CyberWire Daily

Episodes

• 2018 RSAC Outlook. [Special Editions]

  May 8, 2018

  Not summarized yet

• Winnti Umbrella covers multiple threat actors. DPRK off-shores cyber ops. ZooPark is in its fourth generation. GPON router bugs exploited in the wild. Russian Twitterbots. Block the EU?

  May 7, 2018

  Not summarized yet

• BlackTDS and ThreadKit offered in criminal markets. [Research Saturday]

  May 5, 2018

  Not summarized yet

• In the shredder or off the truck? Battlespace prep for a supply chain campaign? NG-Spectre found in Intel chips. No domain fronting for you. Kitty mines monero. NSA, US Cyber Command under new management.

  May 4, 2018

  Not summarized yet

• Lojack for Laptops backdoor? World Cup cybersecurity. Schneider Electric patch. Reward points for sale. Medical device vulnerabilities. PPD-20 revision?

  May 3, 2018

  Not summarized yet

• New nation-state actors in cyberspace. SiliVaccine AV said to incorporate pirated code. Credential stuffing and password reuse. GravityRAT evades sandboxes. GDPR approaches.

  May 2, 2018

  Not summarized yet

• Payment system hack investigated. Patch weaponization. Medical zero-days for sale. Responsible disclosure. Bad bots attack. Car hacking. Trends in phishbait.

  May 1, 2018

  Not summarized yet

• Bank hack in Mexico. FacexWorm goes cryptomining. SamSam's volume discount. Influence ops. Researchers confirm that teams use teamwork.

  Apr 30, 2018

  Not summarized yet

• New MacOS backdoor linked to OceanLotus. [Research Saturday]

  Apr 28, 2018

  Not summarized yet

• Crimeware kits, ransomware, and source code breaches. The Internet conduces to organic radicalization. Russia in Finland. Snooper's Charter notes. Crypt armistice or just key escrow?

  Apr 27, 2018

  Not summarized yet

• Some fix fast, others not at all. Ransomware campaign's demands are non-negotiable (for most victims—Russians get a hometown discount). Content filtering. Jamming in Syria.

  Apr 26, 2018

  Not summarized yet

• DPRK plays offense and defense. PyRoMine and EternalRomance. Russian disinformation on Syrian massacre. Alt-coin heist may be misdirection. Nakasone confirmed at NSA. Webstresser takedown.

  Apr 25, 2018

  Not summarized yet

• Ransomware in Ukraine's Energy Ministry. Energetic Bear infrastructure. Anonymous Twitter accounts equal bots? Orangeworm in x-ray, MRI machines. Sanction notes. Election security.

  Apr 24, 2018

  Not summarized yet

• ISIS coordinates online inspiration campaign with terror attacks. APT10 spearphishing. IE zero day. Twitter won't sell Kaspersky ads. UK sentence in Crackas with Attitude case.

  Apr 23, 2018

  Not summarized yet

• InnaputRAT exfiltrates victim data. [Research Saturday]

  Apr 21, 2018

  Not summarized yet

• RSA wraps up. Staging offensive cyber operations. (Information ops, too.) Business email compromise affects maritime shipping sectors. Sanctions bit Chinese device giants.

  Apr 20, 2018

  Not summarized yet

• Dispatches from RSA 2018. Russia continues to test the Five Eyes' patience and resolve. Trustjacking, Stresspaint, and an exposed AWS bucket.

  Apr 19, 2018

  Not summarized yet

• More cyber battlespace preparation. Hacking as the continuation of war by other means. Ongoing social media privacy concerns. Tech glitch extends tax deadline. Notes from RSA.

  Apr 18, 2018

  Not summarized yet

• Russia versus routers. Desert Scorpion swept out of Google Play. ZTE faces sanctions. RSA notes, and a Sandbox winner.

  Apr 17, 2018

  Not summarized yet

• Info ops follow airstrikes, to be followed by sanctions. Expect cyberattacks and reprisals, with a chance of kompromat.

  Apr 16, 2018

  Not summarized yet