CyberWire Daily

3271 Episodes

1. Developments in cyber gangland, and the increasingly complicated entanglement of crooks and spies. Selling confiscated alt-coin to compensate fraud victims.

   Published: 11/18/2021
2. CISA and its partners warn of Iranian cyber ops. Cyberespionage in the Middle East with Candiru tools. Belarus connected to Ghostwriter. Facebook boots SideCopy. RAMP recruits members.

   Published: 11/17/2021
3. Threats and vulnerabilities, old and new, include Emotet and Mirai. CISA advises of DDS vulnerabilities. Arrest in a revenge porn case.

   Published: 11/16/2021
4. Official online channels hijacked in separate US, Philippine incidents. Update on MosesStaff, a ransomware group interested in politics, not profit. Costco breach. Ryuk money-laundering case.

   Published: 11/15/2021
5. The real costs of ransomware in 2021, 2022, and beyond. [CyberWire-X]

   Published: 11/14/2021
6. Swati Shekhar: Challenges increase your risk appetite. [Engineering] [Career Notes]

   Published: 11/14/2021
7. A glimpse into TeamTNT. [Research Saturday]

   Published: 11/13/2021
8. Tension in Eastern Europe. A Hong Kong watering hole. US, EU join the Paris Call. Cybermercenaries. CISA’s plans for countering disinformation, and for forming a white-hat hacker advisory group.

   Published: 11/12/2021
9. Let's go to the movies. [Hacking Humans Goes to the Movies]

   Published: 11/11/2021
10. Cyberespionage from Tehran. Clopp ransomware operators exploit vulnerable SolarWinds instances. Mercenaries and lawful intercept vendors. Patch Tuesday.

    Published: 11/10/2021
11. Ransomware hits an electronics retailer and a new-school financial services company. Updates on international action against REvil.

    Published: 11/9/2021
12. REvil operators arrested and indicted. China says a foreign intelligence service accessed passenger travel records. Suspected Emissary Panda campaign.

    Published: 11/8/2021
13. Jamil Jaffer: You should run towards risk. [Strategy] [Career Notes]

    Published: 11/7/2021
14. An incident response reveals itself as GhostShell tool, ShellClient. [Research Saturday]

    Published: 11/6/2021
15. $10 million reward for DarkSide info. BlackMatter members expected to resurface. Ukraine outlines Russia’s FSB cyber ops. Persistent engagement as deterrence. Arrest in Crossfire Hurricane inquiry.

    Published: 11/5/2021
16. Britain’s Labour Party sustains a “data incident.” CERT-FR describes a new affiliate gang, Lockean. US, Russian intelligence chiefs discuss cybersecurity. Gas is flowing in Iran again. Start-ups honor

    Published: 11/4/2021
17. Ransomware gangs talk about retiring, and about deception. High-level Russo-American talks. US sanctions four spyware vendors. CISA tells US agencies to patch known, exploited vulnerbalities.

    Published: 11/3/2021
18. Trojan Source--a threat to the software supply chain. Ransomware goes to influence operations school. Triple extortion? Criminal target selection.

    Published: 11/2/2021
19. Iranian officials blame the US and Israel for gas station cyber sabotage. A new direction for NSO? Cyber extortion, Minecraft phishing, and sugar daddies looking for sugar babies (sez they).

    Published: 11/1/2021
20. Jadee Hanson: Cybersecurity is a team effort. [CISO] [Career Notes]

    Published: 10/31/2021