The CyberWire Daily

In this webinar, N2K Networks Cyber Workforce Consultant Dr. Sasha Vanterpool shares how to update job descriptions to better reflect cyber role expectations to improve hiring, training, and retention.

To view the original webinar on demand, visit here.

Learn more about your ad choices. Visit megaphone.fm/adchoices

This week we are joined by Jamie MacColl and Dr. Pia Hüsch from RUSI discussing their work on "Ransomware: Victim Insights on Harms to Individuals, Organisations and Society." The research reveals some of the harms caused by ransomware, including physical, financial, reputational, psychological and social harms.

Researchers state "Based on interviews with victims and incident responders, this paper outlines the harm ransomware causes to organisations, individuals, the UK economy, national security and wider society."

The research can be found here:

• Ransomware: Victim Insights on Harms to Individuals, Organisations and Society

Learn more about your ad choices. Visit megaphone.fm/adchoices

Russian hackers persist against Microsoft’s internal systems. Change Healthcare systems are slowly coming back online. Russian propaganda sites masquerade as local news. Swiss government info is leaked on the darknet.  Krebs on Security turns the tables on the Radaris online data broker. The NSA highlights the fundamentals of Zero Trust. The British Library publishes lessons learned from their ransomware attack. Researchers run a global prompt hacking competition. CheckPoint looks at Magnet Goblin. Experts highlight the need for psychological safety in cyber security. Our guest is Dinah Davis, Founder and Editor-In-Chief of Code Like A Girl, sharing the work they do to inspire young women to consider a career in technology. And the I-Soon leak reveals the seedy underbelly of Chinese cyber operations.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

Guest is Dinah Davis, Founder and Editor-In-Chief of Code Like A Girl, sharing the work they do to inspire young women to consider a career in technology.

Microsoft says Russian-state sponsored hackers have been able to access internal systems  (Reuters) 

Change Healthcare brings some systems back online after cyberattack (The Record)

Spate of Mock News Sites With Russian Ties Pop Up in U.S  (The New York Times)

Play ransomware attack on Xplain exposed 65,000 files containing data relevant to the Swiss Federal Administration (Security Affairs)

A Close Up Look at the Consumer Data Broker Radaris (krebsonsecurity)

NSA Details Seven Pillars Of Zero Trust (GB Hackers)

LEARNING LESSONS FROM THE CYBER-ATTACK British Library cyber incident review (British Library)

A Taxonomy of Prompt Injection Attacks  (Schneier on Security)

https://arxiv.org/pdf/2311.16119.pdf (Research)

Magnet Goblin Targets Publicly Facing Servers Using 1-Day Vulnerabilities  (Check Point Research)

Why 'psychological safety' is so important for building a robust security culture (ITPro)

Inside Chinese hacking company’s culture of influence, alcohol and sex (C4isernet)

International Women's Day (International Women’s Day) 

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

In the dynamic field of cybersecurity, it’s well established that creating more opportunities for diversity and inclusion is essential for developing a highly skilled workforce. As an industry, we are starting to see the fruits of that labor, but there is a growing need for diverse leadership to nurture continuous innovation and resilience in cybersecurity.

As part of N2K’s 2023 Women in Cyber content series, we’re excited to host an engaging virtual panel discussion moderated by N2K's President Simone Petrella featuring insights, experiences, and strategies for advancing more women into leadership roles within the field.

This virtual discussion explores different areas including:

This panel discussion is a must-listen event for professionals, leaders, and aspiring cybersecurity experts who are committed to promoting diversity and empowering women to excel in cybersecurity leadership. Don't miss the opportunity to be part of this inspiring conversation and drive positive change in the industry.

Learn more about your ad choices. Visit megaphone.fm/adchoices

A former Google software engineer is charged with stealing AI tech for China. State attorneys general from forty-one states call out Meta over account takeover issues. Researchers demonstrate a Stuxnet-like attack using PLCs. Buyer beware - A miniPC comes equipped with pre installed malware. A Microsoft engineer wants the FTC to take a closer look at Copilot Designer. There’s a snake in Facebook’s walled garden. Bruce Schneier wonders if AI can strengthen democracy. On our Industry Voices segment, guest Jason Lamar, Senior Vice President of Product at Cobalt, joins us to discuss offensive security strategy. And NIST works hard to keep their innovations above water.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

On our Industry Voices segment, guest Jason Lamar, Senior Vice President of Product at Cobalt, joins us to discuss offensive security strategy. You can find out more from Cobalt’s OffSec Shift report here. 

Former Google Engineer Charged With Stealing AI Secrets (Infosecurity Magazine)

Several States Attorneys General have written to Meta demanding better account recovery (NY gov)

Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers  (SecurityWeek)

Whoops! ACEMAGIC ships mini PCs with free bonus pre-installed malware  (Graham Cluley)

Microsoft AI engineer warns FTC about Copilot Designer safety concerns  (The Verge)

Snake, a new Info Stealer spreads through Facebook messages (Security Affairs)

NSA Details Seven Pillars Of Zero Trust (gbhackers)

How Public AI Can Strengthen Democracy  (Schneier on Security)

This agency is tasked with keeping AI safe. Its offices are crumbling. (WashingtonPost)

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

In honor of International Women's Day, please enjoy this encore of Dinah Davis sharing her story.

Coming from her love of math, VP of R&D at Arctic Wolf Networks Dinah Davis shares how she arrived in the cybersecurity industry after finding her niche. Dinah recalls how at a time of indecision, a computer course at university and a job with the Canadian government helped to solidify her career direction. Dinah mentions how "security and cryptography specifically was this perfect mix of real world problem solving and mathematics and computer science all combined into one ball of happiness." Networking played a key role in Dinah's journey. She recommends that those interested in joining the field to go for what they believe in. And, we thank Dinah for sharing her story with us.

Learn more about your ad choices. Visit megaphone.fm/adchoices

CISA says Super Tuesday ran smoothly. The White House sanctions spyware vendors. The DoD launches its Cyber Operational Readiness Assessment program. NIST unveils an updated NICE Framework. Apple patches a pair of zero-days. The GhostSec and Stormous ransomware gangs join forces. Cado Security tracks a new Golang-based malware campaign. Google updates its search algorithms to fight spammy content. Canada's financial intelligence agency suffers a cyber incident. On our Industry Voices segment, our guest Amitai Cohen, Attack Vector Intel Lead at Wiz joins us to discuss cloud threats. Moonlighting on the dark side. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

On our Industry Voices segment, our guest Amitai Cohen, Attack Vector Intel Lead at Wiz and host of their Crying Out Cloud podcast, joins us to discuss cloud threats. Learn more in Wiz's State of the AI Cloud report. 

No security issues as Super Tuesday draws to a close, CISA official says (The Record)

Biden administration sanctions makers of commercial spyware used to surveil US (CNN Business)

US DoD launches CORA program to revolutionize cybersecurity strategy (Industrial Cyber)

Unveiling NICE Framework Components v1.0.0: Explore the Latest Updates Today! (NIST)

Update your iPhones and iPads now: Apple patches security vulnerabilities in iOS and iPadOS (Malwarebytes)

Watch out, GhostSec and Stourmous groups jointly conducting ransomware attacks (Security Affairs)

Hackers target Docker, Hadoop, Redis, Confluence with new Golang malware (Bleeping Computer)

Google is starting to squash more spam and AI in search results (The Verge)

Cyberattack forces Canada’s financial intelligence agency to take systems offline (The Record)

Cyber Pros Turn to Cybercrime as Salaries Stagnate (Infosecurity Magazine)

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

In this conversation, David Moulton from Unit 42 discusses the evolving threat landscape with Wendi Whitmore, SVP of Unit 42. Wendi highlights the increasing scale, sophistication, and speed of cyberattacks, with examples like the recent Clop ransomware incident, and emphasizes that attackers, including nation-state actors and cybercriminals, are leveraging AI, particularly generative AI, to operate faster and more effectively, especially in social engineering tactics.

To protect against these threats, businesses must focus on speed of response, automated integration of security tools, and operationalized capabilities and processes. The conversation underscores the importance of staying vigilant and leveraging technology to defend against the rapidly changing threat landscape.

Theat Group Assessments https://unit42.paloaltonetworks.com/category/threat-briefs-assessments/

Please share your thoughts with us for future Threat Vector segments by taking our ⁠brief survey⁠.

Join the conversation on our social media channels:

Website: ⁠⁠https://www.paloaltonetworks.com/unit42⁠⁠

Threat Research: ⁠⁠https://unit42.paloaltonetworks.com/⁠⁠

Facebook: ⁠⁠https://www.facebook.com/LifeatPaloAltoNetworks/⁠⁠

LinkedIn: ⁠⁠https://www.linkedin.com/company/unit42/⁠⁠

YouTube: ⁠⁠@PaloAltoNetworksUnit42⁠⁠

Twitter: ⁠⁠https://twitter.com/PaloAltoNtwks⁠⁠

About Threat Vector

Unit 42 Threat Vector is the compass in the world of cyberthreats. Hear about Unit 42’s unique threat intelligence insights, new threat actor TTPs, real-world case studies, and learn how the team works together to discover these threats. Unit 42 will equip listeners with the knowledge and insight to proactively prepare and stay ahead in the ever-evolving threat landscape.

PALO ALTO NETWORKS

Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. ⁠http://paloaltonetworks.com⁠

Learn more about your ad choices. Visit megaphone.fm/adchoices

Is the ALPHV gang pulling up a twenty two million dollar rug? Meta platforms are experiencing outages.  Ukraine claims a cyberattack on the Russian Ministry of Defense. Malicious phishers hope to hook hashes. TeamCity users are warned of critical vulnerabilities. The Discord leaker pleads guilty. AmEx suffers a third-party data breach. Amazon is flooded with fake copycat publications. Our guest is Deputy Assistant Director Cynthia Kaiser from the FBI Cyber Division to discuss Volt Typhoon. And, Dude, she is just not that into you.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

Guest Deputy Assistant Director Cynthia Kaiser from the FBI Cyber Division joins us to discuss Volt Typhoon.

Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment  (WIRED)

Ukraine claims it hacked Russian Ministry of Defense servers (Bleeping Computer)

Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes (Help Net Security)

TeamCity Users Urged to Patch Critical Vulnerabilities (Infosecurity Magazine)

Pentagon leak defendant Jack Teixeira pleads guilty, faces years in prison (Reuters)

American Express credit cards exposed in third-party data breach (Bleeping Computer)

Tech writer Kara Swisher has a new book. Enter the AI-generated scams. (Bleeping Computer)

Retired Army officer charged with sharing classified information about Ukraine on foreign dating site (CBS News) 

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

In honor of International Women's Day, please enjoy this encore of Monica Ruiz sharing her story.

Cyber Initiative and Special Projects Fellow at the Hewlett Foundation Monica Ruiz shares her career development from aspirations of being a weather woman to her current role as a grantmaker and connector in cybersecurity. Monica discusses how her international study experience changed her outlook and brought her to the field of security. She shares the difficulties she faced as a woman of color when when not that many people look like you, and how she used that as her reason to move forward and better the cybersecurity field through her work. Our thanks to Monica for sharing her story with us. 

Learn more about your ad choices. Visit megaphone.fm/adchoices