CyberWire Daily

Latest Episodes:

What’s a CNAPP: Cloud-Native Application Protection Platform? [CyberWire-X] Feb 19, 2024

Show notes

In this episode of CyberWire-X, N2K’s CSO, Chief Analyst, and Senior Fellow, Rick Howard, is joined by Tim Miller, Technical Marketing Engineer for Panoptica, Cisco's Cloud Application Security solution, (Panoptica is the result of Cisco's incubation engine (Outshift) for new products and markets), and Kevin Ford, Esri’s CISO. They discuss the complexity reduction need that Cloud-Native Application Protection Platforms (CNAPPs) provide. Outshift by Cisco is our CyberWire-X episode sponsor.

To learn more about Cloud-Native Application Protection Platforms, check out Panoptica’s website at https://panoptica.app and consider attending the Cisco Live EMEA in Amsterdam, February 5-8, 2024.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: Dominique Shelton Leipzig: No matter the statistics, even if against the odds, focus on what you want. [Legal] [Career Notes] Feb 18, 2024

Show notes

Privacy and data security lawyer, Dominique Shelton Leipzig shares that she has always wanted to be a lawyer, ever since she was a little girl. She talks about what her role is with clients in protecting and managing their data, sometimes adhering to up to 134 different data protection laws for global companies. Learn that not a lot has changed for an African-American woman partner at an Amlaw 100 firm as far as diversity during Dominique's career, and how Dominique suggests young lawyers should address those odds. Our thanks to Dominque for sharing her story with us.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Hackers come hopping back. [Research Saturday] Feb 17, 2024

Show notes

Ori David from Akamai is sharing their research "Frog4Shell — FritzFrog Botnet Adds One-Days to Its Arsenal." FritzFrog takes advantage of the fact that only internet facing applications were prioritized for Log4Shell patching and targets internal hosts, meaning that a breach of any asset in the network by FritzFrog can expose unpatched internal assets to exploitation.

The research states "FritzFrog has traditionally hopped around by using SSH brute force, and has successfully compromised thousands of targets over the years as a result." Over the years Akamai has seen more than 20,000 FritzFrog attacks, and 1,500+ victims.

The research can be found here:

Frog4Shell — FritzFrog Botnet Adds One-Days to Its Arsenal

Learn more about your ad choices. Visit megaphone.fm/adchoices

FBI initiates router revolution. Feb 16, 2024

Show notes

The FBI kicks Moobot out of small business routers. Sensitive data has been stolen from a state government network. AMC proposes a multi-million-dollar settlement after improperly sharing subscriber’s viewing habits. The U.S. targets an Iranian military ship in the Red Sea with a cyberattack. Lawmakers propose transparency in the use of algorithms in criminal trials. CERT-EU highlights a spear phishing spike. An infamous Zeus and IcedID operator pleads guilty. Our guests are Dr. Josh Brunty, Head Coach, and Brad Wolfenden, Program Director, of US Cyber Games join us to share the details of how their 2024 season is shaping up. And AI comes to video.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Dr. Josh Brunty, Head Coach, and Brad Wolfenden, Program Director, of US Cyber Games join us to share the details of how the 2024 season is shaping up.

Selected Reading

US disrupts Russian hacking campaign that infiltrated home, small business routers: DOJ (ABC News)

U.S. State Government Network Hacked Via Former Employee Account (Cyber Security News)

CISA Urges Patching of Cisco ASA Flaw Exploited in Ransomware Attacks (SecurityWeek)

AMC to pay $8M for allegedly violating 1988 law with use of Meta Pixel (Ars Technica)

U.S. conducted cyberattack on suspected Iranian spy ship (NBC News)

New bill would let defendants inspect algorithms used against them in court (The Verge)

Hackers Exploit EU Agenda in Spear Phishing Campaigns (Infosecurity Magazine)

Ukrainian Hacker Pleads Guilty for Leading Zeus & IcedID Malware Attacks (GBHackers on security)

OpenAI introduces Sora, its text-to-video AI model (The Verge)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

