CyberWire Daily

Latest Episodes:

“Espionage and the Metaverse” – with Cathy Hackl [SpyCast] Dec 26, 2023

Show notes

Summary

Cathy Hackl (Twitter, LinkedIn) joins Andrew (Twitter; LinkedIn) to discuss the potential implications of the metaverse on intelligence. Cathy has been called the “Godmother of the Metaverse.”

What You’ll Learn

Intelligence

What the metaverse is
Security and counterintelligence in a virtual world
Futurism within intelligence agencies
Potential risks and consequences of the metaverse

Reflections

How virtual spaces can affect our physical world
The necessity to evolve alongside technology

And much, much more …

Episode Notes

The web will continue to evolve and change with time, but what’s coming next? And how will this evolution affect the ways that intelligence organizations around the world conduct their operations?

This week on SpyCast, Cathy Hackl joins Andrew to explain what the metaverse is, what we can expect from living in this new virtual world, and how intelligence agencies can begin planning for the Web 3 future. Cathy Hackl has been dubbed the “Godmother of the Metaverse”

Resources

Featured Resource

Into the Metaverse: The Essential Guide to the Business Opportunities of the Web3 Era, Cathy Hackl (Bloomsbury, 2023)
Metaverse Marketing [Cathy’s podcast]

Beginner Resources

What Is the Metaverse, Exactly?, Wired (2022) [Article]
Web 3.0 Explained In 5 Minutes, YouTube (2022) [5 min. Video]
12 new tech terms you need to understand the future, R. Gray, BBC (2018)

SpyCasts

How Artificial Intelligence is Changing the Spy Game – with Mike Susong (2022)
Trafficking Data: The Digital Struggle with China -- with Aynne Kokas (2022)
The FBI & Cyber – with Cyber Division Chief Bryan Vorndran (Part 1 of 2)
The FBI & Cyber – with Cyber Division Chief Bryan Vorndran (Part 2 of 2)

Wildcard Resource

Watch the world’s first metaverse music video, Snoop Dogg’s “House I Built,” here!

Learn more about your ad choices. Visit megaphone.fm/adchoices

Solution Spotlight: Simone Petrella and Camille Stewart Gloster discuss the White House's cybersecurity workforce and education strategy. [Interview Selects] Dec 25, 2023

Show notes

This interview from August 18th, 2023 originally aired as a shortened version on the CyberWire Daily Podcast. In this extended interview, Simone Petrella sits down with Camille Stewart Gloster, Deputy National Cyber Director at the The White House discuss the White House's cybersecurity workforce and education strategy.

Learn more about your ad choices. Visit megaphone.fm/adchoices

The CyberWire: The 12 Days of Malware. [Special Edition] Dec 23, 2023

Show notes

Merry Christmas and Happy Holidays from the CyberWire and our friends! Enjoy our rendition of the 12 Days of Malware created by Dave Bittner and performed by Dave and friends: Rachel Tobac, Jayson Street, Ron Eddings & Chris Cochran, Ray [Redacted], Dinah Davis, Camille Stewart, Rick Howard, Michelle Dennedy, Jack Rhysider, Johannes Ullrich, and Charity Wright. Ba dum bum bum. Sing along if you are game! Check out our video for the full effect!

The 12 Days of Malware lyrics

On the first day of Christmas, my malware gave to me:

A keylogger logging my keys.

On the second day of Christmas, my malware gave to me:

2 Trojan Apps...

And a keylogger logging my keys.

On the third day of Christmas, my malware gave to me:

3 Web shells...

2 Trojan Apps...

And a keylogger logging my keys.

On the fourth day of Christmas, my malware gave to me:

4 Crypto scams...

3 Web shells...

2 Trojan Apps...

And a keylogger logging my keys.

On the fifth day of Christmas, my malware gave to me:

5 Zero Days!

4 Crypto scams...

3 Web shells...

2 Trojan Apps...

And a keylogger logging my keys.

On the sixth day of Christmas, my malware gave to me:

6 Passwords spraying...

5 Zero Days!

4 Crypto scams...

3 Web shells...

2 Trojan Apps...

And a keylogger logging my keys.

On the seventh day of Christmas, my malware gave to me:

7 Scripts a scraping...

6 Passwords spraying...

5 Zero Days!

4 Crypto scams...

3 Web shells...

2 Trojan Apps...

And a keylogger logging my keys.

On the eighth day of Christmas, my malware gave to me:

8 Worms a wiping...

7 Scripts a scraping...

6 Passwords spraying...

5 Zero Days!

4 Crypto scams...

3 Web shells...

2 Trojan Apps...

And a keylogger logging my keys.

On the ninth day of Christmas, my malware gave to me:

9 Rootkits rooting...

8 Worms a wiping...

7 Scripts a scraping...

6 Passwords spraying...

5 Zero Days!

4 Crypto scams...

3 Web shells...

2 Trojan Apps...

And a keylogger logging my keys.

On the tenth day of Christmas, my malware gave to me:

10 Darknet markets...

9 Rootkits rooting...

8 Worms a wiping...

7 Scripts a scraping...

6 Passwords spraying...

5 Zero Days! (Bah-dum-dum-dum!)

4 Crypto scams...

3 Web shells...

2 Trojan Apps...

And a keylogger logging my keys.

On the eleventh day of Christmas, my malware gave to me:

11 Phishers phishing...

10 Darknet markets...

9 Rootkits rooting...

8 Worms a wiping...

7 Scripts a scraping...

6 Passwords spraying...

5 Zero Days! (Bah-dum-dum-dum!)

4 Crypto scams...

3 Web shells...

2 Trojan Apps...

And a keylogger logging my keys.

On the twelfth day of Christmas, my malware gave to me:

12 Hackers hacking...

11 Phishers phishing...

10 Darknet markets...

9 Rootkits rooting...

8 Worms a wiping...

7 Scripts a scraping...

6 Passwords spraying...

5 Zero Days!

4 Crypto scams...

3 Web shells...

2 Trojan Apps...

And a keylogger logging my keys.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Sentenced to hospital detention. Dec 22, 2023

Show notes

A Lapsus$ hacker is sentenced to hospital detention. Online ads and phishing drain crypto wallets. Cyberespionage continues. LockBit and ALPHV say they want to form a ransomware cartel. The 8220 gang's cryptojacking. DarkGate RAT's propagation. The evolution of Bandook. A prominent title insurance company takes systems offline. Rick Howard speaks with guests John Goodman & Amanda Satterwhite of Accenture Federal Services about the launch of a public sector Cybersecurity Center of Excellence. And Trump’s Dumps lead to BidenCash.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

N2K’s Rick Howard talks with guests John Goodman & Amanda Satterwhite of Accenture Federal Services about the launch of a public sector Cybersecurity Center of Excellence in conjunction with Google.

Selected Reading

The infamous GTA VI hacker has been convicted - and the story is simply absurd (IT Pro)

Crypto drainer steals $59 million from 63k people in Twitter ad push (Bleeping Computer)

Threat Actor 'UAC-0099' Continues to Target Ukraine (Deep Instinct)

‘Today FBI Got Him, Tomorrow They Will Get Me’: LockBit, BlackCat Unite to Form Cyber Cartel (The Cyber Express)

Imperva Detects Undocumented 8220 Gang Activities (Imperva)

BattleRoyal, DarkGate Cluster Spreads via Email and Fake Browser Updates (Proofpoint)

Bandook - A Persistent Threat That Keeps Evolving (Fortinet)

First American takes IT systems offline after cyberattack (Bleeping Computer)

BidenCash darkweb market gives 1.9 million credit cards for free (Bleeping Computer)

BidenCash (Searchlight Cyber)

Russia Seizes Ferum, Sky-Fraud, UAS, and Trump’s Dumps—and Signals More Takedowns to Come [Updated] (Flashpoint)

Share your feedback.Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Kingdom come, kingdom fall. Dec 21, 2023

Show notes

German officials take down a dark web market. Google patched zero-day. Terrapin attack targets SSL. A look at payment fraud. Agent Tesla is spreading through an old vulnerability. An iPhone thief explains his techniques. Ukrainian reprisals for Russia's Kyivstar attack. Israeli officials warn of data wipers. Rick Howard speaks with Scott Roberts of Interpress about Driving Intelligence with MITRE ATT&CK, and leveraging limited resources to build an evolving threat repository. And go ahead and click that like button - just don’t expect to get paid.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today’s guest Scott Roberts of Interpres joins N2K’s Rick Howard from the recent MITRE ATT&CKcon event. They discuss driving intelligence with MITRE ATT&CK: Leveraging limited resources to build evolving threat repository.

Selected Reading

German police takes down Kingdom Market cybercrime marketplace (BleepingComputer)

GOOGLE ADDRESSED A NEW ACTIVELY EXPLOITED CHROME ZERO-DAY (Securityaffairs)

SSH protects the world’s most sensitive networks. It just got a lot weaker (Ars Technica)

Annual Payment Fraud Intelligence Report: 2023 (Recorded Future)

Threat Actors Exploit CVE-2017-11882 To Deliver Agent Tesla (Zscaler)

iPhone Thief Explains How He Breaks Into Your Phone (Wall Street Journal)

Ukrainian hackers breach Rosvodokanal, seize data of Russia's largest private water utility (RBC Ukraine)

Fake F5 BIG-IP zero-day warning emails push data wipers (BleepingComputer)

“Get Paid to Like Videos”? This YouTube Scam Leads to Empty Wallets (Hack Read)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Leading the charge in cybercrime take downs. Dec 20, 2023

Show notes

Interpol leads cybercrime take downs. ALPHV/Blackcat is in a “tug of Tor” with the FBI. The Senate confirms a new leader for Cyber Command and NSA. Rite Aid is banned from using facial recognition. CISA prepares a new approach to information sharing. Remote encryption of ransomware. CitrixBleed is exploited to access customer data. An update on the Kyivstar cyberattack. The Tallinn Mechanism solidifies Western support for Ukraine's cybersecurity. In today’s Learning Layer segment, host Sam Meisenberg talks with Shelby Ludtke about passing the new ISC2 Certified in Cybersecurity (CC) exam. And GCHQ introduces youngsters to code breaking.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

In our Learning Layer segment today, host Sam Meisenberg talks with Shelby Ludtke about passing the new ISC2 Certified in Cybersecurity (CC) exam. For more information on practice tests, please visit N2K’s certification page.

Learning Layer links

Practice tests

Selected Reading

Interpol operation arrests 3,500 cybercriminals, seizes $300 million (Bleeping Computer)

AlphV claims to have ‘unseized’ its darkweb domain from the FBI. What’s happening? (The Record)

Senate confirms Biden’s pick for Cyber Command, NSA (The Record)

Rite Aid Banned from Using AI Facial Recognition After FTC Says Retailer Deployed Technology without Reasonable Safeguards (Federal Trade Commission)

Enabling Threat-Informed Cybersecurity: Evolving CISA’s Approach to Cyber Threat Information Sharing (CISA)

CryptoGuard: An asymmetric approach to the ransomware battle (Sophos)

Notice To Customers of Data Security Incident (Businesswire)

Ukraine's Kyivstar says it is fully operational after cyber attack (Reuters)

UK and partners form The Tallinn Mechanism for cyber security (Gov.UK)

GCHQ Christmas challenge: Agency reveals 2023 codebreaker (BBC)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

A dark web take down. Dec 19, 2023

Show notes

The FBI takes down ALPHV/BlackCat. Comcast reveals breach of nearly 36 million Xfinity customers. Microsoft and Cyberspace Solarium Commission release water sector security report. Malware increasingly uses public infrastructure. Iran's Seedworm and its telco targets. QR code scams. Feds release joint analysis of 2022 election integrity. Joint advisory on Play ransomware group. In today’s Mr Security Answer Person, John Pescatore considers the risks of AI. Rick Howard talks with Lauren Brennan of GuidePoint Security about evaluating and maturing your SOC. Iranian gas stations running on empty.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guests

John Pescastore joins us for Mr. Security Answer Person to address the question, “Things seem to be moving quickly with AI, what is your feeling about that positioning for early 2024?”

Today’s guest is Lauren Brennan of GuidePoint Security. N2K’s Rick Howard caught up with Lauren recently at the MITRE ATT&CKcon 4.0. They discussed evaluating and maturing your SOC.

Selected Reading

Authorities claim seizure of notorious ALPHV ransomware gang’s dark web leak site (TechCrunch+)

Comcast says hackers stole data of close to 36 million Xfinity customers (TechCrunch+)

Microsoft, Cyberspace Solarium Commission propose measures to strengthen water sector cybersecurity (Industrial Cyber)

Malware leveraging public infrastructure like GitHub on the rise (Reversing Labs)

Seedworm: Iranian Hackers Target Telecoms Orgs in North and East Africa (Symantec)

“Quishing” you a Happy Holiday Season (netcraft)

2022 Election Not Impacted by Chinese, Russian Cyber Activity: DOJ, DHS (Securityweek)

US and Australia Warn of Play Ransomware Threat (Infosecurity Magazine)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

14 million customers and stolen data. Dec 18, 2023

Show notes

A US mortgage company reveals major data breach. Updates from CISA. NSA provides guidance on SBOMs. MongoDB warns customers of a breach. BlackCat/ALPHV is still a market leader, but feeling competitive pressure. Reassessing the effects of Log4shell. The International Committee of the Red Cross calls for restraint in cyber warfare. Ransomware hits a cancer center. Ann Johnson, host of Microsoft Security’s Afternoon Cyber Tea podcast goes beyond basics with her guest Tanya Janca, founder of WeHackPurple. And what can I do to make you take home this chatbot today?

