The CyberWire Daily

Bryce Kennedy, President of the Association of Commercial Space Professionals (ACSP), is sharing what is on horizon in space law. Bryce is also a space lawyer and a regular contributor to our T-Minus daily space podcast right here on the N2K podcast network.

You can hear more from the T-Minus space daily show here.

While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney. 

A companion weekly newsletter is available CyberWire Pro members on the CyberWire's website. If you are a member, make sure you subscribe to receive our weekly wrap-up of privacy, policy, and research news, focused on incidents, techniques, tips, compliance, rights, trends, threats, policy, and influence ops delivered to you inbox each Thursday.

Got a question you'd like us to answer on our show? You can send your audio file to [email protected]. Hope to hear from you.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Atlassian issues critical updates. CISA and the FBI warn of AndroxGh0st. A GPU vulnerability hits major manufacturers. A Foxconn subsidiary in Taiwan gets hacked. Australians suffer breached credit cards through credential stuffing. A parade of horrible hackers and scammers. CISO accountability is highlighted at ShmooCon. Cybersecurity VC funding plummets. On the Learning Layer, N2K’s Executive Director of Product Innovation Sam Meisenberg lets us in on an A+ tutoring session. Don’t ask ChatGPT to handle your Amazon product listings. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

On the Learning Layer with N2K’s Executive Director of Product Innovation Sam Meisenberg lets us in on an A+ tutoring session he held with Jaden Dicks.

Atlassian’s Confluence Data Center and Server Affected by Critical RCE Vulnerability, CVE-2023-22527: Patch Now (SOCRadar)

FBI, CISA warn of AndroxGh0st botnet for victim identification and exploitation (Security Affairs)

A new vulnerability affecting Apple, AMD, and Qualcomm GPUs could expose AI data (TechSpot)

Taiwan’s Foxconn subsidiary faces cyberattack (Taiwan News)

15,000 Aussies Affected After Binge, The Iconic Hacked (Pedestrian)

Hackers post disturbing videos to online forum used by UC Irvine students (ABC7)

Heartless scammers prey on hundreds of lost pet owners, demanding ransoms or else… (Bitdefender)

As hacks worsen, SEC turns up the heat on CISOs (TechCrunch)

Cybersecurity Startup Funding Hits 5-Year Low, Drops 50% From 2022 (Crunchbase)

Amazon Is Selling Products With AI-Generated Names Like "I Cannot Fulfill This Request It Goes Against OpenAI Use Policy" (Futurism)

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Ivanti products are under active zero-day exploitation. Phemedrone is a new open-source info-stealer. Bishop Fox finds exposed SonicWall firewalls. GitLab and VMware patch critical vulnerabilities. The Secret Service foils a phishing scam. Europol shuts down a cryptojacking campaign. Ransomware hits a Majorca municipality. RUSI looks at ransomware. Ben Yelin explains the New York Times going after OpenAI over the data scraping. And the sad case of an Ohio lottery winner. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

Guest and partner Ben Yelin joins us today to discuss “The Most Critical Elements of the FTC’s Health Breach Rulemaking.” Ben is the Program Director for Public Policy & External Affairs at the University of Maryland Center for Health and Homeland Security and Co-Host of N2K’s Caveat Podcast.

Ivanti Connect Secure zero-days now under mass exploitation (Bleeping Computer)

Windows SmartScreen flaw exploited to drop Phemedrone malware (Bleeping Computer)

Over 178,000 SonicWall next-generation firewalls (NGFW) online exposed to hack (Security Affairs)

GitLab Fixes Password Reset Bug That Allows Account Takeover (Security Boulevard)

Patches Available for a Critical Vulnerability in VMware Aria Automation: CVE-2023-34063 (Malware News)

US court docs expose fake antivirus renewal phishing tactics (Bleeping Computer)

Hacker spins up 1 million virtual servers to illegally mine crypto (Bleeping Computer)

Ransomware gang demands €10 million after attacking Spanish council (The Record)

Ransomware: Victim Insights on Harms to Individuals, Organisations and Society (Royal United Services Institute)

Cybersecurity incident delays payouts for big Ohio Lottery winners (Beacon Journal)

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

In this special edition of Solution Spotlight, N2K President, Simone Petrella is talking with ISC2 CEO Clar Rosso about putting a dent in the cybersecurity workforce gap through empowerment, breaking down barriers and expanding DE&I initiatives.

Learn more about your ad choices. Visit megaphone.fm/adchoices

In this encore episode of CyberWire-X, N2K’s CSO, Chief Analyst, and Senior Fellow, Rick Howard, is joined by guest Rohit Dhamankar, Fortra's Vice President of Product Strategy, and Hash Table member Steve Winterfeld, Akamai's Advisory CISO to discuss CISO initiatives such as vendor consolidation, automation, and attack surface management as a way to determine if it’s possible to achieve both increased security maturity and decreased operational load. This session covers common mistakes when adopting security technologies, including the pros and cons of AI, and how to better collaborate together.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Vice President of Marketing, Kathleen Booth, shares her career path from political science and international development to marketing for a cybersecurity company. Early dreams of acting morphed into goals of making the world a better place. Chief marketer and podcaster Kathleen is doing just that. She shares how proving your worth can lead to success. Listen for Kathleen's advice on getting your foot in the door. Our thanks to Kathleen for sharing her story with us. 

Learn more about your ad choices. Visit megaphone.fm/adchoices

Ryan Westman, Senior Manager, Threat Intelligence, eSentire's Threat Response Unit (TRU), is discussing their research "Two Russian-speaking cyber gangs attack employees from 23 different companies." They are using malicious Google ads, promoting popular business software such as Zoom, Slack, and Adobe.

The customers targeted are companies in the manufacturing, software, legal, retail and healthcare industries. The attacking threat actors belong to the Russian-speaking Malware-as-a-Service (MaaS) groups called BatLoader and FakeBat.

The research can be found here:

• Two Competing, Russian-Speaking Cybercrime Groups Attack Employees from 23 Companies in the Manufacturing, Software, Legal, Retail, and Healthcare Sectors Using Malicious Google Ads

Learn more about your ad choices. Visit megaphone.fm/adchoices

The Feds look to cast a wider hiring net. Legislators focus on deepfakes. Cookie stealers bypass MFA on Google accounts. A Fast food hiring chat bot got hacked. Medusa casts her gaze toward extortion. Akira ransomware is active in Finland. GitLab patches critical vulnerabilities. Bosch thermostats are vulnerable to some hot firmware. CSAM vendors’ crypto sophistication grows. CISA released ICS advisories. On our Solution Spotlight, N2K’s Simone Petrella speaks with Kim Jones, Director of Intuit's CyberCRAFT team, about the SEC's heightened focus on cybersecurity. And a little listener feedback, Karaoke style.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

On our Solution Spotlight, N2K’s Simone Petrella discusses a possible hurdle with Kim Jones, Director of Intuit's CyberCRAFT team. They talk about the SEC's heightened focus on cybersecurity.

An analysis of cyberattacks against Danish energy infrastructure. Cryptomining campaign targets weak SSH passwords. (CyberWire)

White House moves to ease education requirements for federal cyber contracting jobs (CyberScoop)

State Legislators Tighten A.I. Rules to Combat Deceptive Election Ads (New York Times)

Info-stealers can steal cookies for permanent access to your Google account (Malwarebytes)

Hackers Break into AI Hiring Chatbot, Could Hire and Reject Fast Food Applicants (404 Media)

Medusa Ransomware Turning Your Files into Stone (Unit 42 by Palo Alto Networks)

Akira ransomware attackers are wiping NAS and tape backups  (Help Net Security)

Urgent: GitLab Releases Patch for Critical Vulnerabilities - Update ASAP (The Hacker News)

Vulnerability Puts Bosch Smart Thermostats at Risk of Compromise (Infosecurity Magazine)

Child Abusers Are Getting Better at Using Crypto to Cover Their Tracks (WIRED)

CISA Releases Nine Industrial Control Systems Advisories (CISA)

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

A zero-day hits Ivanti VPN customers. CISA highlights an active MS Sharepoint Server flaw. Cisco patches a critical vulnerability. Atomic Stealer gets updates. Sensitive school emergency planning documents are exposed online. The FCC reports on risky communications equipment. The White House will introduce new cybersecurity requirements for hospitals. Mandiant explains their X-Twitter hack. Our guest is Palo Alto Networks’ Unit 42’s David Moulton, host of the new Threat Vector podcast. And we are shocked - shocked! - to learn that an online sex for money scheme is a scam. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

Guest David Moulton from Palo Alto Networks joins us to talk about Threat Vector. It’s Unit 42’s segment turned podcast on the N2K media network.

Ivanti customers urged to patch vulnerabilities allegedly exploited by Chinese state hackers (The Record)

CISA Urges Patching of Exploited SharePoint Server Vulnerability (SecurityWeek)

Critical Cisco Unity Connection flaw gives attackers root privileges. Patch now! (CVE-2024-20272) (Help Net Security)

Atomic Stealer Gets an Upgrade - Targeting Mac Users with Encrypted Payload (The Hacker News)

FCC's Reimbursement Program shows progress in removing national security risks from communication networks (Industrial Cyber)

After Barrage of Hacks, Hospitals Will Face New Federal Cybersecurity Rules Tied to Funding (The Messenger)

US School Shooter Emergency Plans Exposed in a Highly Sensitive Database Leak (WIRED)

Mandiant’s X Account Was Hacked in Brute-Force Password Attack (Infosecurity Magazine)

Believing they would be paid a fortune for having sex with women, hundreds of Indian men scammed out of cash  (Graham Cluely)

To get more information on Medusa ransomware, listen to this episode of Threat Vector.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices

The World Economic Forum names AI a top global threat. The SEC suffers social media breach. The FTC settles with a data broker over location data sales. A massive data leak hits Brazil. Chinese researchers claim and AirDrop hack. A major real estate firm suffers data theft. Pikabot loader is seeing use by spammers. Ukraine’s Blackhit hits Russia’s M9 Telecom. Stuxnet methods are revealed. A Patch Tuesday rundown. Our guest is ​​Tim Eades from the Cyber Mentor Fund to discuss the growing prevalence of restoration as a part of incident response. And Hackers could screw up a wrench.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

Guest ​​Tim Eades from Cyber Mentor Fund joins us to discuss the growing prevalence of restoration as a part of incident response. 

AI-powered misinformation is the world's biggest short-term threat, Davos report says (AP News)

NSA: Benefits of generative AI in cyber security will outweigh the bad (IT Pro)

SEC account on X ‘compromised’ and regulator has not approved bitcoin ETFs (MarketWatch)

SEC did not have 2FA enabled: X safety team on fake Bitcoin ETF post (Cointelegraph)

FTC Order Prohibits Data Broker X-Mode Social and Outlogic from Selling Sensitive Location Data (Federal Trade Commission)

Entire population of Brazil possibly exposed in massive data leak (Security Affairs)

China says state-backed experts crack Apple's AirDrop (Digital Journal)

Fidelity National Financial says hackers stole data on 1.3 million customers (TechCrunch)

Water Curupira Hackers Launch Pikabot Malware Attack on Windows Machine (GBHackers On Security)

Ukrainian “Blackjack” Hackers Take Out Russian ISP (Infosecurity Magazine)

Ukraine is on the front lines of global cyber security (Atlantic Council) 

Dutch Engineer Used Water Pump to Get Billion-Dollar Stuxnet Malware Into Iranian Nuclear Facility: Report (SecurityWeek)

New research paper explores post-quantum cryptography for critical infrastructure cybersecurity (Industrial Cyber)

AI Helps U.S. Intelligence Track Hackers Targeting Critical Infrastructure (Wall Street Journal)

Hewlett Packard Enterprise nears $13 billion deal to buy Juniper Networks (Reuters)

January Patch Tuesday: New year, more Windows bugs (The Register)

Cybersecurity Advisory: Apache Struts Vulnerability CVE-2023-50164 (Uptycs)

Hackers can infect network-connected wrenches to install ransomware (Ars Technica) 

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices