Today we have Damon Rouse, Threat Intelligence from Lumen's Black Lotus Labs, discussing their work on "The infrastructure quartermaster: inside a China-nexus state enablement model." Black Lotus Labs identified a China-nexus cyber infrastructure provider, dubbed a “quartermaster,” that supplies reconnaissance, proxy routing, and obfuscation services to Chinese cyber espionage actors.
Its interconnected systems, including QScan and Fast Labyrinth, help identify high-value targets, conceal malicious traffic, and support potential exploitation of government, military, research, and critical infrastructure networks. Researchers warn that this shared infrastructure makes traditional IP-based defenses less effective and recommend following CISA and NCSC guidance, reducing external attack surfaces, and keeping routers, firewalls, and IoT devices updated. Research Saturday
Today we have Damon Rouse, Threat Intelligence from Lumen's Black Lotus Labs, discussing their work on "The infrastructure quartermaster: inside a China-nexus state enablement model." Black Lotus Labs identified a China-nexus cyber infrastructure provider, dubbed a “quartermaster,” that supplies reconnaissance, proxy routing, and obfuscation services to Chinese cyber espionage actors.
Its interconnected systems, including QScan and Fast Labyrinth, help identify high-value targets, conceal malicious traffic, and support potential exploitation of government, military, research, and critical infrastructure networks. Researchers warn that this shared infrastructure makes traditional IP-based defenses less effective and recommend following CISA and NCSC guidance, reducing external attack surfaces, and keeping routers, firewalls, and IoT devices updated. Research Saturday
Cybersecurity News
Week that Was
CyberWire Daily
Daily Briefing
CyberWire Daily
Caveat
Daily Briefing
AI Security Brief
Caveat
Hacking Humans
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow up, including a chicken update and a little Greek vocabulary. Dave explores new tools from FINRA designed to help investors research the markets, assess their vulnerability to financial fraud, and practice recognizing common scam tactics before real money is at stake. Joe looks at Apate, an Australian startup using AI agents to pose as potential scam victims, waste fraudsters’ time, and gather intelligence that can help researchers and security teams better understand and disrupt scams. Maria covers new approaches to cybersecurity awareness and personal cyber readiness, exploring how we can move beyond traditional awareness campaigns and help people better protect themselves online. Our Catch of the Day comes from Anthony, who received a convincing-looking scam email about his trademark application that uses publicly available information and a fake mandatory verification appointment to pressure him into calling a fraudulent number. 
CyberWire Daily
Business
Daily Briefing
