CyberWire Daily

3271 Episodes

1. Both sides in the conflict over Ukraine are talking with their allies and preparing for conflict in cyberspace. A cyberattack disrupts gasoline distribution in Germany. Notes on APTs and privateers.

   Published: 2/2/2022
2. Updates on the crisis over Ukraine, as Russian cyber operations continue. Ransomware threatens OT. Ramnit remains a leading banking Trojan. Bots infesting some NFT markets. Agencies advise opsec.

   Published: 2/1/2022
3. The UN Security Council will take up Russia’s hybrid war against Ukraine as Western powers prepare sanctions. Other ransomware and social engineering campaigns.

   Published: 1/31/2022
4. Helen Patton: A platform to talk about security. [CISO] [Career Notes]

   Published: 1/30/2022
5. Zero Trust for cloud assets: Identity authentication and authorization. [CyberWire-X]

   Published: 1/30/2022
6. Use of legitimate tools possibly linked to Seedworm. [Research Saturday]

   Published: 1/29/2022
7. Diplomacy and cyber warnings in the Ukraine crisis. REvil may not actually be out of business. A warning about Iranian state-directed hacking. And Data Privacy Day is observed.

   Published: 1/28/2022
8. Updates on the hybrid war in Ukraine. Industrial espionage in Germany, conventional espionage in Western Asia. C2C markets, social engineering, and scamware.

   Published: 1/27/2022
9. Tensions between Russia and Ukraine remain high as NATO offers Ukraine cyber, diplomatic, and other support. DDoS in the DPRK. DazzleSpy in the watering hole. TrickBot ups its game.

   Published: 1/26/2022
10. Hacktivism as irregular operations-short-of-war. A banking Trojan aims at fraudulent wire transfers. DTPacker’s two-step delivery. REvil re-forms? Ransomware and insider threats. DDoS in Andorra.

    Published: 1/25/2022
11. Updates on the continuing hybrid war in Ukraine. Julian Assange will get another chance to avoid extradition. And Russian privateers find that they’re expendable.

    Published: 1/24/2022
12. Andrew Maloney: Never-ending thirst for knowledge. [COO] [Career Notes]

    Published: 1/23/2022
13. A collaboration stumbles upon threat actor Lyceum. [Research Saturday]

    Published: 1/22/2022
14. Ukrainian crisis continues, with attendant risk of hybrid warfare. MoonBounce malware in the wild. Pirate radio hacks a number station.

    Published: 1/22/2022
15. Looking toward tomorrow’s Russo-American talks about the Ukraine crisis. A memorandum gives NSA oversight authority for NSS. A look at the C2C markets.

    Published: 1/20/2022
16. Updates on what Ukraine is now calling “BleedingBear.” CISA advises organizations to prepare for Russian cyberattacks. Other cyberespionage campaigns, and a new ransomware strain.

    Published: 1/19/2022
17. A new member of the Winnti Cluster is described. Cobalt Strike used against unpatched VMware Horizon servers. Ukraine blames Russia for what seems to be a destructive supply chain attack.

    Published: 1/18/2022
18. SOAR - a first principle idea. [CSO Perspectives}

    Published: 1/17/2022
19. Marina Ciavatta: Going after the human error. [Social engineer] [Career Notes]

    Published: 1/16/2022
20. Keeping APIs on the radar: Evaluating the banking industry. [Research Saturday]

    Published: 1/15/2022