Episodes
-
Updates on what Ukraine is now calling “BleedingBear.” CISA advises organizations to prepare for Russian cyberattacks. Other cyberespionage campaigns, and a new ransomware strain.
Not summarized yet
-
A new member of the Winnti Cluster is described. Cobalt Strike used against unpatched VMware Horizon servers. Ukraine blames Russia for what seems to be a destructive supply chain attack.
Not summarized yet
-
Marina Ciavatta: Going after the human error. [Social engineer] [Career Notes]
Not summarized yet
-
Keeping APIs on the radar: Evaluating the banking industry. [Research Saturday]
Not summarized yet
-
Influence operations in the grey zone. FSB raids REvil. Open Source Software Security Summit looks to public-private cooperation. Privateering and state-sponsored cybercrime.
Not summarized yet
-
A public-private conference takes up open source software security at the White House. MuddyWater attributed to Iran. Espionage and ransomware arrests.
Not summarized yet
-
The US and EU seek to shore up cybersecurity as Russo-Ukraininan tensions run high. NIST updates secure system standards. Ransomware exploits Log4shell. Dog bites man: fraud in social media.
Not summarized yet
-
Software supply chains and the free-rider problem. An APT is bitten by its own RAT. Europol told to clean up its data. A leak investigation in Denmark. QR-code phishbait.
Not summarized yet
-
CISA provides an account of progress toward Log4shell remediation. Other issues are reported in open-source libraries. Undersea cable security. FIN7’s BadUSB campaign. Security and Yealink.
Not summarized yet
-
Julian Waits: Find a way to help society. [Serial Entrepreneur] [Career Notes]
Not summarized yet
-
The rise of Karakurt Hacking Team.
Not summarized yet
-
Kazakhstan shuts down its Internet as civil unrest continues (and one consequence is a disruption of alt-coin mining in that country). More on Log4j. Ransomware hits school website provider.
Not summarized yet
-
Log4j and industrial control systems. Regulators consider the software supply chain. Malsmoke hits an old vulnerability. Social engineering via Google Docs. Call spoofing and robocalls.
Not summarized yet
-
CISA reports progress on Log4j. The FTC warns US businesses about taking Log4j risk mitigation seriously. Gangland updates, and some notes on hybrid war.
Not summarized yet
-
Log4j issues persist. Konni RAT found in New Year’s greetings. Hacktivism or state-directed cyber action? Moscow worries about Mr. Klyushin’s knowledge. The Show-Me-Too-Much State.
Not summarized yet
-
Log4j updates, including an Aquatic Panda sighting. Cyberattacks hit news services in Norway, Israel, and Portugal. Addressing Y2K22.
Not summarized yet
-
Dr. Rois Ni Thuama: Get into the game. [Cyber governance] [Career Notes]
Not summarized yet
-
Cybersecurity predictions for 2022. [CyberWire-X]
Not summarized yet
-
Encore: When big ransomware goes away, where should affiliates go? [Research Saturday]
Not summarized yet
-
CyberWire Pro Interview Selects: Jaclyn Miller from NTT, Ltd.
Not summarized yet
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account