An AI arms race. Feb 15, 2024

Show notes

Microsoft highlights adversaries experiments with AI LLMs. A misconfiguration exposes a decades worth of emails. SentinelOne describes Kryptina ransomware as a service. The European Court of Human Rights rules against backdoors. Senator Wyden calls out a location data broker. GoldFactory steals facial scans to bypass bank security. The Glow fertility app exposes the data of twenty five million users. Qakbot returns. Our Guest Rob Boyce from Accenture talks about tailored extortion. And hacking the airport taxi line leads to prison.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Guest Rob Boyce from Accenture talks about tailored extortion as actors continue to shift to pure data extortion, with old and new tactics.

Selected Reading

State-backed hackers are experimenting with OpenAI models (Cyberscoop)

Staying ahead of threat actors in the age of AI (Microsoft)

U.S. Internet Leaked Years of Internal, Customer Emails (Krebs on security)

Kryptina RaaS | From Underground Commodity to Open Source Threat (SentinelOne)

Backdoors that let cops decrypt messages violate human rights, EU court says (Arstechnica)

A company tracked visits to 600 Planned Parenthood locations for anti-abortion ads, senator says (POLITICO)

Cybercriminals are stealing Face ID scans to break into mobile banking accounts (theregister)

Fertility tracker Glow fixes bug that exposed users’ personal data (TechCrunch)

New Qbot malware variant uses fake Adobe installer popup for evasion (bleepingcomputer)

Duo headed to prison for charging cabbies to skip JFK Airport line with Russian hackers' aid (nydailynews)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

It’s always DNS, but that may just be FUD. Feb 14, 2024

Show notes

It’s always DNS, but that may just be FUD. The DoD notifies victims of a cloud email server leak. New Jersey cops sue online data brokers. Crooks use WiFi jammers to thwart security systems. A copyright case against OpenAI is partially dismissed. Patch Tuesday includes two actively exploited zero days. CharmingCypress gathers political intelligence. Ann Johnson from Microsoft Security’s Afternoon Cyber Tea podcast talks with Frank Cilluffo, Director for Cyber and Critical Infrastructure Security at the McCrary Institute of Auburn University, about cyber and critical infrastructure. And beware Cupid’s misleading arrow.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Ann Johnson from Microsoft Security’s Afternoon Cyber Tea podcast talks with Frank Cilluffo, Director for Cyber and Critical Infrastructure Security at the McCrary Institute of Auburn University, about cyber and critical infrastructure. Check out the episode with the full conversation between Ann and Frank here.

Selected Reading

KeyTrap DNS Attack Could Disable Large Parts of Internet: Researchers (SecurityWeek)

US military notifies 20,000 of data breach after cloud email leak (TechCrunch)

New Jersey law enforcement officers sue 118 data brokers for not removing personal info (The Record)

Minnesota burglars are using Wi-Fi jammers to disable home security systems (TechSpot)

Sarah Silverman’s lawsuit against OpenAI partially dismissed (The Verge)

Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 73 flaws (BleepingComputer)

DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability (The Hacker News)

CharmingCypress Use Poisoned VPN Apps to Install Backdoor (Cyber Security News)

Beyond the Hype: Questioning FUD in Cybersecurity Marketing (SecurityWeek)

Valentine's Day Scams Woo the Lonely-Hearted (Security Boulevard)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Phishing threats unleashed. Feb 13, 2024

Show notes

Attackers lock up Azure accounts with MFA. Bank of America alerts customers to a third party data breach. Malicious cyber activity targets elections worldwide. CISA highlights a vulnerability in Roundcube Webmail. Lawmakers introduce a bipartisan bill to enhance healthcare cybersecurity. Siemens and Schneider Electric address multiple industrial vulnerabilities. Perception in tech gender parity still has a ways to go. Dave Bittner speaks with Guests Andrew Scott, Associate Director of China Operations at CISA, and Brett Leatherman, Section Chief for Cyber at the FBI, about Chinese threat actor Volt Typhoon. And the scourge of online obituary spam.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Guests Andrew Scott, Associate Director of China Operations at CISA, and Brett Leatherman, Section Chief at FBI, discussing PRC/Volt Typhoon advisory and living off the land guidance. Read the press release on “U.S. and International Partners Publish Cybersecurity Advisory on People’s Republic of China State-Sponsored Hacking of U.S. Critical Infrastructure.”

Selected Reading

Ongoing campaign compromises senior execs’ Azure accounts, locks them using MFA (Ars Technica)

Bank of America warns customers of data breach after vendor hack (BleepingComputer)

Global Malicious Activity Targeting Elections is Skyrocketing (Security Affairs)

CISA Warns Of Active Attacks on Roundcube Webmail XSS Vulnerability (CISA)

Bipartisan Senate Bill Requires HHS to Bolster Cyber Efforts (Gov Info Security)

ICS Patch Tuesday: Siemens Addresses 270 Vulnerabilities (SecurityWeek)

Four in five men in tech say women are treated equally, as women criticise ‘invisible challenges’ (Euronews)

The rise of obituary spam (The Verge)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

DOJ strikes justice. Feb 12, 2024

Show notes

The DOJ shuts down the Warzone rat. Ransomware hits over twenty Romanian hospitals, and Rysida gets a decryptor. Canada may ban the Flipper Zero. Chinese espionage claims against the US are light on facts. Australia looks to criminalize doxxing. Federal IT leaders seek better coordination with CISA and the JCDC. Wired looks at the effect of cyberattacks on inequality. Our guest is Manny Felix, Founder and CEO of US Cyber Initiative, sharing their work in unlocking cyber career opportunities for young people. And this thumb drive will self-destruct in five seconds.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Manuel "Manny" Felix, Founder and CEO of US Cyber Initiative, sharing their work in unlocking career opportunities for young people who are interested in cyber and emergent technology. US Cyber Initiative grew out of AZ Cyber. Learn more about AZ Cyber here.

Selected Reading

DOJ shuts down ‘Warzone’ malware vendor and charges two in connection (The Record)

Ransomware attack forces 18 Romanian hospitals to go offline (BleepingComputer)

Decryptor for Rhysida ransomware is available (Help Net Security)

Canada moves to ban the Flipper Zero amid rising auto theft concerns (TECHSPOT)

China’s Cyber Revenge | Why the PRC Fails to Back Its Claims of Western Espionage (SentinelOne)

‘Doxxing’ laws to be brought forward after Jewish WhatsApp leak (The Sydney Morning Herald)

Exclusive: Duke Energy to remove Chinese battery giant CATL from Marine Corps Base (Reuters)

Federal IT officials call on CISA for tougher standards, more coordination (FedScoop)

Priorities of the Joint Cyber Defense Collaborative for 2024 (CISA)

The Hidden Injustice of Cyberattacks (WIRED)

Ovrdrive USB stick with data-hiding and overheating self-destruct features nears crowdfunding goal (TechSpot)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: Graham Cluley: Have to be able to communicate to everybody. [Media] [Career Notes] Feb 11, 2024

Show notes

Computer security writer, podcaster and public speaker Graham Cluley describes learning to program on his own from magazines, creating text adventure games for donations, and his journey from programming to presenting and writing with a bit of tap dancing on the side. Along the way, Graham collaborated with others and learned to communicate so that all could understand, not just techies. Our thanks to Graham for sharing his story with us.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Ransomware is coming. [Research Saturday] Feb 10, 2024

Show notes

Jon DiMaggio, Chief Security Strategist for Analyst1, is discussing his research on "Ransomware Diaries Volume 4: Ransomed and Exposed - The Story of RansomedVC." While there is evidence to support that RansomedVC runs cybercrime operations, Jon questions the claims it made regarding the authenticity of the data it stole and the methods it used to extort victims.

The research states "I uncovered sensitive information about the group's leader, Ransomed Support (also known as Impotent), relating to secrets from his past." In this episode John shares his 6 key findings after spending months engaging with the lead criminal who runs RansomedVC.

The research can be found here: