CyberWire Daily - TopPodcast.com

View Top 200 Chart

Back to Rankings Page

CyberWire Daily — News
CyberWire Daily

The daily cybersecurity news and analysis industry leaders depend on. Published each weekday, the program also includes interviews with a wide spectrum of experts from industry, academia, and research organizations all over the world.

Copyright: © 2024 N2K Networks, Inc. 706761

Latest Episodes:

Disinformation and its often overlooked potential for denial-of-services. Oct 20, 2023

Show notes

Hacktivism and influence operations in the Hamas-Israel war. An OilRig cyberespionage campaign prospects a Middle Eastern government. Emailed bomb threats in the Baltic. Darkweb advertising yields insight into ExelaStealer malware. Casio discloses breach of customer data. The FCC proposes a return to net neutrality, while Consumer Financial Protection Bureau proposes data-handling rules under Dodd-Frank. Deepen Desai from ZScaler shares insights on MOVEit transfer vulnerabilities. Our own Simone Petrella speaks with Google’s Tatyana Bolton about the challenges of bridging the cyber talent gap. And RagnarLocker has been taken down by international law enforcement.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/201

Selected reading.

Intel, defense officials tell senators that Israel did not strike hospital (The Hill)

Early U.S. and Israeli Intelligence Says Palestinian Group Caused Hospital Blast.

Cyberattacks linked to Israel-Hamas war are soaring (Fast Company)

NSO, Israeli cyber firms help track missing Israelis and hostages (Haaretz)

Lithuanian interior minister says emailed bomb threats are coordinated regional cyber-attack (Baltic Times)

Another InfoStealer Enters the Field, ExelaStealer (Fortinet Blog)

Q3 Report: Email Threat Trends Latest edition: PDF Popularity, Callback Phishing and Redline Malware (VIPRE)

Casio Issues Apology and Notice Concerning Personal Information Leak Due to Unauthorized Access to Server | CASIO (CASIO Official Website)

Human Error: Casio ClassPad Data Breach Impacting 148 Countries (Hackread)

Casio data breach 2023 caused worldwide panic (Dataconomy)

Casio discloses data breach impacting customers in 149 countries (BleepingComputer)

FCC Revives ‘Net Neutrality,’ Proposes New Regulations for Internet Service (Wall Street Journal)

FCC begins second quest for net neutrality (TechCrunch)

CFPB Proposes Rule to Jumpstart Competition and Accelerate Shift to Open Banking (Consumer Financial Protection Bureau)

RagnarLocker ransomware dark web site seized in international sting (TechCrunch)

Ragnar Locker ransomware site taken down by FBI, Europol (Record)

One of the most destructive ransomware gangs is being taken down by law enforcement (Axios)

Learn more about your ad choices. Visit megaphone.fm/adchoices

Vigilance isn’t purely receptive. Without criticism, it will become blind with detail. Oct 19, 2023

Show notes

Nation-states exploit the WinRAR vulnerability. Criminals leak more stolen 23andMe data. QR codes as a risk. NSA and partners offer anti-phishing guidance. A Ukrainian hacktivist auxiliary takes down Trigona privateers. Hacktivism and influence operations remain the major cyber features of the Hamas-Israeli war. On today’s Threat Vector, David Moulton speaks with Kate Naunheim, Cyber Risk Management Director at Unit 42, about the new cybersecurity regulations introduced by the SEC. Our own Rick Howard talks with Jen Miller Osborn about the 10th anniversary of ATT&CKcon. And the epistemology of open source intelligence: tweets, TikToks, Instagrams–they’re not necessarily ground truth.

Threat Vector

To delve further into this topic, check out this upcoming webinar by Palo Alto's Unit 42 team on November 9, 2023, "The Ransomware Landscape: Threats Driving the SEC Rule and Other Regulations."

Please share your thoughts with us for future Threat Vector segments by taking our brief survey.

To learn what is top of mind each month from the experts at Unit 42 sign up for their Threat Intel Bulletin.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/200

Selected reading.

