A ceasefire in Ukraine and continued ISIS trumpeting of atrocities brings "hybrid warfare" to the forefront of analysts' minds. Hybrid warfare prominently employs non-state fighters and hakctivists, and what its kinetic and non-kinetic features share is deniability. Analysts expect to see a lot more of it.

The Chinese hack that turned Forbes' "Thought of the Day" into a watering hole seems to have been both technically clever and crafted with clear targets in mind.

Spoof PayPal phishing sites are taken down — many of them were very well crafted, another sign that the crooks have upped their design game.

Ransomware — in this case Simplocker — continues to appear in enhanced, increasingly dangerous forms. There are fresh expectations that we'll soon see a major outbreak among mobile devices.

More dodgy apps are found in Google Play.

The Anthem hack draws attention to the attack surface employees inevitably present. Some companies respond with social engineering drills.

NIST has released its draft guidance for industrial control system security.

The cryptocurrency community takes a stab a developing its own sector standards.

Assured Information Security demonstrates a cryptographic approach to making software (inter alia malware) tougher to reverse engineer.

In the US, the White House proceeds with plans for the CTIIC, intended to connect private sector cyber threat intelligence with the classified world's. Industry reaction is broadly skeptical: Didn't the NCCIC have that mission? Who's going to bear the cost of all that threat reporting? What about privacy? So the Administration still has some explaining to do.

A note to our readers: the CyberWire staff will take a break on Presidents' Day, this coming Monday. We'll resume regular publication on Tuesday, February 17.