CyberWire Daily

Latest Episodes:

A Typhoon counter. Jan 30, 2024

Show notes

The U.S. counters a Chinese hacking campaign. Juniper issues out of band patches. Schneider Electric suffers a ransomware attack. Over a million and a half individuals are affected by an insurance consulting firm breach. AT&T finds DarkGate malware leveraging Microsoft teams. The White House is set to require AI developers to share safety test results. Resecurity finds high level credentials posted online. Zscaler says Zloader malware is back. The Georgia county prosecuting former President Trump got hit with a cyberattack. Microsoft’s Ann Johnson speaks with guest Deneen DeFiore, Vice President and Chief Information Security Officer at United Airlines, about cybersecurity at 35,000 feet. And yesterday’s airborne joker is off the hook.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Ann Johnson, host of Microsoft Security’s Afternoon Cyber Tea podcast, talks with guest Deneen DeFiore, Vice President and Chief Information Security Officer at United Airlines, about cybersecurity at 35,000 feet.

Selected Reading

Exclusive: US disabled Chinese hacking network targeting critical infrastructure (Reuters)

China-Linked Hackers Target Myanmar's Top Ministries with Backdoor Blitz (The Hacker News)

Juniper Networks Releases Urgent Junos OS Updates for High-Severity Flaws (The Hacker News)

Schneider Electric confirms it was hit by ransomware attack (Silicon Republic)

1.5 Million Affected by Data Breach at Insurance Broker Keenan & Associates (SecurityWeek)

DarkGate malware delivered via Microsoft Teams - detection and response (AT&T)

AI companies will need to start reporting their safety tests to the US government (AP)

Hundreds of network operators’ credentials found circulating in Dark Web (Security Affairs)

New ZLoader Malware Variant Surfaces with 64-bit Windows Compatibility (The Hacker News)

Cyberattack Hits Georgia County Where Trump Is Charged (Bloomberg)

British man acquitted over London-Spain flight bomb hoax (BBC)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Seeking dismissal of SEC allegations. Jan 29, 2024

Show notes

Solarwinds seeks dismissal of SEC allegations. Urgent calls to implement fixes for Jenkins open-source software automation tools. A New Jersey township closes schools and offices after a cyberattack. The Centre for Cybersecurity Belgium warns of a critical vulnerability in GitLab. The FBI arrests a notorious swatter. HHS releases cybersecurity performance goals. The feds remind organizations to preserve online messaging. Mercedes-Benz exposes data after an authentication token was left unsecured. A dark web drug dealer pleads guilty. Our guest is Caleb Barlow from Cyberbit, discussing hacker celebrities and why yours truly did not make the list. And threats of airport terrorism on public WiFi is no joking matter.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Podcast partner Caleb Barlow, CEO of Cyberbit, discusses hacker celebrities and why our own Dave Bittner did not make the list.

Selected Reading

SolarWinds Seeks Dismissal of ‘Unfounded’ SEC Cybersecurity Suit (Bloomberg Law)

Fix Available for Critical Jenkins Flaw That Leads to RCE Attacks (Security Boulevard)

Freehold Township district: All schools and offices closed Monday due to cybersecurity incident (News12 New Jersey)

WARNING: CRITICAL ARBITRARY FILE WRITE VULNERABILITY IN GITLAB CE/EE, PATCH IMMEDIATELY! (Centre for Cybersecurity Belgium)

Police Arrest Teen Said to Be Linked to Hundreds of Swatting Attacks (WIRED)

HHS debuts voluntary cybersecurity performance goals to enhance healthcare sector resilience (Industrial Cyber)

Don’t Delete Slack or Signal Chats, US Agencies Warn Companies (Bloomberg Law)

How a mistakenly published password exposed Mercedes-Benz source code (TechCrunch)

Dark Web Drugs Vendor Forfeits $150m After Guilty Plea (Infosecurity Magazine)

