The assassination attempt on former President Trump sparks online disinformation. AT&T pays to have stolen data deleted. Rite Aid recovers from ransomware. A hacktivist group claims to have breached Disney’s Slack. Checkmarx researchers uncover Python packages exfiltrating user data. HardBit ransomware gets upgraded with enhanced obfuscation. Threat actors can weaponize proof-of-concept (PoC) exploits in as little as 22 minutes. Google may be in the market for Wiz. Rick Howard previews his analysis of the MITRE ATT&CK framework. Blockchain sleuths follow the money. 

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

This Week on CSO Perspectives

Dave chats with Rick Howard, The CSO, Chief Analyst, and Senior Fellow at N2K Cyber, about his latest episode of CSO Perspectives which focuses on the current state of MITRE ATT&CK. If you are a N2K Pro subscriber, you can find this installment of CSO Perspectives here. The accompanying essay is available here. If you’re not a subscriber and want to check out a sample of the discussion Rick has with his Hash Table members about MITRE ATT&CK, you can find it here. 

Selected Reading

Conspiracy theories spread swiftly in hours after Trump rally shooting (The Washington Post)

AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records (WIRED)

Pharmacy Giant Rite Aid Hit By Ransomware (Infosecurity Magazine)

Disney's Internal Slack Breached? NullBulge Leaks 1.1 TiB of Data (HackRead)

Malicious Python packages found exfiltrating user data to Telegram bot (Computing)

HardBit ransomware version 4.0 supports new obfuscation techniques (Security Affairs)

Hackers use PoC exploits in attacks 22 minutes after release (Bleeping Computer)

Google is reportedly planning its biggest startup acquisition ever (The Verge)

Automotive SaaS provider CDK paid $25 million ransom to hackers (BeyondMachines.net)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices