Hospitals on the hotplate after ransomware attacks.

Ransomware targets healthcare organizations. WildCard deploys SysJoker malware. DPRK cryptocurrency theft. The status of Ukraine's IT Army. A Russian news outlet unmasks Killmilk. Our Industry Insights guest today is Guy Bejerano, CEO and Co-Founder of SafeBreach, discussing risk reduction in action. And there’s discord on dark markets about large language models.

CyberWire Guest

Our Industry Insights guest today is Guy Bejerano, CEO and Co-Founder of SafeBreach, discussing risk reduction in action: the future of BAS and continuous threat exposure management.

You can connect with Guy on LinkedIn and find out more about SafeBreach on their website.

Giving Tuesday

Our team offers up some suggestions for Giving Tuesday should you feel inclined to join us in sharing your time, talents or treasures on this day of giving back. 

Arizona Cyber Initiative

Association for Women in Science

BlackGirlsHack

Cyber Guild

Exceptional Minds

G{Code}

Girls Who Code

Lurie Children's Hospital

NFAR

Melwood

Tech Kids Unlimited

WiCyS

Women of Cyberjutsu

Selected Reading

Cyberattack on US hospital owner diverts ambulances from emergency rooms in multiple states (CNN) 

Portneuf Medical Center experienced ransomware attack. Hospital is adapting with pencils and paper (East Idaho News)

Ardent Health Services Reports Information Technology Security Incident (BusinessWire)

Vanderbilt University Medical Center investigating cybersecurity incident (The Record)

Criminal hacking group breaches data, including Premier Health (WDTN 2 News)

Global Threat Intelligence Report (Blackberry)

ISRAEL-HAMAS WAR SPOTLIGHT: SHAKING THE RUST OFF SYSJOKER (Check Point Research)

Operation Electric Powder – Who is targeting Israel Electric Company? (ClearSky Cyber Security)

New Rust-based SysJoker backdoor linked to Hamas hackers (Bleeping Computer)

WildCard: The APT Behind SysJoker Targets Critical Sectors in Israel (Intezer)

DPRK Crypto Theft | macOS RustBucket Droppers Pivot to Deliver KandyKorn Payloads (SentinelOne) 

Leader of pro-Russia DDoS crew Killnet 'unmasked' by Russian state media (The Register) 

Ukraine’s Volunteer IT Army Confronts Tech, Legal Challenges (CEPA)

Cybercriminals can’t agree on GPTs (Sophos)