CyberWire Daily

3271 Episodes

1. Manuel Hepfer: Discipline, self motivation, and steam. [Research] [Career Notes]

   Published: 8/6/2023
2. Who is that stealing my credentials? [Research Saturday]

   Published: 8/5/2023
3. 2022’s top exploited vulnerabilities are still a risk. Rilide in the wild. Abusing a legitimate tool. Malicious PyPi packages. A brief update on the cyber aspects of Russia’s hybrid war.

   Published: 8/4/2023
4. Action in the cybercriminal underworld. Russia’s FSB and SVR are both active, and so are their hacktivist auxiliaries. NSA offers advice on configuring next-generation firewalls.

   Published: 8/3/2023
5. An illicit market in account restoration. Resilience and the cyber workforce: a snapshot. New post-exploitation technique in Amazon Web Services.

   Published: 8/2/2023
6. Cyberespionage tradecraft, including shopping in the C2C market. Seeking satcom resilience. Sanctions against disinformation. A quick look at current OT threats.

   Published: 8/1/2023
7. The US has a new cyber workforce and education strategy. US hunts disruptive Chinese malware staged in US networks. Malware warnings, and an update on Russia’s hybrid war.

   Published: 7/31/2023
8. Morgan Adamski: Seeing around corners. [Collaboration] [Career Notes]

   Published: 7/30/2023
9. Phishing for leeches. [Research Saturday]

   Published: 7/29/2023
10. A new joint advisory from the US and Australia. BackConnect evolution. Cl0p counts coup. Ransomware trends. DDoS for influence. It’s “dot-mil,” Nigel.

    Published: 7/28/2023
11. Mirai hits the honeypots. Medical device telemetry attacked. More on infostealers in the C2C market. Third-party risk management practices. Cyber skills gaps in the UK. SiegedSec hits NATO sites

    Published: 7/27/2023
12. A malign AI tool: FraudGPT. Stealer logs in the C2C market. Signs in the blockchain that some Conti alumni are working with the Akira gang. And a kinetic strike against a cyber target.

    Published: 7/26/2023
13. Norway continues to investigate a cyberattack. The view from Russia. Trends in data breaches, ransom payments, and security self-perception. Apple patches iOS.

    Published: 7/25/2023
14. DPRK’s RGB shows improved targeting and tool-sharing. Cl0p updates. Two new RATs. Weak radio encryption standard. Razzlekhan will cop a plea.

    Published: 7/24/2023
15. Don Welch: Being a good leader. [CIO] [Career Notes]

    Published: 7/23/2023
16. Infostealer Malware 101: mitigating risks and strengthening defenses against this insidious threat. [CyberWire-X]

    Published: 7/23/2023
17. Welcome to New York, it's been waitin' for you. [Research Saturday]

    Published: 7/22/2023
18. Cyberespionage and developments in the cyber underworld, including an offering in the C2C market. Russian hacktivist auxiliaries stay busy (and so do their masters in the organs).

    Published: 7/21/2023
19. Malvertising meets SEO poisoning. Fast moving on MOVEit exploit remediation. Ransomware trends. Cyberespionage, sanctions, and influence ops. Ave atque vale Kevin Mitnick.

    Published: 7/20/2023
20. Patches and exploits. Watching threats develop in the dark web. Spyware vendors added to the US Entity List. WhatsApp risk. And notes from the hybrid war.

    Published: 7/19/2023