Podcast bait, malware switch.

17 hours ago

Podcast bait, malware switch.

Joshua Miller from Proofpoint is discussing their work on "Best Laid Plans: TA453 Targets Religious Figure with Fake Podcast Invite Delivering New BlackSmith Malware Toolset." Proofpoint identified Iranian threat actor TA453 targeting a prominent Jewish figure with a fake podcast interview invitation, using a benign email to build trust before sending a malicious link. The attack attempted to deliver new malware called BlackSmith, containing a PowerShell trojan dubbed AnvilEcho, designed for intelligence gathering and exfiltration. This malware consolidates all of TA453's known capabilities into a single script rather than the previously used modular approach.

Research Saturday

Podcast bait, malware switch.

17 hours ago

Podcast bait, malware switch.

Joshua Miller from Proofpoint is discussing their work on "Best Laid Plans: TA453 Targets Religious Figure with Fake Podcast Invite Delivering New BlackSmith Malware Toolset." Proofpoint identified Iranian threat actor TA453 targeting a prominent Jewish figure with a fake podcast interview invitation, using a benign email to build trust before sending a malicious link. The attack attempted to deliver new malware called BlackSmith, containing a PowerShell trojan dubbed AnvilEcho, designed for intelligence gathering and exfiltration. This malware consolidates all of TA453's known capabilities into a single script rather than the previously used modular approach.

Research Saturday

Cybersecurity News

Week that Was

18 hours ago

Microsoft disrupts spearphishing infrastructure belonging to Russia's FSB.

Critical NVIDIA flaw affects AI applications. Governor Newsom vetoes controversial AI safety bill.

CyberWire Daily

Oct 4, 2024

Caught red-handed.

Interpol arrests eight in an international cybercrime crackdown. A MedusaLocker variant targets financial organizations. Cloudflare mitigates a record DDoS attempt. Insights from the Counter Ransomware Initiative summit. Fin7 uses deepnudes as a lure for malware. Researchers discovered critical vulnerabilities in DrayTek routers. CISA issues urgent alerts for products from Synacor and Ivanti. A former election official gets nine years in prison for a voting system data breach. Microsoft and the DOJ seize domains used by Russia’s ColdRiver hacking group. On our Industry Voices segment, we are joined by Eric Olden, Founder and CEO of Strata Identity. to learn how the modern enterprise can orchestrate the 7 A's of identity security to achieve zero trust. Harvard students demonstrate glasses that can see through your privacy.

Daily Briefing

Oct 4, 2024

Microsoft disrupts spearphishing infrastructure belonging to Russia's FSB.

Critical Ivanti flaw is being actively exploited. The Netherlands blames state-sponsored actor for police network breach.

Caveat

Oct 3, 2024

Governor Newsom vetoes California AI bill. EU begins drafting the AI Act’s code of practice.

Governor Newsom vetoes California AI bill. EU begins drafting the AI Act’s code of practice.

Special Editions

Oct 3, 2024

The Global Race for the 21st Century

In this episode, Dmitri Alperovitch discusses his book World on the Brink: How America Can Beat China in the Race for the Twenty-First Century with host Ben Yelin. Alperovitch highlights the rising tensions between the U.S. and China, focusing on Taiwan as a critical flashpoint that could ignite a new Cold War. He shares insights on the strategies America must adopt to maintain its status as the world’s leading superpower while addressing the challenges posed by China. By examining both strengths and weaknesses, as well as providing a timely blueprint for navigating the complexities of global relations in the 21st century.

Threat Vector

Oct 3, 2024

The State of OT Security Part 1: How to Stay Safe in World where OT and IT are seamlessly integrated

In this episode of Threat Vector, David Moulton, Director of Thought Leadership at Palo Alto Networks, hosts cybersecurity experts Qiang Huang, VP of Product Management for Cloud Delivered Security Services, and Michela Menting, Senior Research Director in Digital Security at ABI Research. They discuss the pressing challenges of securing Operational Technology (OT) environments, which are increasingly vulnerable to ransomware, nation-state attacks, and remote access breaches due to the digital transformation in industries like manufacturing and energy. Learn how IT and OT convergence is reshaping cybersecurity strategies and what actions organizations must take to safeguard critical infrastructure. Tune in for expert insights on the complexities of securing OT networks, proactive security measures, and the impacts of cyberattacks on industrial operations.

Microsoft

Oct 2, 2024

Behind the Scenes and Best Practices for Submitting to MSRC with Jim Hull

Jim Hull, Program Manager at MSRC joins Nic Fillingham and Wendy Zenone on this week's episode of The BlueHat Podcast to share insights into his role in reviewing vulnerability reports and managing cases. They dive into the submission process, detailing the types of reports accepted by MSRC and what happens after a researcher submits a potential vulnerability. The conversation also highlights the accessibility of the portal for anyone interested in identifying security issues, whether they are professionals or hobbyists. Jim explains the importance of providing clear proof of concept when submitting a vulnerability and walks through the steps MSRC takes to triage, reproduce, and resolve reports.

CSO Perspectives

Oct 2, 2024

Election Propaganda Part 1: How does election propaganda work?

Rick Howard discusses defensive measures against propaganda.

CSO Perspectives

Oct 2, 2024

Election propaganda part 1: How does election propaganda work?

Rick Howard discusses defensive measures against propaganda.

Marketing

Oct 2, 2024

Taylor Swift. Cookware. Threat Research & Marketing.

What do Taylor Swift and Telegram have in common? Surprisingly, they are both prime targets for today’s most sophisticated scammers. In this episode, we chat with Nati Tal, Head of Guardio Labs and Sharon Blatt Cohen, Head of Marketing Communications from Guardio, who reveal how deep-fake ads featuring Taylor Swift are used to sell fake cookware, and how they went undercover on Telegram to discover just how easy it is to launch a full-scale phishing scam in less than a day. From pop culture to cutting-edge cybersecurity, this episode takes you behind the scenes of the dark world of online threats and shows how Guardio is staying one step ahead of scammers...and marketing that fact! Buckle up—this one’s a wild ride!

CyberWire Daily

Oct 1, 2024

Breaking news blocked.

A global news agency suffers a cyberattack. CISA and the FBI provide guidance on cross site scripting attacks. A Texas health system diverts patients following a ransomware attack. Western Digital patches a critical vulnerability in network attached storage devices. California passes a law protecting domestic abuse survivors from being tracked. Verizon and PlayStation each suffer outages. CISA responds to critiques from the OIG. T-Mobile settles with the FCC over multiple data breaches. The DOJ indicts a Minnesota man on charges of selling counterfeit software license keys. On our Industry Voices segment kicking off Cybersecurity Awareness Month, we are joined by Chad Raduege, Executive Director of the Oklahoma Cyber Innovation Institute at The University of Tulsa, discussing the Institute’s K-12 outreach initiatives. A Crypto Criminal Stretches His Limits—And His Legs.

Daily Briefing

Oct 1, 2024

Major Texas hospital system hit by ransomware.

North Korea's Kimsuky breaches German weapons manufacturer. T-Mobile will pay $31.5 million over data breaches.

Load More