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Host of Microsoft Security’s Afternoon Cyber Tea podcast, Ann Johnson, goes beyond basics with her guest Tanya Janca, founder of WeHackPurple. Ann’s full discussion with Tanya can be heard here. You can catch Afternoon Cyber Tea every other Tuesday on your favorite podcast apps and the N2K Network.

Selected Reading

Mr. Cooper reveals breach exposed 14.6 million clients (Cybernews)

Enhancing Cyber Resilience: Insights from the CISA Healthcare and Public Health Sector Risk and Vulnerability Assessment (CISA)

NSA Issues Guidance on Incorporating SBOMs to Improve Cybersecurity (Security Week)

MongoDB says customer data was exposed in a cyberattack (Bleeping Computer)

ALPHV Targeting: Ransomware & Digital Extortion (ZeroFox)

A Log4Shell Retrospective - Overblown and Exaggerated (VulnCheck)

We call on States to stop turning a blind eye to the participation of civilian hackers in armed conflict (ICRC)

Seattle cancer center confirms cyberattack after ransomware gang threats (The Record)

What can I do to make you take home this chatbot today? (Mastodon)

Share your feedback.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Oren Koren: Crossing music and cybersecurity. [Career Notes] Dec 17, 2023

Show notes

Oren Koren, Co-Founder and Chief Product Officer from Veriti sits down to share his amazing story. Before entering the vendor side of the cyber world, Oren served for 14 years in the Israeli 8200 unit where he led a variety of cybersecurity activities and researches that eventually earned him four 8200-unit cyber innovation awards. When he left the Israel Defense Forces, he joined Check Point Software to lead their AI-based innovations and advanced data analytics projects that redefined threat hunting and SIEM applications. This eventually inspired him to start his own company, with fellow co-founder Adi Ikan. Oren shares that he had a love for music growing up, and wanted to be a musician, saying music was the catalyst to him becoming interested in the cyber field, saying "I believe the music helped me a bit with my career in cybersecurity." We thank Oren for sharing his story with us.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Shedding light on fighting Ursa. [Research Saturday] Dec 16, 2023

Show notes

Host of the CyberWire Daily podcast segment Threat Vector, David Moulton sits down with Mike "Siko" Sikorski from Palo Alto Networks Unit 42 to discuss their research on "Fighting Ursa Aka APT28: Illuminating a Covert Campaign."

Unit 42 just published new threat intelligence on Fighting Ursa (aka APT28), a group associated with Russia's military intelligence, on how they are exploiting a Microsoft Outlook vulnerability (CVE-2023-23397) to target organizations in NATO member countries, Ukraine, Jordan, and the UAE. These organizations are of strategic importance in defense, foreign affairs, economy, energy, transportation, and telecommunications.

The research can be found here:

Fighting Ursa Aka APT28: Illuminating a Covert Campaign

Learn more about your ad choices. Visit megaphone.fm/adchoices

Our TOPPODCAST Picks

Follow Us

Stay Connected

Summary

What You’ll Learn

Intelligence

Reflections

And much, much more …

Episode Notes

Resources

Featured Resource

Beginner Resources

SpyCasts

Wildcard Resource

CyberWire Guest

Selected Reading

Share your feedback.Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Learning Layer links

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guests

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Related Podcasts

Links

Stay Connected

Our TOPPODCAST Picks

Follow Us

Stay Connected

CyberWire Daily

Summary

What You’ll Learn

Intelligence

Reflections

And much, much more …

Episode Notes

Resources

Featured Resource

*Beginner Resources*

*SpyCasts*

*Wildcard Resource*

CyberWire Guest

Selected Reading

Share your feedback.Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Learning Layer links

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guests

Selected Reading

Share your feedback.

Want to hear your company in the show?

CyberWire Guest

Selected Reading

Share your feedback.

Related Podcasts

1

2

3

4

5

6

Beginner Resources

SpyCasts

Wildcard Resource