. Buyer beware - A miniPC comes equipped with pre installed malware. A Microsoft engineer wants the FTC to take a closer look at Copilot Designer. There’s a snake in Facebook’s walled garden. Bruce Schneier wonders if AI can strengthen democracy. On our Industry Voices segment, guest Jason Lamar, Senior Vice President of Product at Cobalt, joins us to discuss offensive security strategy. And NIST works hard to keep their innovations above water.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

On our Industry Voices segment, guest Jason Lamar, Senior Vice President of Product at Cobalt, joins us to discuss offensive security strategy. You can find out more from Cobalt’s OffSec Shift report here.

Selected Reading

Former Google Engineer Charged With Stealing AI Secrets (Infosecurity Magazine)

Several States Attorneys General have written to Meta demanding better account recovery (NY gov)

Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers (SecurityWeek)

Whoops! ACEMAGIC ships mini PCs with free bonus pre-installed malware (Graham Cluley)

Microsoft AI engineer warns FTC about Copilot Designer safety concerns (The Verge)

Snake, a new Info Stealer spreads through Facebook messages (Security Affairs)

NSA Details Seven Pillars Of Zero Trust (gbhackers)

How Public AI Can Strengthen Democracy (Schneier on Security)

This agency is tasked with keeping AI safe. Its offices are crumbling. (WashingtonPost)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Our TOPPODCAST Picks

Follow Us

Stay Connected

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

In honor of Women's History Month, please enjoy this encore of Dr. Sasha Vanterpool's webinar.

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

In honor of International Women's Day, please enjoy this encore of our 2023 Women in Cyber panel.

Panelists:

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

Related Podcasts

Links

Stay Connected