Government-backed actors exploiting WinRAR vulnerability (Google)

The forgotten malvertising campaign (Malwarebytes)

Hacker leaks millions of new 23andMe genetic data profiles (BleepingComputer)

Exploring The Malicious Usage of QR Codes (SlashNext |)

How to Protect Against Evolving Phishing Attacks (National Security Agency/Central Security Service)

GuidePoint Research and Intelligence Team’s (GRIT) 2023 Q3 Ransomware Report Examines the Continued Surge of Ransomware Activity (GuidePoint)

Ukrainian activists hack Trigona ransomware gang, wipe servers (BleepingComputer)

Navigating the Mis- and Disinformation Minefield in the Current Israel-Hamas War (ZeroFox)

War Tests Israeli Cyber Defenses as Hack Attempts Soar (Bloomberg)

U.S. says Israel ‘not responsible’ for Gaza hospital blast; Biden announces ‘unprecedented’ aid package in speech (Washington Post)

Three clues the Ahli Arab Hospital strike came from Gaza (The Telegraph)

Who’s Responsible for the Gaza Hospital Explosion? Here’s Why It’s Hard to Know What’s Real (WIRED)

‘Verified’ OSINT Accounts Are Destroying the Israel-Palestine Information Ecosystem (404 Media)

Learn more about your ad choices. Visit megaphone.fm/adchoices

Hacktivist discipline is inversely correlated with sincerity of commitment. Oct 18, 2023

Show notes

Hamas and Israel exchange accusations in a hospital strike. Using Gazan cell data to develop intelligence, and using hostages' devices to spread fear. Black Basta ransomware is out and about, again. Qubitstrike is a newly discovered cryptojacking campaign. Preparing for post-quantum security. Tim Starks from the Washington Post looks at one US Senator’s ability to gum up cyber legislation. In the Learning Layer, N2K's Sam Meisenberg explores the challenges and best practices of rolling out a large-scale corporate re-skilling program. And attention people of Pompei: that volcano alert is bogus. Probably.

Learning Layer.

On this segment of Learning Layer, N2K's Sam Meisenberg is joined by Phil, an N2K client who leads Talent Development at a large telecommunication company. They discuss the challenges and best practices of rolling out a large-scale corporate re-skilling program, including increasing learner engagement, accountability, and the importance of internal talent development and recognition.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/199

Selected reading.

Blast kills hundreds at Gaza hospital; Hamas and Israel trade blame, as Biden heads to Mideast (AP News)

In deadly day for Gaza, hospital strike kills hundreds (Reuters)

Hacktivist attacks against Israeli websites mirror attacks following Russian invasion of Ukraine (ComputerWeekly.com)

Growing Concern Over Role of Hacktivism in Israel-Hamas Conflict (Infosecurity Magazine)

Israel-Hamas war illuminates trouble with political hacking groups (Axios)

ISRAEL GAZA CONFLICT : THE CYBER PERSPECTIVE (CYFIRMA)

Tracking Cellphone Data by Neighborhood, Israel Gauges Gaza Evacuation (New York Times)

Hamas Hijacked Victims’ Social Media Accounts to Spread Terror (New York Times)

TV advertising sales giant affected by ransomware attack (Record)

Chilean government warns of Black Basta ransomware attacks after customs incident (Record)

Qubitstrike - An Emerging Malware Campaign Targeting Jupyter Notebooks (Cado Security)

DigiCert Global Study: Preparing for a Safe Post-Quantum Computing Future (DigiCert)

SpyNote Android malware spreads via fake volcano eruption alerts (BleepingComputer)

Learn more about your ad choices. Visit megaphone.fm/adchoices

Notes from the cyber phases of two hybrid wars. Alerts on Cisco, Atlassian vulnerability exploitation. Updated guidance on security by design. Oct 17, 2023

Show notes

A bogus RedAlert app delivered spyware as well as panic. BloodAlchemy backdoors ASEAN southeast asian targets. A serious Cisco zero-day is being exploited. Valve implements additional security measures for Steam. A warning on Atlassian vulnerability exploitation. Allies update their security-by-design guide. Ukrainian telecommunications providers hit by cyberattack. Ben Yelin explains attempts to tamp down pornographic deepfakes. Our guest is Ashley Rose from Living Security with a look at measuring human risk. And, as always, criminals see misery as opportunity.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/198

Selected reading.

