CyberWire Daily

3271 Episodes

1. Saboteurs trying to look like crooks? CISA on the USAID phishing incident. US receives criticism for alleged surveillance of allies. Epsilon Red is out. No weed, just alt-coin.

   Published: 1/06/2021
2. Zero trust: a change in mindset. [Special Editions]

   Published: 31/05/2021
3. Baan Alsinawi: Trust ourselves and be courageous. [Compliance] [Career Notes]

   Published: 30/05/2021
4. Big data, big payoff for China's cybercrime underground. [Research Saturday]

   Published: 29/05/2021
5. A phishing campaign poses as USAID. APTs exploit unpatched Pulse Secure and Fortinet instances. Healthcare organizations continue recovery from ransomware. A look at Criminal2Criminal markets.

   Published: 28/05/2021
6. Impersonation campaign targets China’s Uyghur minority. US DHS issues pipeline cybersecurity requirements. Recovering from ransomware. Notes on privateering.

   Published: 27/05/2021
7. Cybersespionage reported in Belgium. Low-sophistication attacks on OT networks. Healthcare ransomware attacks. Privateering defined. Advice for boards. And news of crime.

   Published: 26/05/2021
8. CryptoCore traced to Pyongyang. Ransomware and risk management. Gangs regroup. A would-be hacker-by-bribery is sentenced in Nevada.

   Published: 25/05/2021
9. Ransomware warnings in Ireland, New Zealand, Germany, and the US. Belgium’s new cybersecurity strategy. A tipline to dime out cryptominers. Air India passenger data breach.

   Published: 24/05/2021
10. Michael Bishop Jr.: Good, bad or indifferent. [Security] [Career Notes]

    Published: 23/05/2021
11. Leveraging COVID-19 themes for malicious purposes. [Research Saturday]

    Published: 22/05/2021
12. DarkSide still more-or-less dark. Updates on Colonial Pipeline and HSE ransomware attacks. CNA said to have paid $40 million in ransom. Cyber privateers and cyber mercenaries.

    Published: 21/05/2021
13. DarkSide: absconding, rebranding, or retiring to a life of penitence? (Probably the first two.) Israeli airstrikes said to target Hamas cyber ops centers. Apps behaving badly. Notes on phishbait.

    Published: 20/05/2021
14. Updates on the Colonial Pipeline incident, and other ransomware incidents. A watering hole for water utilities. Credential harvesting, cryptojacking, and banking Trojans.

    Published: 19/05/2021
15. WastedLocker being distributed in RIG campaign. Investigation of the DarkSide attack on Colonial Pipeline. More ransomware gangs go offline. Double encryption. Third-party stalkerware risk.

    Published: 18/05/2021
16. Japan calls out China for cyberespionage. Colonial Pipeline restores service. Wither the DarkSide? Conti hits Irish health organizations, and Avaddon strikes AXA.

    Published: 17/05/2021
17. Dominique West: Security found me. [Strategy] [Career Notes]

    Published: 16/05/2021
18. Zeroing in on zero trust. [CyberWire-X]

    Published: 16/05/2021
19. Jack Voltaic: Army Cyber Institute's critical infrastructure resiliency project, not a person. [Research Saturday]

    Published: 15/05/2021
20. Ransomware hoods and their enablers may be feeling some heat. Supply chain compromise and third-party risk. Colonial Pipeline resumes deliveries (but paid ransom to no avail).

    Published: 14/05/2021