Cybersecurity News

Daily Briefing

4 hours ago

Cadet Blizzard attributed to Unit 29155 of Russia’s GRU.

Predator spyware resurfaces. SonicWall vulnerability exploited in the wild.

CyberWire Daily

23 hours ago

U.S. rains on Russia’s fake news parade.

The DOJ disrupts Russia’s Doppelganger. NSA boasts over 1,000 public and private partners. The FBI warns of North Korean operatives launching “complex and elaborate” social engineering attacks. Iran pays the ransom to sure up their banking system. Cisco has disclosed two critical vulnerabilities in its Smart Licensing Utility. A Nigerian man gets five years in prison for Business Email Compromise schemes. Planned Parenthood confirms a cyberattack. Our guests are Sara Siegle and Cam Potts from NSA, Co-Hosts of the new show, No Such Podcast. OnlyFans hackers get more than they bargained for.

Caveat

Sep 5, 2024

UK pivots on its AI strategy by significantly cutting funding investments.

Research finds that China is growing its social media influence operations ahead of the US election.

Daily Briefing

Sep 5, 2024

US government accuses Russia of conducting influence operations focused on the 2024 US presidential election.

Iran paid at least $3 million in ransom following attack on banking system. North Korean social engineering attacks target the cryptocurrency sector.

Story

Sep 5, 2024

CertByte: Project Management Professional (PMP)® by Project Management Institute®

On this edition of CertByte, we discuss a question from N2K’s Project Management Professional (PMP)® practice test. As your news-to-knowledge partner, N2K strives to advance your professional growth while bringing you the industry news and trends that help you stay a step ahead. We recently launched CertByte, our new bi-weekly segment on the CyberWire Daily podcast, and these companion articles to support your certification journey and fast-track your career growth in IT, cybersecurity, and project management. As your host, I’ll share a practice question from N2K’s suite of industry-leading content and a study tip to increase your confidence and readiness on exam day.

Threat Vector

Sep 5, 2024

Building Bulletproof Security

In this episode of Threat Vector, host David Moulton, Director of Thought Leadership at Unit 42, engages with Chris Tillett, Product Management and R&D expert, to uncover the deep-seated challenges in cybersecurity. The discussion centers around the human factors that make security difficult, the complexities of implementing conditional MFA, and the often-overlooked importance of a strong security culture. Chris shares his insights on how organizations can balance the need for robust security with the realities of human behavior and operational demands, providing valuable takeaways for cybersecurity professionals aiming to enhance their security posture.

Caveat

Sep 5, 2024

The battle between tech giants and legal systems.

This week, Ben delves into the escalating clash between Elon Musk and a Brazilian judge, centered around the contentious issue of content moderation on X/Twitter. Meanwhile, Dave explores a looming challenge to Section 230 immunity, which could redefine the legal landscape for online platforms.

Hacking Humans

Sep 5, 2024

Illusions & ill-intent.

Maria Varmazis, host of N2K's daily space show T-Minus, joins Dave and Joe to share the story of how the ease of registering an LLC in Colorado has led to a surge in fraudulent businesses. She discusses how residents receiving suspicious mail addressed to fake LLCs registered at their homes are overwhelming the state's Secretary of State with thousands of complaints. Joe's story is on how scammers used a seaside hotel and former bank offices on the Isle of Man to defraud victims in China out of millions of dollars. Dave's story follows a phishing campaign where attackers impersonated HR departments by sending fake mid-year employee engagement surveys to steal Microsoft Office 365 credentials. Our catch of the day comes from Mitch, who received a scam email claiming to be an invitation to join the "Great Illuminati Brotherhood." The email promises wealth, fame, and protection, urging the recipient to contact them to solve financial problems and join the so-called "Elite Family."

CyberWire Daily

Sep 4, 2024

From secure to clone-tastic.

Researchers find Yubikeys vulnerable to cloning. Google warns of a serious zero-day Android vulnerability. Zyxel releases patches for multiple vulnerabilities. D-Link urges customers to retire unsupported vulnerable routers. Hackers linked to Russia and Belarus target Latvian websites. The Federal Trade Commission (FTC) reports a sharp rise in Bitcoin ATM-related scams. Dutch authorities fine Clearview AI over thirty million Euros over GDPR violations. Threat actors are misusing the MacroPack red team tool to deploy malware. CISA shies away from influencing content moderation. Our guest is George Barnes, Cyber Practice President at Red Cell Partners and Fmr. Deputy Director of NSA discussing his experience at the agency and now in the VC world. Unauthorized Wi-Fi on a Navy warship Leads to Court-Martial.

Business

Sep 4, 2024

Cisco to acquire Robust Intelligence. Omnisient raises $7.5 million in a Series A round.

Cisco to acquire Robust Intelligence. Omnisient raises $7.5 million in a Series A round.

Daily Briefing

Sep 4, 2024

Clearview AI fined €30 million for alleged GDPR violations.

Victims lost $110 million to Bitcoin ATM scams in 2023. Google patches Android zero-day.

Microsoft

Sep 4, 2024

Ryen Macababbad on How Security Can Empower Productivity

Ryen Macababbad, Principal Security Program Manager at Microsoft joins Nic Fillingham on this week's episode of The BlueHat Podcast. Ryen discusses their career journey, including the return to Microsoft after working in security architecture and customer trust engineering. Ryen shares insights from their time at Hacker Summer Camp 2024 in Las Vegas, emphasizing the importance of creating frictionless security measures that don't hinder productivity. They explain that when security becomes a barrier, users will find workarounds, potentially compromising security. The conversation touches on the evolving relationship between security and productivity teams, highlighting the need for security to be an enabler rather than an obstacle.

Load More