Malicious “RedAlert - Rocket Alerts” Application Targets Israeli Phone Calls, SMS, and User Information (The Cloudflare Blog)

Disclosing the BLOODALCHEMY backdoor (Elastic Security Labs)

BLOODALCHEMY provides backdoor to ASEAN secrets (Register)

Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerability (Cisco Talos Blog)

Actively exploited Cisco 0-day with maximum 10 severity gives full network control (Ars Technica)

Cisco warns of actively exploited zero-day in IOS XE software (Computing)

Widespread Cisco IOS XE Implants in the Wild (VulnCheck)

Steam enforces SMS verification to curb malware-ridden updates (BleepingComputer)

Threat Actors Exploit Atlassian Confluence CVE-2023-22515 for Initial Access to Networks | CISA (Cybersecurity and Infrastructure Security Agency CISA)

CISA, U.S. and International Partners Announce Updated Secure by Design Principles Joint Guide (Cybersecurity and Infrastructure Security Agency)

CERT-UA Reports: 11 Ukrainian Telecom Providers Hit by Cyberattacks (The Hacker News)

CVE-2023-38831 Exploited by Pro-Russia Hacking Groups in RU-UA Conflict Zone for Credential Harvesting Operations (Cluster25)

Pro-Russian Hackers Exploiting Recent WinRAR Vulnerability in New Campaign (The Hacker News)

Cyberattack targets Belgian public service websites for second time in a week (Brussels Times)

Spam trends of the week: Spammers piggyback on the Israel-Gaza war to plunder donations (Hot for Security)

Learn more about your ad choices. Visit megaphone.fm/adchoices

Cyber phases in two hybrid wars. A ransomware gang claims an attack against a major firm. Social engineering implicated in Shadow PC breach. Privateering, coin mining, and other worries. Oct 16, 2023

Show notes

Hacktivism and disinformation in the war between Hamas and Israel. LockBit claims an attack on CDW. Shadow PC's breach. Void Rabisu deploys a lightweight RomCom backdoor against the Brussels conference. Rick Howard describes Radical Asymmetric Distribution. Our guest is Jason Birmingham from Broadridge Financial Solutions with a look at asset management. And coin mining as a potential front for espionage or a staging area for sabotage.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/197

Selected reading.

How hackers piled onto the Israeli-Hamas conflict (POLITICO)

Israel-Gaza War Now Includes Accompanying Cyber Warfare (Channel Futures)

How Cyberattacks Could Affect the Israel-Hamas War (Bank Info Security)

Medical aid for Palestinians website under cyber attack affecting relief efforts (mint)

Rumors of a ‘Global Day of Jihad’ Have Unleashed a Dangerous Wave of Disinformation (WIRED)

Hamas in rare English ‘press conference’ as it tries to counter global condemnation (The Telegraph)

In Israel-Hamas conflict, social media become tools of propaganda and disinformation (DFRLab)

A flood of misinformation is shaping how panicked citizens, global public view the war (Washington Post)

How Israel-Hamas War Misinformation Is Spreading Online (TIME)

Misinformation Is Warfare (TIME)

Meta responds to EU misinformation concerns regarding Israel-Hamas conflict (Engadget)

Briefing: Meta Details Efforts to Remove War-Related Disinformation (The Information)

Cloud gaming firm Shadow says hackers stole customers' personal data (TechCrunch)

PC streaming service Shadow discloses security breach (The Verge)

Shadow silent on data breach as hacked data appears genuine (TechCrunch)

530K people's info stolen from cloud PC gaming's Shadow (Register)

CDW investigating ransomware gang claims of data theft (Record)

Lockbit ransomware gang demanded an 80 million ransom to CDW (Security Affairs)

Void Rabisu Targets Female Political Leaders with New Slimmed-Down ROMCOM Variant (Trend Micro)

Women Political Leaders Summit targeted in RomCom malware phishing (BleepingComputer)

Across U.S., Chinese Bitcoin Mines Draw National Security Scrutiny (New York Times)

Learn more about your ad choices. Visit megaphone.fm/adchoices

Susan Hinrichs: The cross between computer science and security. [chief scientist] [Career Notes] Oct 15, 2023

