The CyberWire Daily

The FTC fines Avast over privacy violations. ConnectWise's ScreenConnect is under active exploitation. AT&T restores services nationwide. An Australian telecom provider suffers a data breach. EU Member States publish a cybersecurity and resilience report. Microsoft unleashes a PyRIT. A new infostealer targets the oil and gas sector. A cyberattack cripples a major US healthcare provider. Our guest is Kevin Magee from Microsoft Canada with insights on why cybersecurity startups in Ireland are having so much success building new companies there. And  a USB device is buzzing with malware.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

Guest Kevin Magee from Microsoft Canada talks about recently meeting 15 cybersecurity startups in Ireland and finding out why they are having so much success building new companies there. 

FTC Order Will Ban Avast from Selling Browsing Data for Advertising Purposes, Require It to Pay $16.5 Million Over Charges the Firm Sold Browsing Data After Claiming Its Products Would Block Online Tracking (FTC)

Cybercriminal groups actively exploiting ‘catastrophic’ ScreenConnect bug (The Record)

AT&T services resume, company blames "incorrect process" (Data Center Dynamics)

230k Individuals Impacted by Data Breach at Australian Telco Tangerine (SecurityWeek)

EU releases comprehensive risk assessment report on cybersecurity, resilience of communication networks (Industrial Cyber)

Microsoft Releases Red Teaming Tool for Generative AI (SecurityWeek)

New Infostealer Malware Attacking Oil and Gas Industry (GB Hackers on Security)

UnitedHealth says Change Healthcare hacked by nation state, as US pharmacy outages drag on (TechCrunch)

Vibrator virus steals your personal information (Malwarebytes)

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

AT&T experiences a major outage. The LockBit takedown continues. An updated Doppelgänger is spreading misinformation. A roundup of critical infrastructure initiatives. Toshiba and Orange make a quantum leap. An eyecare provider hack comes into focus. A phony iphone repair scheme leads to convictions. In our Learning Layer segment, Sam Meisenberg shares the latest learning science research. And we are shocked - shocked! - to discover that phone chargers can be used to attack our devices. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

On this month’s Learning Layer segment, host Sam Meisenberg of N2K discusses learning science research. Sam breaks down research about quizzes and their impact on learner motivation and long term retention. Want to know more? Sam suggests you check out The Value of Using Tests in Education as Tools for Learning—Not Just for Assessment.

AT&T, Verizon and T-Mobile customers hit by widespread cellular outages in U.S. (NBC News)

US Offering $10M for LockBit Leaders as Law Enforcement Taunts Cybercriminals (SecurityWeek)

LockBit Group Prepped New Crypto-Locker Before Takedown (Gov Info Security)

Ukraine arrests father-son duo in Lockbit cybercrime bust (Reuters)

Russian Cyberwarfare campaign (ClearSky Cyber Security)

US Coast Guard issues cybersecurity directive for Chinese-made cranes after Biden's Executive Order (Industrial Cyber) 

US agencies release joint fact sheet to strengthen cybersecurity in water and wastewater systems (Industrial Cyber) 

E-ISAC 2023 report highlights cybersecurity triumphs and challenges in electricity sector (Industrial Cyber) 

Toshiba and Orange test quantum encryption on traditional network (Computer Weekly)

Hack at Services Firm Hits 2.4 Million Eye Doctor Patients (Gov Info Security)

Chinese Duo Found Guilty of $3m Apple Fraud Plot (Infosecurity Magazine)

VoltSchemer attacks use wireless chargers to inject voice commands, fry phones (BleepingComputer) 

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

President Biden to sign EO to bolster maritime port security. Apple announces post-quantum encryption for iMessage. Malwarebytes examines the i-Soon data leak. Law enforcement airs LockBit’s dirty laundry. Varonis highlights vulnerabilities affecting Salesforce platforms. An appeals court overturns a $1 billion piracy verdict. NSA’s Rob Joyce announces his retirement. Anne Neuberger chats with WIRED.  A leading staffing firm finds its data for sale on the dark web. In our sponsored Industry Voices segment, Navneet Singh, VP of Marketing Network Security at Palo Alto Networks, discusses the transition to the cloud and shares some examples from healthcare. Hackers and hobbyists push back on the proposed Flipper Zero ban. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

On our Industry Voices segment, Navneet Singh, VP of Marketing Network Security at Palo Alto Networks, discusses the transition to the cloud and shares some examples in healthcare.

