CyberWire Daily

Episodes

• Hoping for SOHO security. [Research Saturday]

  Oct 19, 2019

  Not summarized yet

• Clickfraud and third-parties (both SDKs and stores). Trojanized TOR browser steals from Russian users. WiFi bugs. Sketchy jailbreak. Big Tech on free speech. Cooperation against terrorism.

  Oct 18, 2019

  Not summarized yet

• Cozy Bear never really left. Iran denies it suffered a US cyberattack. Malicious WAV files. Darknet dragnet hauls in child exploitation ring. Graboid infests Docker hosts.

  Oct 17, 2019

  Not summarized yet

• Cyber retaliation for a kinetic attack, again. Industrial espionage from China. Botnet does sextortion. Typosquatting the other candidate. A poor approach to reputation management.

  Oct 16, 2019

  Not summarized yet

• Ransomware hits US, French companies. ISPs as combat support arms. Lawful intercept gone rogue? Lazarus Group is back and in GitHub. China’s security laws and security risks.

  Oct 15, 2019

  Not summarized yet

• Decrypting ransomware for good. [Research Saturday]

  Oct 12, 2019

  Not summarized yet

• Ransomware and a zero-day. A newly discovered espionage platform. FIN7’s new tricks. Beijing speaks and Apple listens. A visit to NSA’s Cybersecurity Directorate.

  Oct 11, 2019

  Not summarized yet

• Alleged DIA leaker. Europol cybergang study. Protecting the DIB. Chinese information operations.

  Oct 10, 2019

  Not summarized yet

• Twitter and two-factor authentication. Privacy concerns. The US Senate Intelligence Committee reports on Russian troll farms. Turla is back with some new tricks.

  Oct 9, 2019

  Not summarized yet

• Riding herd on Mustang Panda. Drupalgeddon2 is out in the wild. VPN warnings and mitigations. Patch notes. An offer to share intelligence about Huawei. Presidential sites get low privacy grades.

  Oct 8, 2019

  Not summarized yet

• Iran hacks for influence. Brazilian PII up for auction. Prince Harry vs. Fleet Street. Electrical infrastructure cyber risk. Paying ransom. HildaCrypt developers say they’re going straight.

  Oct 7, 2019

  Not summarized yet

• The fuzzy boundaries of APT41. [Research Saturday]

  Oct 5, 2019

  Not summarized yet

• Android vulnerability exploited in the wild. Careless spycraft. The Eye on the Nile. A new Chinese threat actor. A spoiling attack in the CryptoWars. Take election interference, please.

  Oct 4, 2019

  Not summarized yet

• A new threat group, Avivore, is called out in the Airbus hack. Ransomware and VPN exploit warnings. EU tells Facebook to take down some content, everywhere. Spearphishing ANU. SandCat’s bad opsec.

  Oct 3, 2019

  Not summarized yet

• RATs, ransomware, payloads, and unsecured data: a look at the cybercriminal underground.

  Oct 2, 2019

  Not summarized yet

• Piling on sanctions. The disinformation-as-a-service black market. Technological sovereignty through R&D investment? Ransomware continues to rise. NSA’s new Cybersecurity Directorate.

  Oct 1, 2019

  Not summarized yet

• Industrial firms disclose cyber incidents. US DHS to check airliner cybersecurity. RCMP security case update. Bulletproof host taken down. Gnosticplayers. Royal phish.

  Sep 30, 2019

  Not summarized yet

• Focusing on Autumn Aperture. [Research Saturday]

  Sep 28, 2019

  Not summarized yet

• Supply chain hacks versus Airbus. Phishing around Google Cloud. Masad Clipper and Stealer on the criminal-to-criminal market. Quick zero-day exploitation. DoorDash hack. Inside JTF Ares.

  Sep 27, 2019

  Not summarized yet

• Lazarus Group in India. Suspected Chinese APT uses fake Narrator. Fleeceware. DNI testimony. TalkTalk hacker charged in US. Yahoo breach compensation. Chameleon spam campaign.

  Sep 26, 2019

  Not summarized yet