Cybersecurity News

Research Saturday

Sep 7, 2024

The playbook for outpacing China.

This week, N2K's very own Brandon Karpf sits down with Kevin Lentz, Team Leader of the Cyber Pacific Project at the Global Disinformation Lab, and they discuss the recent threatcasting report "Cyber Competition in the Indo-Pacific Gray Zone 2035." This report, developed using the Threatcasting Method, examines how the U.S. and Indo-Pacific allies can coordinate their cyber defense efforts in response to future competition with China. It presents findings, trends, and recommendations based on twenty-five scenarios simulated by a cross-functional group of experts to anticipate and address emerging threats over the next decade.

Week that Was

Sep 7, 2024

Cadet Blizzard attributed to Unit 29155 of Russia’s GRU. Brazil's Supreme Court upholds ban on X.

Predator spyware resurfaces. US government accuses Russia of conducting influence operations focused on the 2024 US presidential election.

CyberWire Daily

Sep 6, 2024

Blizzard warning: Russia’s GRU unleashes new cyber saboteurs.

Cadet Blizzard is part of Russia’s elite GRU Unit. Apache releases a security update for its open-source ERP system. SonicWall has issued an urgent advisory for a critical vulnerability. Researchers uncover a novel technique exploiting Linux’s Pluggable Authentication Modules. Google’s kCTF team has discloses a critical security vulnerability affecting the Linux kernel’s netfilter component. Predator spyware has resurfaced. US health care firm Confidant Health exposes 5.3 terabytes of sensitive health information. Dealing with the National Public Data breach. On our Solution Spotlight: Mary Haigh, Global CISO of BAE Systems, speaks with N2K's Simone Petrella about moving beyond the technical to build an effective cybersecurity team. An AI music streaming scheme strikes a sour note.

Daily Briefing

Sep 6, 2024

Cadet Blizzard attributed to Unit 29155 of Russia’s GRU.

Predator spyware resurfaces. SonicWall vulnerability exploited in the wild.

CyberWire Daily

Sep 5, 2024

U.S. rains on Russia’s fake news parade.

The DOJ disrupts Russia’s Doppelganger. NSA boasts over 1,000 public and private partners. The FBI warns of North Korean operatives launching “complex and elaborate” social engineering attacks. Iran pays the ransom to sure up their banking system. Cisco has disclosed two critical vulnerabilities in its Smart Licensing Utility. A Nigerian man gets five years in prison for Business Email Compromise schemes. Planned Parenthood confirms a cyberattack. Our guests are Sara Siegle and Cam Potts from NSA, Co-Hosts of the new show, No Such Podcast. OnlyFans hackers get more than they bargained for.

Caveat

Sep 5, 2024

UK pivots on its AI strategy by significantly cutting funding investments.

Research finds that China is growing its social media influence operations ahead of the US election.

Daily Briefing

Sep 5, 2024

US government accuses Russia of conducting influence operations focused on the 2024 US presidential election.

Iran paid at least $3 million in ransom following attack on banking system. North Korean social engineering attacks target the cryptocurrency sector.

Story

Sep 5, 2024

CertByte: Project Management Professional (PMP)® by Project Management Institute®

On this edition of CertByte, we discuss a question from N2K’s Project Management Professional (PMP)® practice test. As your news-to-knowledge partner, N2K strives to advance your professional growth while bringing you the industry news and trends that help you stay a step ahead. We recently launched CertByte, our new bi-weekly segment on the CyberWire Daily podcast, and these companion articles to support your certification journey and fast-track your career growth in IT, cybersecurity, and project management. As your host, I’ll share a practice question from N2K’s suite of industry-leading content and a study tip to increase your confidence and readiness on exam day.

Threat Vector

Sep 5, 2024

Building Bulletproof Security

In this episode of Threat Vector, host David Moulton, Director of Thought Leadership at Unit 42, engages with Chris Tillett, Product Management and R&D expert, to uncover the deep-seated challenges in cybersecurity. The discussion centers around the human factors that make security difficult, the complexities of implementing conditional MFA, and the often-overlooked importance of a strong security culture. Chris shares his insights on how organizations can balance the need for robust security with the realities of human behavior and operational demands, providing valuable takeaways for cybersecurity professionals aiming to enhance their security posture.

Caveat

Sep 5, 2024

The battle between tech giants and legal systems.

This week, Ben delves into the escalating clash between Elon Musk and a Brazilian judge, centered around the contentious issue of content moderation on X/Twitter. Meanwhile, Dave explores a looming challenge to Section 230 immunity, which could redefine the legal landscape for online platforms.

Hacking Humans

Sep 5, 2024

Illusions & ill-intent.

Maria Varmazis, host of N2K's daily space show T-Minus, joins Dave and Joe to share the story of how the ease of registering an LLC in Colorado has led to a surge in fraudulent businesses. She discusses how residents receiving suspicious mail addressed to fake LLCs registered at their homes are overwhelming the state's Secretary of State with thousands of complaints. Joe's story is on how scammers used a seaside hotel and former bank offices on the Isle of Man to defraud victims in China out of millions of dollars. Dave's story follows a phishing campaign where attackers impersonated HR departments by sending fake mid-year employee engagement surveys to steal Microsoft Office 365 credentials. Our catch of the day comes from Mitch, who received a scam email claiming to be an invitation to join the "Great Illuminati Brotherhood." The email promises wealth, fame, and protection, urging the recipient to contact them to solve financial problems and join the so-called "Elite Family."

CyberWire Daily

Sep 4, 2024

From secure to clone-tastic.

Researchers find Yubikeys vulnerable to cloning. Google warns of a serious zero-day Android vulnerability. Zyxel releases patches for multiple vulnerabilities. D-Link urges customers to retire unsupported vulnerable routers. Hackers linked to Russia and Belarus target Latvian websites. The Federal Trade Commission (FTC) reports a sharp rise in Bitcoin ATM-related scams. Dutch authorities fine Clearview AI over thirty million Euros over GDPR violations. Threat actors are misusing the MacroPack red team tool to deploy malware. CISA shies away from influencing content moderation. Our guest is George Barnes, Cyber Practice President at Red Cell Partners and Fmr. Deputy Director of NSA discussing his experience at the agency and now in the VC world. Unauthorized Wi-Fi on a Navy warship Leads to Court-Martial.

Load More