CyberWire Daily

Episodes

• Memcrash and amplification attacks. SAML vulnerabilities. Thanatos ransomware. Petya returns (so does Marcher). Deterrence and election security.

  Feb 28, 2018

  Not summarized yet

• Cryptojacking through an AWS S3 bucket. Threats, risk, and unintentional mistakes. Crime and punishment. Industry notes. Alien hackers?

  Feb 27, 2018

  Not summarized yet

• Olympic hacking—false flags and attack infrastructure. Cryptojacking. Smartphone security bans. Heraldic animals of hacking.

  Feb 26, 2018

  Not summarized yet

• Phishing for holiday winnings. [Research Saturday]

  Feb 24, 2018

  Not summarized yet

• Mirai variant establishes proxies. Buggy smart contracts. Banking glitch. Studies from Verizon, Thales. FTC addresses credential stuffing.

  Feb 23, 2018

  Not summarized yet

• Code signing certificates for sale. Impact of cybercrime on the world economy. Reaper out from under Lazarus's shadow. Catphishing. Cyber intelligence against terror. Ransomware and other hacks.

  Feb 22, 2018

  Not summarized yet

• SWIFT phishbait. DPRK hacking gets better; GRU hacking looks east. Coldroot RAT. Cryptojacking. Election cybersecurity.

  Feb 21, 2018

  Not summarized yet

• SWIFT fraud in India. DPRK hacking updates. Notes on Russian influence ops, both indictments and continuing activity. Alleged Florida gunman may have been an Internet known wolf.

  Feb 20, 2018

  Not summarized yet

• The uncanny HEX men. [Research Saturday]

  Feb 17, 2018

  Not summarized yet

• The complexities of Olympic Destroyer. More blame for Russia in the matter of NotPetya. Congress mulls election security. New York cyber milestone. Ed Snowden as phishbait.

  Feb 16, 2018

  Not summarized yet

• Olympic Destroyer took its time, compromised the IT supply chain. NotPetya attribution. Coin scams. Coin miners. Botnets old and new.

  Feb 15, 2018

  Not summarized yet

• Olympic Destroyer updates. Cyber forecasts from the US Intelligence Community. Patch notes. Cryptojacking and coinming. Ad blockers (also an incentive to coin mining).

  Feb 14, 2018

  Not summarized yet

• Patch Tuesday notes. Skype DLL hijacking vulnerability. Olympic Destroyer malware described. Lazarus Group newly active. BitGrail heist? Cyber Valentine.

  Feb 13, 2018

  Not summarized yet

• Olympic hacking, cryptojacking and other illicit coin mining. Ransomware updates. The curious case of an alleged kompromat buy. Bots turn to ticket scalping.

  Feb 12, 2018

  Not summarized yet

• IcedID banking trojan. [Research Saturday]

  Feb 10, 2018

  Not summarized yet

• Trends in phishing. Olympic hacking. Cryptojacking spreads. Litecoin gains black market share. Influence operations. Can Strava be exploited by bicycle thieves?

  Feb 9, 2018

  Not summarized yet

• Operation Shadow Web rolls up carding gang. Fancy Bear sightings. DPRK buying zero-days? Cryptojacking ICS. Huawei, ZTE get Congressional razzing. Jita scams.

  Feb 8, 2018

  Not summarized yet

• Dutch DDoS arrest. Pyongyang is interested in cryptocurrency. So is the US SEC (in a different way). Uber explains its breach disclosure. New wrinkle in the "Microsoft" Help Desk scam.

  Feb 7, 2018

  Not summarized yet

• More Eternal exploits found more troublesome. Cryptominer updates. NIST SP 800-171. Paycard skimmers. Tsunami false alarm.

  Feb 6, 2018

  Not summarized yet

• DPRK exploiting Flash Player zero-day. ISIS wants hacking help. JenX DDoS, Scrareby ransomware updates. Crime and punishment.

  Feb 5, 2018

  Not summarized yet