CyberWire Daily

3271 Episodes

1. Moscow poorly served by its intelligence services, say London and Washington. Cyber phases of the hybrid war. A new zero-day, and some resurgent criminal activity.

   Published: 3/31/2022
2. Taking down bot farms. Cyber aggression. Kinetic influence ops, Spamming yourself? CS control system advisories. Sanctions are also biting Russian cyber gangs.

   Published: 3/30/2022
3. Cyber phases of a hybrid war continue at a nuisance level. IcedID’s distribution vectors. Automating software supply-chain attacks. CISA offers power supply risk mitigation guidance.

   Published: 3/29/2022
4. Notes on the cyber aspects of the ongoing hybrid war. DDoS in the Marshall Islands. Lapsus$ Group post mortems. US FCC sanctions Kaspersky. CISA adds Known Exploited Vulnerabilities to its Catalog.

   Published: 3/28/2022
5. The breakdown of Shuckworm's continued cyber attacks against Ukraine. [Research Saturday]

   Published: 3/26/2022
6. Fears of Russian escalation, with both chemical and cyber weapons, rise. DPRK APTs exploit Chrome vulnerabilities. Mustang Panda is back. Arrests made in the Lapsus$ case.

   Published: 3/25/2022
7. Updates on Russia’s hybrid war against Ukraine. The leader of the Lapsus$ Gang may be a 16-year-old living with his Mom. Wanted cybercriminals. Hacktivism’s sometimes wayward aim.

   Published: 3/24/2022
8. Insider Risk Excellence Awards. [CyberWire-X]

   Published: 3/24/2022
9. British-American warnings of a Russian cyber threat, and Russia’s response. More on the Lapsus$ gang incidents at Microsoft and Okta. And Secureworks looks at Conti and sees a criminal ecosystem.

   Published: 3/23/2022
10. White House adds its voice to CISA’s Shields Up, warning of the possibility of Russian cyberattacks. New malware strains described, new criminal attack techniques observed.

    Published: 3/22/2022
11. Hacktivism, protestware, and information operations in a hybrid war. Brazi-based cyber gangs active in extortion. Steganography opens a backdoor. A free decryptor for Diavol ransomware.

    Published: 3/21/2022
12. Derek Manky: Putting the rubber to the road. [Threat Intelligence] [Career Notes]

    Published: 3/20/2022
13. Implications of data leaks of sensitive OT information. [Research Saturday]

    Published: 3/19/2022
14. Hacktivism and other cyberattacks continue against Russian targets, but some hacktivism may go too far. C2C market notes. Advice from CISA and NIST. Prank calls as statecraft.

    Published: 3/18/2022
15. Debunking deepfakes. Hacktivism and information warfare. The prospect of “splinternets.” Germany warns of security product risks. Disruption of Ukrainian ISPs. New wrinkles in phishing.

    Published: 3/17/2022
16. Ukrainian President Zelenskyy addresses the US Congress, as Russia’s hybrid war continues. LokiLocker ransomware flies a false flag. CISA warns of Russian cyber threat. Advance fee arrest.

    Published: 3/16/2022
17. Disinformation and cyberattacks in Russia’s hybrid war against Ukraine. DDoS attack hits Israeli telcos. Captured tools are old news. Recent trends in cybercrime.

    Published: 3/15/2022
18. Russia’s hybrid war against Ukraine becomes more firepower intensive, but hackers make their mark. Cybercrime does business as usual.

    Published: 3/14/2022
19. Kristin Strand: Be firm in your goals. [Consultant] [Career Notes]

    Published: 3/13/2022
20. The story of REvil: From origin to beyond. [Research Saturday]

    Published: 3/12/2022