CyberWire Daily

3271 Episodes

1. Malware sometimes changes its behavior. [Research Saturday]

   Published: 10/30/2021
2. Iranian-Israeli cyber tensions rise. Decaf ransomware described. Philippine government phshbait. Unemployment due to cyberattack. Europol’s latest collars. Facebook rebrands as “Meta.”

   Published: 10/29/2021
3. The Malware Mash!

   Published: 10/29/2021
4. Hacktivists or intelligence services in Iran? BOLO NIkolay K. Renouncing Conti, and all its empty promises. SEO poisoning. US cyber strategic intent.

   Published: 10/28/2021
5. Coups and comms blackouts. Fuel sale sabotage in Iran. Wslink described. Operation Dark HunTor takes down a contraband market. FTC looks into Facebook. LockBit speaks.

   Published: 10/27/2021
6. Ransomware and privateering, counteroffense and deterrence. The US State Department will reestablish its cyber office. And looking forward to Halloween.

   Published: 10/26/2021
7. SolarMarket malware carried in some WordPress sites. Russian privateers don’t much like REvil’s takedown. The SVR in the supply chain. Malicious Squid Games app. Scary social media.

   Published: 10/25/2021
8. Mark Nunnikhoven: Providing clarity about security. [Cloud strategy] [Career Notes]

   Published: 10/24/2021
9. When big ransomware goes away, where should affiliates go? [Research Saturday]

   Published: 10/23/2021
10. Counting coup against REvil (and other gangs are taking note). Export controls and dual use. A timing bug will surface this weekend.

    Published: 10/22/2021
11. Evil Corp identified as the threat actor behind ransomware attacks on Sinclair and Olympus. Privateering. Fin7’s front company. Sentencing in a bulletproof hosting case.

    Published: 10/21/2021
12. Cyberespionage campaign looks a lot like SIGINT collection. Magnitude gets more capable. VPN exploits solicited. Ransomware trends. Seven years for UPMC hacker. Plenty of Candy Corn coming.

    Published: 10/20/2021
13. TA505’s recent activity. Advice on defending organizations from BlackMatter. CISA RFI seeks EDR information. REvil’s halting attempts to return. Sinclair’s incident response.

    Published: 10/19/2021
14. A US broadcaster sustains a ransomware attack. North Korean catphis expelled from Twitter. REvil’s Tor sites are hijacked. Hacking back. Prosecution and responsible disclosure?

    Published: 10/18/2021
15. Ell Marquez: It's okay to be new. [Linux] [Career Notes]

    Published: 10/17/2021
16. Groove Gang making a name for themselves. [Research Saturday]

    Published: 10/16/2021
17. CISA and its partners warn of threats to water and wastewater treatment facilities. The curious case of Missouri teachers’ Social Security Numbers.

    Published: 10/15/2021
18. Notes from the underground: data breach extortion and a criminal market shuts down. International cooperation against ransomware. Cyber risk and higher education.

    Published: 10/14/2021
19. Cyber Espionage, again. Patched SolarWinds yet? Patch Tuesday. The international conference on ransomware has begun. Booter customers get a warning. A disgruntled insider alters aircraft records.

    Published: 10/13/2021
20. Espionage by password spraying, and espionage via peanut butter sandwich. Ransomware and DDoS warnings. Two journalists get the Nobel Peace Prize

    Published: 10/12/2021