The CyberWire Daily Podcast 5.31.22
Ep 1589 | 5.31.22

Potential cyber threats to agriculture. Cyber phases of Russia’s hybrid war. REvil prosecution at a stand (and it’s the Americans’ fault, say Russian sources). Microsoft mitigates Follima.

Show Notes

Sanctions, blockades, and their effects on the world economy. Western nations remain on alert for Russian cyber attacks. REvil prosecution has reached a dead end. Microsoft issues mitigations for a recent zero-day. John Pescatore’s Mr. Security Answer Person is back, looking at authentication. Joe Carrigan looks at new browser vulnerabilities. Notes from the underworld.

Selected reading.

In big bid to punish Moscow, EU bans most Russia oil imports (AP NEWS) 

EU, resolving a deadlock, in deal to cut most Russia oil imports (Reuters

The E.U.’s embargo will bruise Russia’s oil industry, but for now it is doing fine. (New York Times) 

Russia’s Black Sea Blockade Will Turbocharge the Global Food Crisis (Foreign Policy) 

Russia’s Invasion Unleashes ‘Perfect Storm’ in Global Agriculture (Foreign Policy) 

‘War in Ukraine Means Hunger in Africa’ (Foreign Policy)

Afghanistan’s Hungry Will Pay the Price for Putin’s War (Foreign Policy)

Remote bricking of Ukrainian tractors raises agriculture security concerns (CSO Online)

Major supermarkets 'uniquely vulnerable' as Russian cyber attacks rise (ABC)

Italy warns organizations to brace for incoming DDoS attacks (BleepingComputer)

Whitepaper - PIPEDREAM: CHERNOVITE's Emerging Malware Targeting Industrial Environments (Dragos).

Experts believe that Russian Gamaredon APT could fuel a new round of DDoS attacks (IT Security News) 

Putin horror warning over 'own goal' attack on UK coming back to haunt Kremlin (Express.co.uk) 

Putin plot: UK hospitals at risk of chilling ‘sleeper cell’ attack by Russia (Express) 

Will Russia Launch a New Cyber Attack on America? (The National Interest) 

Hackers wage war on Russia’s largest bank (The Telegraph) 

REvil prosecutions reach a 'dead end,' Russian media reports (CyberScoop) 

Microsoft Office zero-day "Follina"—it’s not a bug, it’s a feature! (It's a bug) (Malwarebytes Labs).

Microsoft Word struck by zero-day vulnerability (Register) 

Clop ransomware gang is back, hits 21 victims in a single month (BleepingComputer)

Conti ransomware explained: What you need to know about this aggressive criminal group (CSO Online)