Show notes

Susan Hinrichs, Chief Scientist at Aviatrix sits down to share her story, with over 30 years in experience spanning a variety of networking and security disciplines and has held leadership and academic roles, she sits down to discuss her amazing career. Earlier in her career, Susan served as System Architect at Cisco where she spent nine years designing and developing Centri Firewall and a variety of network security management tools. She worked as a Lecturer, Computer and Network Security for eight years at the University of Illinois at Urbana-Champaign (UIUC) where she developed a hands-on Security Lab introduction course for students in her first year, and later in her tenure, along with two colleagues, created a malware analysis course designed for senior students. With all of the amazing things she's done in her career, she shares the advice to new comers into the field, saying "I think also as you're trying to get that next job either as a student or as a professional trying to change direction a little bit, if you're coming into interviews being able to talk about a project that you worked on, even if it's not a project that really anyone uses, but if it's something that's interesting that you have in depth understanding of, uh, I think is super valuable to get you noticed." We thank Susan for sharing her story with us.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Unwanted guests harvest your information. [Research Saturday] Oct 14, 2023

Show notes

Amit Malik from Uptycs joins us to discuss their research titled "Unwanted Guests: Mitigating Remote Access Trojan Infection Risk." Uptycs threat research team identified a new threat referred to as QwixxRAT. The Uptycs team discovered this tool being widely distributed by the threat actor through Telegram and Discord platforms.

The research states "QwixxRAT is meticulously designed to harvest an expansive range of information from browser histories and credit card details, to keylogging insights." This newly found tool poses a risk to both businesses and individual users

Unwanted Guests: Mitigating Remote Access Trojan Infection Risk

Learn more about your ad choices. Visit megaphone.fm/adchoices

Hacktivism in the war between Hamas and Israel, with a possibility of escalation. Healthcare cybersecurity. Looting FTX. CISA releases resources to counter ransomware. Oct 13, 2023

Show notes

Hacktivism and nation-state involvement in the cyber phases of war in the Middle East, and the use of Telegram. Russian groups squabble online. Healthcare cybersecurity and its implications for patient care. The Looting of FTX on the day of its bankruptcy. Joe Carrigan shares research from the Johns Hopkins University Information Security Institute. Our guest is Mike Walters from Action1, marking the 20th anniversary of Patch Tuesday. And CISA releases two new resources against ransomware.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/196

Selected reading.

Israeli Cyber Companies Rally as Digital, Physical Assaults Continue (Wall Street Journal)

Israel Sees Cyber Incursions Across Digital Systems (Wall Street Journal)

Hackers infiltrated Israeli smart billboards to post pro-Hamas messages, reports say (Business Insider)

THE HAMAS ISRAEL : CONFLICT EXPLAINER - CYFIRMA (CYFIRMA)

The First 72 Hours of the Israel-Hamas War: Hamas and PIJ Activity on Telegram (Flashpoint)

Cyber Aggression Rises Following the October 2023 Israel-Hamas Conflict (Radware)

EU opens probe into X over Israel-Hamas war misinformation (Financial Times)

EU opens formal investigation into illegal content on X (Computing)

X removes hundreds of Hamas-affiliated accounts since attack, CEO says (Reuters)

US cyber agencies in 'very close contact' with Israel after unprecedented Hamas attacks (Nextgov.com)

Five threats security pros everywhere need to focus on as the Middle East war escalates (SC Media)

Cyber Insecurity in Healthcare: The Cost and Impact on Patient Safety and Care 2023 (Proofpoint)

New Clues Suggest Stolen FTX Funds Went to Russia-Linked Money Launderers (WIRED)

CISA Releases New Resources Identifying Known Exploited Vulnerabilities and Misconfigurations Linked to Ransomware | CISA (Cybersecurity and Infrastructure Security Agency CISA)

Learn more about your ad choices. Visit megaphone.fm/adchoices

Hacktivism, auxiliaries, and the cyber phases of two hybrid wars. Challenges of content moderation. Cyberespionage in the supply chain. Don’t buy all the hype, but do fix your Linux libraries. Oct 12, 2023

Show notes

Hacktivists join both sides of Hamas's renewed war. Disinformation and content control in social media. Storm-0062 exploits an Atlassian 0-day. Curl and Libcurl vulnerabilities. Betsy Carmelite from Booz Allen on how to expand and diversify the Cyber Talent Pool. Our guest is Kuldip Mohanty, CIO of North Dakota. And some further reflections on hacktivism and the laws of war.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/195

Selected reading.

