Waiting for their victims.
Bitdefender researchers have recently found the APT group StrongPity has been targeting victims in Turkey and Syria. Using watering hole tac...
Radio and PodcastLive Radio & PodcastsTechnology
The CyberWire - Your cyber security news connection.
More signal, less noise—we distill the day’s critical cyber security news into a concise daily briefing.
Episodes
20 of 100 episodesBad Woodcutter is still bad, but not invincible. CactusPete is in Eastern European networks. Exploiting COVID-19. Celebrity endorsements (not).
An update on Fancy Bear and its Drovorub rootkit. Karma Panda, a.k.a. CactusPete, is scouting Eastern European financial and military target...
This Woodcutter's no Railsplitter. Operation Dream Job. COVID-19 phishing.
NSA and FBI release a detailed report on a GRU toolset. North Korea's Operation Dream Job phishes in Israeli waters. CISA warns of COVID-19...
Domestic cyber squabbling in Belarus and Iran. Pakistan accuses India of a cyber offensive. More on Papua's data center. More privacy questions for TikTok. Parental control or stalker's tool?
Regional rivals tussle in cyberspace, and governments have it out with dissidents and the opposition. Market penetration as an instrument of...
Internet blackout in Belarus. Papua New Guinea's insecure National Data Centre. Chrome and CSP rule bypass. Zoom gets sued in DC. Patch Tuesday. Go Spartans.
Belarus shuts down its Internet after its incumbent president's surprising, perhaps implausible, no...really implausible landslide reelectio...
Introducing Word Notes - NMAP (noun)
The CyberWire's newest show is here - it's called Word Notes, and it just launched today with 10 binge-able episodes. Think of it as your au...
What are the adversaries' goals in election interference? A case study in the ransomware-as-a-service market. Untangling TikTok, as the clock ticks toward September 15th.
The US Office of the Director of National Intelligence has released an appreciation of the goals of election interference among three princi...
The Green Goldfish and cyber threat intelligence.
Cyber threat intelligence analyst Selena Larson takes us on her career journey from being a journalist to making the switch to industrial se...
Like anything these days, you have to disinfect it first.
"Cyberbunker" refers to a criminal group that operated a "bulletproof" hosting facility out of an actual military bunker. "Bullet Proof" hos...
US Executive Orders against TikTok, WeChat. Chimera takes chip IP. Intel data leaked. Texting Rewards for Justice. Coordinated inauthenticity. Magecart's homoglyph attacks.
President Trump issues Executive Orders restricting TikTok and WeChat in the US. A Chinese APT has been active in industrial espionage again...
US Clean Network program outlines measures against Chinese operations. $10 million reward offered for info on election interference. Australia's cyber strategy is out. Grand larceny and petty lulz.
The US announces five new lines of effort for the Clean Network program, and none of them are exactly mash notes for Beijing. The US is also...
Privacy, Fort Meade style. Interpol looks at cybercrime. Oilrig gets DNSExfiltrator. Please move on from Windows 7. Updates on the Twitter hack.
NSA, yes, NSA, has some privacy advice. Interpol offers its take on where cybercrime is going during the time of the pandemic. Iran's Oilrig...
US attributes Taidoor RAT to China's government. Pegasus spyware in Togo. The TikTok affair. More fallout from the Blackbaud ransomware incident.
The US attributes the Taidoor remote access Trojan to the Chinese government. Sources tell Reuters that documents used in an attempt to infl...
Microsoft considers acquiring TikTok. The US considers other Chinese companies as potential security threats. Charges in the Twiter hack. DDoS turns out to be a glitch. Garmin hack update.
Microsoft is in talks to acquire TikTok as the US hints that it may be considering action against other Chinese software companies. Three yo...
Rely on your strengths in the areas of the unknown.
Director of Security Engineering at Marketa and Host of Hacker Valley Studio podcast Chris Cochran describes his transitions throughout the...
Detecting Twitter bots in real time.
NortonLifeLock Research Group (NRG) released a prototype browser extension called BotSight that leverages machine learning to detect Twitter...
Social engineering at Twitter. Phishing kits and hackers for hire. Cyberespionage. The EU sanctions actors for Cloudhopper, WannaCry, and NotPetya. And security advice from NSA and NIST.
An update on social engineering at Twitter. A quick look at the phishing kit criminal market. The European Union sanctions individuals and o...
A quick look at Big Tech's antitrust testimony. BootHole may be tough to patch. Fake COVID contact tracers. Netwalker warning. And Chinese espionage against the Vatican and the United Kingdom.
Yesterday's antitrust hearings in the US House of Representatives focus on Big Tech's big data as something open to use in restraint of trad...
Alleged Russian disinformation campaigns. Beijing's cyberespionage hits the Vatican. Costly PII losses. VPNs and OT security. Big Tech's day with Congress. Online bar exams. Snooping for the Saudis.
Alleged Russian influence operations described by US intelligence services. "Ghostwriter" targets the Baltic region with anti-NATO false nar...
Data breaches and responsibility. Where do you get a decryptor for WastedLocker? Third-party risk. Misconfigured databases. Follow-up on the Twitter hack.
Cloudflare says that reported Ukrainian breaches aren't its issue. Trend Micro describes a new and unusually capable strain of malware. Garm...