Cybersecurity Today

This episode reports on a US$10 million reward for a ransomware gang, a new Linux version of a backdoor, and more

This episode reports on a new network of 40,000 infected small and home office routers and other devices that are part of a criminal botnet, and more

This episode reports on a new campaign stealing email passwords, the latest data breaches, and more

This episode features discussion on lessons learned from the ransomware attack on the British Library, advice for managing expectations of IT/security teams, why firms are leaving Google Firebase unprotected and more

This episode reports on the discovery of a side-channel vulnerability in Apple M-series chips and more

This episode reports on new backdoors, a new paper giving advice to OT network operators and more

This episode reports on bugs, holes, data breaches, a coming cybersecurity trust mark for US wireless consumer products and more

Here's our week in review stories that David and guest host Jim Love will discuss:

Cyber Pros flock to cybercrime side hustles. I covered this earlier this week. This story came out of the UK and a report that an ex-cop went undercover on the dark web and discovered that there were a lot of cybersecurity professionals who were moonlighting or offering their services the Dark Web.

A second municipality fell victim to a ransomware attack.  First it was the city of Hamilton just outside of Toronto, a relatively large municipality – about 600,000 people hit by Ransomware on Feb 25th.

Microsoft had to admit that those Russian state hackers were still doing damage.

For those who don’t remember the story, Microsoft had a very severe breach where email accounts of senior company executives were hacked in November. The cause of the breach, if I remember it right, was a “non-production” instance that was left without two factor authentication and allowed hackers to breach that system and get into a lot more including the executive emails.

Ransomware talent moves to Akira after Lockbit’s “demise”  

Lockbit, a big player in ransomware got taken down very publicly by an international law enforcement group. They took Lockbit’s servers and even publicly tried humiliate the group, taking the counter that the group used to terrorize it’s victims.  It had a countdown clock that showed the time left to pay the ransom or they’d release the company’s information on the dark web.  The agencies that brought them down and took over their site put up their own countdown – only this was the time it would take them to nail the leader of Lockbit referred to as LockBitSupp. 

Google adds real time phishing protection to Chrome. A security bug is found in Kubernetes that allows attackers to remotely execute code on Windows nodes. The French government suffers an enormous cyber-attack and vulnerabilities in ChatGPT plug-ins. 

Welcome to Cybersecurity Today for Friday March 15th, 2024. I’m your host Jim Love, filling in for Howard Solomon.

A new phishing scam uses car insurance savings as to lure its victims, a report by Sophos shows that small businesses are being targeted by cybercriminals at an increasing rate.  Okta says that data claiming to be from hacking them is not their customer data.  These stories and more…

Welcome to Cybersecurity Today for Wednesday March 13th, 2024. I’m your host Jim Love, filling in for Howard Solomon.