‘On My Way to Blow Up the Plane’: Teen Faces Huge Fine After Joke Leads to Fighter Jets Scrambling (Gizmodo)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Rashmi Bharathan: Connecting is important. [Auditor] [Career Notes] Jan 28, 2024

Show notes

Rashmi Bharathan, an Information Technology Internal Auditor from Wintrust Financial Corporation sits down to share her story as a woman with 10 years in the IT industry and how she got her start. From childhood Rashmi always wanted to be a good leader, helping those around her, now she shares how helping people is a passion of hers and spends a lot of her time volunteering to help those coming into this industry. She says "It's all about, you should know your connections. That is more important. So I would say that networking and volunteering is really going to help you to grow in your career," sharing that community is the key to her success and working hard to network has been a great help to her to get her where she is today. We thank Rashmi for sharing her story with us.

Learn more about your ad choices. Visit megaphone.fm/adchoices

What’s a CNAPP: Cloud-Native Application Protection Platform? [CyberWire-X] Jan 28, 2024

Show notes

In this episode of CyberWire-X, N2K’s CSO, Chief Analyst, and Senior Fellow, Rick Howard, is joined by Tim Miller, Technical Marketing Engineer for Panoptica, Cisco's Cloud Application Security solution, (Panoptica is the result of Cisco's incubation engine (Outshift) for new products and markets), and Kevin Ford, Esri’s CISO. They discuss the complexity reduction need that Cloud-Native Application Protection Platforms (CNAPPs) provide. Outshift by Cisco is our CyberWire-X episode sponsor.

To learn more about Cloud-Native Application Protection Platforms, check out Panoptica’s website at https://panoptica.app and consider attending the Cisco Live EMEA in Amsterdam, February 5-8, 2024.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Hooked on pirated macOS applications. [Research Saturday] Jan 27, 2024

Show notes

Jaron Bradley from Jamf Threat Labs is sharing their work on "Jamf Threat Labs discovers new malware embedded in pirated applications." Jamf Threat Labs has detected a series of pirated macOS applications that have been modified to communicate to attacker infrastructure.

The research states "These applications are being hosted on Chinese pirating websites in order to gain victims." The discovery marks new and advanced malware, similar to the ZuRu malware, first discovered by Objective-See in 2021 within the iTerm2 application.

The research can be found here:

Jamf Threat Labs discovers new malware embedded in pirated applications

Learn more about your ad choices. Visit megaphone.fm/adchoices

A new purchase is cause for a call out. Jan 26, 2024

Show notes

Senator Wyden calls out the NSA for purchasing American’s internet records. Senators look to add IT and ICS environments to federal employee cyber competitions. The FTC asks big tech about their investments in AI. Turns out the GSA bought a bunch of Chinese security cameras. Akira ransomware claims a breach of Lush cosmetics. ESET reports on the Blackwood cyberespionage group. Wired looks at Predatory Sparrow. The U.S. stands firm on the United Nations Cybercrime Treaty. Our guest is Tony Surak, CMO & Operating Partner from DataTribe, with insights on the state of venture capital in cyber. And a Trickbot gang member will be doing some time.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Guest Tony Surak from DataTribe joins us to share his take on the state of the VC cyber market.

Selected Reading

Wyden Releases Documents Confirming the NSA Buys Americans’ Internet Browsing Records; Calls on Intelligence Community to Stop Buying U.S. Data Obtained Unlawfully From Data Brokers, Violating Recent FTC Order

Senate Committee debuts bipartisan bill to add OT, ICS environments to federal employee cyber competition

FTC officially asks Big Tech about their AI deals | Cybernews

GSA Sparks Security Fears After Buying Risky Chinese Cameras

Akira ransomware gang says it stole passport scans from Lush • The Register

Elusive Chinese Cyberspy Group Hijacks Software Updates to Deliver Malware - SecurityWeek

How a Group of Israel-Linked Hackers Has Pushed the Limits of Cyberwar | WIRED

On eve of final negotiations, US says consensus growing around ‘narrow’ UN cybercrime treaty

Trickbot malware developer sentenced to 5 years behind bars • The Register

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Another day, another Blizzard attack. Jan 25, 2024

Show notes

Cozy Bear breaches Hewlett Packard Enterprise. An investigation reveals global surveillance based on digital advertising. Cisco patches critical vulnerabilities. Meta aims to enhance the online safety of minors. iOS notifications are exploited for tracking. EquiLend’s systems go offline after a cyberattack. A DC theater faced financial crisis after seeing their bank account drained. Critical infrastructure is targeted in Ukraine. The latest insights on ransomware. Guest Lance Hood joins us from TransUnion to share how fraud attacks on financial industry call centers are rising. And Teslas get POwned in Tokyo.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Guest Lance Hood joins us from TransUnion to share how fraud attacks on financial industry call centers are rising.

Selected Reading

Hewlett Packard Enterprise tells SEC it was breached by Russia’s 'Cozy Bear' hackers (The Record)

Inside a Global Phone Spy Tool Monitoring Billions (404 Media)

Cisco Patches Critical Vulnerability in Enterprise Collaboration Products (SecurityWeek)

Instagram and Facebook will now prevent strangers from messaging minors by default (The Verge)

Research Reveals How iPhone Push Notifications Leak User Data (MacRumors)

Financial tech firm EquiLend says recovery after cyberattack ‘may take several days’ (The Record)

'No gift is too small' | GALA Hispanic Theater asking for donations after hackers drain bank accounts (WUSA9)

Ukrainian energy giant, postal service, transportation agencies hit by cyberattacks (The Record)

The 2024 Ransomware Threat Landscape (Symantec Enterprise Blogs)

Who pays, and why: A researcher examines the ransomware victim’s mindset (The Record)

Tesla Hack Earns Researchers $100,000 at Pwn2Own Automotive - SecurityWeek(SecurityWeek)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

The fight against exploiting Americans. Jan 24, 2024

Show notes

Biden prepares executive order on foreign access to data. Britain’s NCSC warns of a significant ransomware increase. Cisco Talos confirms ransomware surge. BuyGoods.com leaks PII and KYC data. Fortra faces scrutiny over slow disclosure. AI fights financial fraud. Intel471 highlights bulletproof hosting. NSO Group lobbies to revamp their image. Tussling in Missouri over election security. Integrating cyber education. Our guests are N2K President Simone Petrella and WiCyS Executive Director Lynn Dohm talking about a new partnership for a comprehensive Cyber Talent Study. And the moral panic of Furbies.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today’s guests are N2K President Simone Petrella and WiCyS Executive Director Lynn Dohm talking with Dave Bittner about a new partnership for a comprehensive Cyber Talent Study to deepen the collective understanding of cybersecurity competencies within the industry.

Selected Reading

Biden Seeks to Stop Countries From Exploiting Americans’ Data for Espionage (Bloomberg)

British intelligence warns AI will cause surge in ransomware volume and impact (The Record)

Significant increase in ransomware activity found in Talos IR engagements, while education remains one of the most-targeted sectors (Talos)

Global Retailer BuyGoods.com Leaks 198GB of Internal and User PII, KYC data (HACKREAD)

Fortra blasted over slow response to critical GoAnywhere file transfer bug (SC Media)

Gen AI Expected to Bring Big Changes to Banking Sector (GovInfo Security)

Why Bulletproof Hosting is Key to Cybercrime-as-a-Service (Infosecurity Magazine)

Notorious Spyware Maker NSO Group Is Quietly Plotting a Comeback (WIRED)

Missouri secretary of state accused of withholding cybersecurity reviews of election authorities (StateScoop)

Cybersecurity education from childhood is a vital tool: 72% of children worldwide have experienced at least one type of cyber threat (Check Point)

These Are the Notorious NSA Furby Documents Showing Spy Agency Freaking Out About Embedded AI in Children's Toy (404 Media)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