Biden to sign executive order to give Coast Guard added authority over maritime cyber threats (CyberScoop)

Apple Announces 'Groundbreaking' New Security Protocol for iMessage (MacRumors)

A first analysis of the i-Soon data leak (Malwarebytes)

Cops turn LockBit ransomware gang's countdown timers against them (The Register)

Security Vulnerabilities in Apex Code Could Leak Salesforce Data (Varonis)

Court blocks $1 billion copyright ruling that punished ISP for its users’ piracy (Ars Technica)

NSA cyber director to step down after 34 years of service (Nextgov/FCW)

Anne Neuberger, a Top White House Cyber Official, Is Staying Surprisingly Optimistic (WIRED)

Critical flaw found in deprecated VMware EAP. Uninstall it immediately (Security Affairs)

Hackers Claim Data Breach at Staffing Giant Robert Half, Sell Sensitive Data (HackRead)

Save Flipper (Save Flipper)

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Operation Cronos leaves LockBit operations on borrowed time. An alleged leak reveals internal operations from the Chinese Ministry of Public Security. An Israeli airline thwarts communications hijacking attempts. The alleged Raccoon Infostealer operator has been extradited to the US. ConnectWise patches critical vulnerabilities. Schneider Electric confirms a Cactus ransomware attack. Alleged Maryland money launderers face indictments. Russian hackers target media outlets in Ukraine. Our guest is Tomislav Pericin, Chief Software Architect at Reversing Labs , on the rise of software supply chain attacks. and Tinder hopes to reel in the catfish.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

Guest is Tomislav Pericin, ReversingLabs Chief Software Architect, talking about the rise of software supply chain attacks. Learn more in their 2024 State of Software Supply Chain Security Report. 

Police arrests LockBit ransomware members, release decryptor in global crackdown (BleepingComputer)

U.S. and U.K. Disrupt LockBit Ransomware Variant (US Justice Department)

Chinese Ministry Of Public Security Breach: Data On GitHub (The Cyber Express)

Massive “i-Soon” leak reveals Chinese firm's hacking tools, targets, including NATO (The Stack)

I-S00N Leaked Chinese foreign government infiltration intel on Github : r/cybersecurity (Reddit)

Israeli Aircraft Survive “Cyber-Hijacking” Attempts (Infosecurity Magazine)

Raccoon Infostealer operator extradited to the United States (Malwarebytes)

Critical ConnectWise ScreenConnect vulnerabilities fixed, patch ASAP! (Help Net Security)

Schneider Electric confirms data was stolen in Cactus ransomware attack (IT Pro)

Maryland Busts $9.5 Million #BEC Money Laundering Ring (CyberCrime & Doing Time)

Several Ukrainian media outlets attacked by Russian hackers (The Record)

Tinder Expands ID Checks Amid Rise in AI Scams, Dating Crimes (Bloomberg)

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Kathy O’Donnell is the leader of Space Solutions Architecture for AWS Aerospace and Satellite. In this extended conversation, we dive into how AWS is supporting generative AI in the space domain. She walks us through some incredible case studies with AWS customers who are using generative AI and space technologies to improve life here on Earth.

Learn more about generative AI use cases for space at AWS re:Invent.

AWS in Orbit is a podcast collaboration between N2K Networks and AWS to offer listeners an in-depth look at the transformative intersection of cloud computing, space technologies, and generative AI. You can learn more about AWS in Orbit at space.n2k.com/aws.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our weekly intelligence roundup, Signals and Space, and you’ll never miss a beat. And be sure to follow T-Minus on LinkedIn and Instagram.

AWS successfully runs AWS compute and machine learning services on an orbiting satellite in a first-of-its kind space experiment | AWS Public Sector Blog

AWS re:Invent 2022 - Accelerate Geospatial ML with Amazon SageMaker (AER204) 

AWS re:Invent 2023

We want to hear from you! Please complete our 4 question survey. It’ll help us get better and deliver you the most mission-critical space intel every day.

Please send your pitch to [email protected] and include your name, affiliation, and topic proposal.

T-Minus is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

In this episode of CyberWire-X, N2K’s CSO, Chief Analyst, and Senior Fellow, Rick Howard, is joined by Tim Miller, Technical Marketing Engineer for Panoptica, Cisco's Cloud Application Security solution, (Panoptica is the result of Cisco's incubation engine (Outshift) for new products and markets), and Kevin Ford, Esri’s CISO. They discuss the complexity reduction need that Cloud-Native Application Protection Platforms (CNAPPs) provide. Outshift by Cisco is our CyberWire-X episode sponsor.

To learn more about Cloud-Native Application Protection Platforms, check out Panoptica’s website at https://panoptica.app and consider attending the Cisco Live EMEA in Amsterdam, February 5-8, 2024.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Privacy and data security lawyer, Dominique Shelton Leipzig shares that she has always wanted to be a lawyer, ever since she was a little girl. She talks about what her role is with clients in protecting and managing their data, sometimes adhering to up to 134 different data protection laws for global companies. Learn that not a lot has changed for an African-American woman partner at an Amlaw 100 firm as far as diversity during Dominique's career, and how Dominique suggests young lawyers should address those odds. Our thanks to Dominque for sharing her story with us. 

Learn more about your ad choices. Visit megaphone.fm/adchoices

Ori David from Akamai is sharing their research "Frog4Shell — FritzFrog Botnet Adds One-Days to Its Arsenal." FritzFrog takes advantage of the fact that only internet facing applications were prioritized for Log4Shell patching and targets internal hosts, meaning that a breach of any asset in the network by FritzFrog can expose unpatched internal assets to exploitation. 

The research states "FritzFrog has traditionally hopped around by using SSH brute force, and has successfully compromised thousands of targets over the years as a result." Over the years Akamai has seen more than 20,000 FritzFrog attacks, and 1,500+ victims.

The research can be found here:

• Frog4Shell — FritzFrog Botnet Adds One-Days to Its Arsenal

Learn more about your ad choices. Visit megaphone.fm/adchoices

The FBI kicks Moobot out of small business routers. Sensitive data has been stolen from a state government network. AMC proposes a multi-million-dollar settlement after improperly sharing subscriber’s viewing habits. The U.S. targets an Iranian military ship in the Red Sea with a cyberattack. Lawmakers propose transparency in the use of algorithms in criminal trials. CERT-EU highlights a spear phishing spike. An infamous Zeus and IcedID operator pleads guilty. Our guests are Dr. Josh Brunty, Head Coach, and Brad Wolfenden, Program Director, of US Cyber Games join us to share the details of how their 2024 season is shaping up. And AI comes to video.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

Dr. Josh Brunty, Head Coach, and Brad Wolfenden, Program Director, of US Cyber Games join us to share the details of how the 2024 season is shaping up.

US disrupts Russian hacking campaign that infiltrated home, small business routers: DOJ (ABC News) 

U.S. State Government Network Hacked Via Former Employee Account (Cyber Security News)

CISA Urges Patching of Cisco ASA Flaw Exploited in Ransomware Attacks (SecurityWeek)

AMC to pay $8M for allegedly violating 1988 law with use of Meta Pixel (Ars Technica)

U.S. conducted cyberattack on suspected Iranian spy ship (NBC News)

New bill would let defendants inspect algorithms used against them in court (The Verge)

Hackers Exploit EU Agenda in Spear Phishing Campaigns (Infosecurity Magazine)

Ukrainian Hacker Pleads Guilty for Leading Zeus & IcedID Malware Attacks (GBHackers on security)

OpenAI introduces Sora, its text-to-video AI model  (The Verge) 

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Microsoft highlights adversaries experiments with AI LLMs. A misconfiguration exposes a decades worth of emails. SentinelOne describes Kryptina ransomware as a service. The European Court of Human Rights rules against backdoors. Senator Wyden calls out a location data broker. GoldFactory steals facial scans to bypass bank security. The Glow fertility app exposes the data of twenty five million users. Qakbot returns. Our Guest Rob Boyce from Accenture talks about tailored extortion. And hacking the airport taxi line leads to prison. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

Guest Rob Boyce from Accenture talks about tailored extortion as actors continue to shift to pure data extortion, with old and new tactics.

State-backed hackers are experimenting with OpenAI models (Cyberscoop)

Staying ahead of threat actors in the age of AI (Microsoft)

U.S. Internet Leaked Years of Internal, Customer Emails (Krebs on security)

Kryptina RaaS | From Underground Commodity to Open Source Threat  (SentinelOne)

Backdoors that let cops decrypt messages violate human rights, EU court says (Arstechnica)

A company tracked visits to 600 Planned Parenthood locations for anti-abortion ads, senator says (POLITICO)

Cybercriminals are stealing Face ID scans to break into mobile banking accounts (theregister)

Fertility tracker Glow fixes bug that exposed users’ personal data (TechCrunch)

New Qbot malware variant uses fake Adobe installer popup for evasion (bleepingcomputer)

Duo headed to prison for charging cabbies to skip JFK Airport line with Russian hackers' aid (nydailynews)

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices