CyberWire Daily

Latest Episodes:

Russian hackers hide in Ukraine telecoms for months. Jan 04, 2024

Show notes

Sandworm was in Kyivstar's networks for months. Museums face online outages. Emsisoft suggests a ransomware payment ban. An ambulance service suffers a data breach. Mandiant’s social media gets hacked. GXC Team's latest offerings in the C2C underground market. 23andMe blames their breach on password reuse. Lawyers are using outdated encryption. On today’s Threat Vector segment, David Moulton chats with Garrett Boyd, senior consultant at Palo Alto Networks Unit 42 about the importance of internal training and mentorship in cybersecurity. And in Russia, holiday cheers turn to political jeers.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

On today’s Threat Vector segment with David Moulton features Garrett Boyd, a senior consultant at Unit 42 by Palo Alto Networks with a background as a Marine and professor, discusses the importance of internal training and mentorship in cybersecurity. He provides insights into how training prepares professionals for industry challenges and how mentorship fosters professional growth and innovation. Garrett emphasizes the need for a mentorship culture in organizations and the responsibility of both mentors and mentees in this dynamic. The episode highlights the transformative impact of mentorship through personal experiences and concludes with an invitation for listeners to share their stories and a reminder to stay vigilant in the digital world.

Threat Vector

To learn what is top of mind each month from the experts at Unit 42 sign up for their Threat Intel Bulletin.

Selected Reading

Compromised accounts and C2C markets. Cyberespionage and state-directed hacktivism. (CyberWire)

Exclusive: Russian hackers were inside Ukraine telecoms giant for months (Reuters)

Hackers linked to Russian spy agency claim cyberattack on Ukrainian cell network (reuters)

Museum World Hit by Cyberattack on Widely Used Software (The New York Times)

The State of Ransomware in the U.S.: Report and Statistics 2023 (Emsisoft)

Nearly 1 million affected by ambulance service data breach (The Record)

Mandiant’s account on X hacked to push cryptocurrency scam (Bleeping Computer)

Cybercriminals Implemented Artificial Intelligence (AI) For Invoice Fraud (Resecurity)

23andMe tells victims it’s their fault that their data was breached (TechCrunch+)

The Curious Case of MD5 (katelynsills)

Firmware prank causes LED curtain in Russia to display ‘Slava Ukraini’ — police arrest apartment owner (The Record)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

A digital disappearance in Utah. Jan 03, 2024

Show notes

Cyber-kidnapping in Utah. Hospitals sue for data recovery. The US Department of Homeland Security assesses cyber threats to the US. Mac malware is on the rise. Cameras hacked by Russian intelligence services provide targeting information. Ransomware roundup. An NPM dependency campaign. Google recommends enhanced safe browsing. Rob Boyce from Accenture describes the Five Families and the trend of hacker collaboration. And the FTC wants to hear your cloned voice.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today, we are joined by Rob Boyce from Accenture talking about the Five Families, the trend of hacker collaboration.

Selected Reading

Missing Riverdale foreign exchange student found near Brigham City in case of ‘cyber kidnapping’ (ABC4)

What is ‘cyber kidnapping’ and what can you do to stay safe online? (Deseret News)

Hospitals ask courts to force cloud storage firm to return stolen data (BleepingComputer)

Homeland Threat Assessment (US Department of Homeland Security)

The Mac Malware of 2023 (Objective-See)

SBU blocks webcams that ‘flashed’ operation of air defense during missile attack on Kyiv on Jan 2 (Interfax-Ukraine)

Ukraine says Russia hacked web cameras to spy on targets in Kyiv (The Record)

Akumin radiology and oncology reports ransomware attack and data breach (beyondmachines)

Coop supermarket chain hit by ransomware cyberattack (beyondmachines)

When “Everything” Goes Wrong: NPM Dependency-Hell Campaign – 2024 Edition (Checkmarx)

Accounts in danger: Google recommends enhanced safe browsing and extra care (cybernews)

The FTC Voice Cloning Challenge (FTC)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Apple's clickless exploit. Jan 02, 2024

Show notes

A zero-click exploit affects iPhones belonging to Kaspersky employees. A GRU cyber campaign incorporates novel malware. The Indian government targets Apple over hacking attempts. Microsoft disables App Installer. Australian courts’ AV is compromised. A BlackBasta decryptor is released. Cyber Toufan claims attacks against Israeli targets. Patients in Oklahoma face online extortion. LoanCare customers’ data is at risk. Google settles a private browsing lawsuit. Barracuda patches a zero-day. That Chinese spy balloon was making a local call. And then Caleb Barlow, a friend of our show, shares password security tips you should know.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Caleb Barlow, CEO of Cyberbit, joins us today to share helpful tips to remember those passwords.

Selected Reading

4-year campaign backdoored iPhones using possibly the most advanced exploit ever (Ars Technica)

New malware found in analysis of Russian hacks on Ukraine, Poland (The Record)

Russian Military Intelligence Blamed for Blitzkrieg Hacks (GovInfo Security)

India targets Apple over its phone hacking notifications (Washington Post)

Microsoft disables App Installer after observing financially motivated threat actor activity (Cybernews)

Cyber attack on Victoria's court system may have exposed recordings of sensitive cases (ABC News)

New Black Basta decryptor exploits ransomware flaw to recover files (Bleeping Computer)

Pro-Palestinian operation claims dozens of data breaches against Israeli firms (The Record)

Integris Health patients get extortion emails after cyberattack (Bleeping Computer)

AG: Corewell Health reports another data breach; affects 1 million patients (The Oakland Press)

LoanCare Notifying 1.3 Million of Data Breach Following Cyberattack on Parent Company (Security Week)

Google settles $5 billion consumer privacy lawsuit (Reuters)

Barracuda fixed a new ESG zero-day exploited by Chinese group UNC4841 (Security Affairs)

U.S. intelligence officials determined the Chinese spy balloon used a U.S. internet provider to communicate (NBC News)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Microsoft EVP Charlie Bell on the Future of Security [Afternoon Cyber Tea] Jan 01, 2024

Show notes

Microsoft Security EVP Charlie Bell joins Ann on this week's episode of Afternoon Cyber Tea. Charlie has over four decades in the tech industry, from developing space shuttle software to leading the creation of Amazon Web Services' decentralized engineering system and now leading Microsoft’s effort to make the digital world safe and secure for everyone on the planet. Ann and Charlie discuss AI, the Security ecosystem, and why he thinks speed and acceleration of problem-solving are so relevant today.

Resources:

View Charlie Bell on LinkedIn

View Ann Johnson on LinkedIn

Related Microsoft Podcasts:

Listen to: Uncovering Hidden Risks

Listen to: Security Unlocked

Listen to: Security Unlocked: CISO Series with Bret Arsenault

Discover and follow other Microsoft podcasts at microsoft.com/podcasts

Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: Tom Quinn: The mark of making a difference. [CISO] [Career Notes] Dec 31, 2023

Show notes

Financial firm CISO, Tom Quinn, takes us from his first experience with modern computers in the military to his current role as a Chief Information Security Officer. It's important to understand how the technology works, but it's also important to understand how people work. And, to make a difference. Our thanks to Tom for sharing his story with us.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: What malicious campaign is lurking under the surface? [Research Saturday] Dec 30, 2023

Show notes

Israel Barak, CISO from Cybereason, sits down with Dave to discuss their research, "Operation CuckooBees: Cybereason Uncovers Massive Chinese Intellectual Property Theft Operation." Cybereason researchers recently found an attack lurking beneath the surface which was assessed to be the work of Chinese APT Winnti. Cybereason briefed the FBI and the DOJ on the investigation into the malicious campaign.

The research states, "For years, the campaign had operated undetected, siphoning intellectual property and sensitive data." The team quickly made two reports on the campaign, one sharing an examination on the tactics and techniques. The second gives a detailed analysis of the malware and exploits used.

The research can be found here:

Operation CuckooBees: Cybereason Uncovers Massive Chinese Intellectual Property Theft Operation

Learn more about your ad choices. Visit megaphone.fm/adchoices

T-Minus Overview- Space Cybersecurity. [t-minus] Dec 29, 2023

Show notes

Welcome to the T-Minus Overview Radio Show. In this program we’ll feature some of the conversations from our daily podcast with the people who are forging the path in the new space era, from industry leaders, technology experts and pioneers, to educators, policy makers, research organizations, and more. In this episode we’re covering cybersecurity for space. What is it? What are the threats to space systems, why is there such an emphasis on it right now, and what are people doing about it?

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our weekly intelligence roundup, Signals and Space, and you’ll never miss a beat. And be sure to follow T-Minus on LinkedIn and Instagram.

T-Minus Guest

Our first guest is Renee Wynn, former CIO of NASA. Our second guest is Matthieu Bailly, Vice President of Space at CYSEC, a cybersecurity company based in Lausanne, Switzerland. Our third guest speaking to T-Minus Producer Alice Carruth, is Steve Luczynski, Board Chairman of the Aerospace Village.

T-Minus Crew Survey

We want to hear from you! Please complete our 4 question survey. It’ll help us get better and deliver you the most mission-critical space intel every day.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at space@n2k.com to request more info.

Want to join us for an interview?

Please send your pitch to space-editor@n2k.com and include your name, affiliation, and topic proposal.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Peter Bauer: CEO of Mimecast [Cyber CEOs Decoded] Dec 28, 2023

Show notes

In this episode, Marc catches up with Mimecast CEO and co-founder Peter Bauer. They cover Peter's CEO journey, including what it was like growing up in South Africa, why he opted out of attending university, highlights from Mimecast's 20-year history, and what Peter learned from taking the company public — and then private again.

You'll also learn:

When and how to raise capital, and how to manage meeting the board's expectations.
How CEOs can overcome self-doubt and continuously reimagine their role to look at challenges with new eyes.
How to view the company's history as a story with chapters and eras, and why it's important to always believe you're at the beginning of the book.

Learn more about your ad choices. Visit megaphone.fm/adchoices

NACD Accelerate, Ian Furr’s Volunteer Work, & Bidemi (Bid) Ologunde Member Spotlight [RH-ISAC Podcast] Dec 27, 2023

Show notes

In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by John Scrimsher, chief information security officer (CISO) at Kontoor Brands, Inc., and Marcel Bucsescu, senior director of credentialing and strategic engagement at NACD, to expand upon the NACD Accelerate program. Then Ian Furr, security integration engineer at RH-ISAC, talks about his volunteer work with the Information Technology Disaster Resource Center (ITDRC) and the Fairfax County Fire and Rescue Department. Finally, Luke chats with Bidemi (Bid) Ologunde, intelligence analyst at Expedia Group, about his own podcast, The Bid Picture, background, and the trajectory of cybersecurity.

Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Artificial Intelligence: Insights & Oddities [8th Layer Insights] Dec 26, 2023

Show notes

On this episode, Perry celebrates the one year birthday of ChatGPT by taking a look at AI from technological, philosophical, and folkloric perspectives. We see how AI was formed based on human words and works, and how it can now shape the future of human legend and belief.

Guests:

Brandon Karpf, Vice President at N2K Networks (LinkedIn) (Website)
Dr. Lynne S. McNeill, Associate Professor at Utah State University (LinkedIn) (Twitter)
Dr. John Laudun, Professor at University of Louisiana at Lafayette (LinkedIn) (Twitter) (Website)
Lev Gorelov, Research Director at Handshake Consulting (LinkedIn) (Twitter) (Website)

Resources

Interview with the AI, part one, by the Brandon Karpf / the CyberWire
'Hard Fork': An Interview With Sam Altman, by The New York Times
The Exciting, Perilous Journey Toward AGI, Ilya Sutskever TED Talk
Ilya: the AI scientist shaping the world, by The Guardian
Meet Loab, the AI Art Woman Haunting the Internet: Is she a demon? A Cryptid? Or nothing at all..., the Guardian
In 2016, Microsoft’s Racist Chatbot Revealed the Dangers of Online Conversation The bot learned language from people on Twitter—but it also learned values, IEEE Spectrum
Perry's Digital Folklore episode about AI
Handshake's Generative AI Masterclass on Maven

Perry's Books (Amazon Associate links)

Transformational Security Awareness: What Neuroscientists, Storytellers, and Marketers Can Teach Us About Driving Secure Behaviors, by Perry Carpenter
The Security Culture Playbook: An Executive Guide To Reducing Risk and Developing Your Human Defense Layer by Perry Carpenter & Kai Roer

Be sure to check out Perry's other show, Digital Folklore. It's all about the oddities and importance of online culture. Head over to the show's website (https://digitalfolklore.fm/) to see our custom artwork, subscribe to the newsletter, shop for merch, support the show on Patreon, and more. Want to check out what others are saying? Here's some recent press about the show: https://digitalfolklore.fm/in-the-news.