The mother of all data breaches. Jan 23, 2024

Show notes

The mother of all data breaches. CISA director Easterly is the victim of a swatting incident. An AI robocall in New Hampshire seeks to sway the election. Australia sanctions an alleged Russian cyber-crime operator. Atlassian Confluence servers are under active exploitation. Apple patches a webkit zero-day. Black Basta hits a major UK water provider. Hackers who targeted an Indian ISP launch and online search portal. A Massachusetts hospital suffered a Christmas day ransomware attack. Ann Johnson host of the Afternoon Cyber Tea podcast, speaks with Caitlin Sarian, known to many as Cybersecurity Girl. And HP claims bricked printers are a security feature, not a bug.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Microsoft Security’s Afternoon Cyber Tea podcast host, Ann Johnson, speaks with Caitlin Sarian, known to many as Cybersecurity Girl, a leading influencer with a cybersecurity-focused social presence. Listen to the full interview here.

Selected Reading

Mother of All Breaches: a Historic Data Leak Reveals 26 Billion Records (Cybernews)

CISA’s Easterly the target of ‘harrowing’ swatting incident (The Record)

AI robocalls impersonate President Biden in an apparent attempt to suppress votes in New Hampshire (PBS NewsHour)

Hear fake Biden robocall urging voters not to vote in New Hampshire (YouTube)

Medibank hack: Russian sanctioned over Australia's worst data breach (BBC)

Hackers start exploiting critical Atlassian Confluence RCE flaw (BleepingComputer)

iOS 17.3 and macOS Sonoma 14.3 Patch WebKit Vulnerability That May Have Been Exploited (MacRumors)

UK water company that serves millions confirms system attack Indian ISP Hathway Data Breach (The Record)

Hacker Leaks 4 Million Users, KYC Data (HACKREAD)

Massachusetts hospital claimed to be targeted by Money Message ransomware (SC Media)

HP's CEO spells it out: You're a 'bad investment' if you don't buy HP supplies (The Register)

HP CEO evokes James Bond-style hack via ink cartridges (Ars Technica)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Midnight Blizzard brings the storm. Jan 22, 2024

Show notes

Russian state hackers breach Microsoft. LockBit claims Subway restaurants hack. A Swedish datacenter is hit with ransomware. VMware patches a vulnerability targeted by Chinese espionage groups. Sentinel Labs warns of North Korean APTs focus on cybersecurity pros. FTC order another data broker to restrict location data. US Feds release security guidance for water and wastewater sectors. Senators question the DOJ on facial recognition technology. Ukraine’s Monobank gets DDoSed. N2K’s CSO Rick Howard joins us to share some insight into what he and the Hash Table are cooking up for the upcoming season of his CSO Perspectives podcast. The passing of a Time Lord.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

N2K’s CSO Rick Howard joins us to share some insight into what he and the Hash Table are cooking up for the upcoming season of his CSO Perspectives podcast launching next month.

Selected Reading

Microsoft: Russian Hackers Had Access to Executives' Emails (GovInfo Security)

LockBit ransomware gang claims the attack on the sandwich chain Subway (Security Affairs)

Ransomware hits cloud service Tietoevry; numerous Swedish customers affected (The Record)

Chinese Espionage Group UNC3886 Found Exploiting CVE-2023-34048 Since Late 2021 (Mandiant)

North Korea’s ScarCruft APT group targets infosec pros (CSO Online)

FTC Order Will Ban InMarket from Selling Precise Consumer Location Data (Federal Trade Commission)

US Gov Publishes Cybersecurity Guidance for Water and Wastewater Utilities (SecurityWeek)

Ukraine’s Monobank hit with massive DDoS attack (Silicon Republic)

Senators ask DOJ to investigate whether facial recognition tech violates Civil Rights Act (The Record)

RIP, Internet’s Time Lord (On My Om)

Network Time Protocol (NTP) attack (noun) (Word Notes podcast)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Our TOPPODCAST Picks

Follow Us

Stay Connected

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

Related Podcasts

Links

Stay Connected