False Alarm of Hezbollah Aircraft Infiltration Underlines Israeli Concern of Multi-Front War (FDD)

Israel-Hamas conflict extends to cyberspace (CSO Online)

Hamas-Israel Cyber War Escalates: What We Know So Far (Technopedia)

Israeli Cyber Companies Rally as Digital, Physical Assaults Continue (Wall Street Journal)

X promises 'highest level' response on posts about Israel-Hamas war. Misinformation still flourishes (AP News)

Europe gives Mark Zuckerberg 24 hours to respond about Israel-Hamas conflict and election misinformation (CNBC)

Elon Musk Is Shitposting His Way Through the Israel-Hamas War (WIRED)

Facebook video of Biden prompts probe into Meta content policy (Financial Times)

MIDDLE EAST : A CYBER ARMS RACE (CYFIRMA)

Storm0062 exploits Atlassian 0-day. (CyberWire)

Curl and Libcurl vulnerabilities. (CyberWire)

Ukraine at D+595: Sabotage in the Baltic Sea. (CyberWire)

A Hacktivist Code of Conduct May Be Too Little Too Late (OODA Loop)

Learn more about your ad choices. Visit megaphone.fm/adchoices

Cyber phases of two hybrid wars prominently feature influence operations. Rapid Reset is a novel and powerful DDoS vulnerability. Credential phishing resurgent. And a look back at Patch Tuesday. Oct 11, 2023

Show notes

Cyber operations in Hamas's war, Cryptocurrency as a source of funding, and Russian hacktivist auxiliaries shifting their focus. Not all influence operations involve disinformation. Rapid Reset is a Novel DDoS attack. A resurgent credential phishing campaign. Ann Johnson from Afternoon Cyber Tea speaks with Ram Shankar Siva Kumar and Dr. Hyrum Anderson about the promise, peril, and impact of AI. Our own Rick Howard talks cyber intelligence in the medical vertical with Taylor Lehmann of Google. And a quick look back at Patch Tuesday.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/194

Selected reading.

Hackers make their mark in Israel-Hamas conflict (Axios)

Hacktivists take sides in Israel-Palestinian war (Record)

Cyberattacks Targeting Israel Are Rising After Hamas Assault (Time)

Hacktivists stoke Israel-Gaza conflict online (Reuters)

Hackers, some tied to Russia, target Israeli media and government websites (MSN)

Hamas Militants Behind Israel Attack Raised Millions in Crypto (Wall Street Journal)

Cryptocurrency fueled Hamas' war machine (Quartz)

The Israeli police cyber unit, Lahav 433, has frozen the cryptocurrency accounts of Hamas (Odessa Journal)

U.S. surging cyber support to Israel (POLITICO Pro)

Savvy Israel-linked hacking group reemerges amid Gaza fighting (CyberScoop)

Israeli Cyber Companies Rally as Digital, Physical Assaults Continue (Wall Street Journal)

Hamas Seeds Violent Videos on Sites With Little Moderation (New York Times)

Social media platforms foment disinformation about war in Israel (Record)

Hamas terrorists post murder of Israeli grandmother on her Facebook page (The Telegraph)

How to limit graphic social media images from the Israel-Hamas war (Washington Post)

Briefing: EU Commissioner Asks Musk for Information on “Illegal Content and Disinformation” Spreading on X (The Information)

EU warns Elon Musk of 'penalties' for disinformation circulating on X amid Israel-Hamas war (CNN)

Hamas Got Around Israel’s Surveillance Prowess by Going Dark (Bloomberg)

‘HTTP/2 Rapid Reset’ Zero-Day Exploited to Launch Largest DDoS Attacks in History (SecurityWeek)

New 'HTTP/2 Rapid Reset' zero-day attack breaks DDoS records (BleepingComputer)

The largest cyberattack of its kind recently happened. Here’s how. (Washington Post)

New technique leads to largest DDoS attacks ever, Google and Amazon say (Record)

HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 (Cybersecurity and Infrastructure Security Agency CISA)

LinkedIn Smart Links Fuel Credential Phishing Campaign (Cofense)

Microsoft Fixes Exploited Zero-Days in WordPad, Skype for Business (SecurityWeek)

Microsoft's October Patch Tuesday update resolves three zero-days (Computing)

Microsoft Releases October 2023 Security Updates (Cybersecurity and Infrastructure Security Agency CISA)

Patch Tuesday: Code Execution Flaws in Adobe Commerce, Photoshop (SecurityWeek)

Citrix Releases Security Updates for Multiple Products (Cybersecurity and Infrastructure Security Agency CISA)

Learn more about your ad choices. Visit megaphone.fm/adchoices

Related Podcasts