Blizzard warning: Russia’s GRU unleashes new cyber saboteurs.

Cadet Blizzard is part of Russia’s elite GRU Unit. Apache releases a security update for its open-source ERP system. SonicWall has issued an urgent advisory for a critical vulnerability. Researchers uncover a novel technique exploiting Linux’s Pluggable Authentication Modules. Google’s kCTF team has discloses a critical security vulnerability affecting the Linux kernel’s netfilter component. Predator spyware has resurfaced.  US health care firm Confidant Health exposes 5.3 terabytes of sensitive health information. Dealing with the National Public Data breach. On our Solution Spotlight: Mary Haigh, Global CISO of BAE Systems, speaks with N2K's Simone Petrella about moving beyond the technical to build an effective cybersecurity team. An AI music streaming scheme strikes a sour note. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

On our Solution Spotlight segment, Mary Haigh, Global CISO of BAE Systems, speaks with N2K President Simone Petrella about moving beyond the technical to build a cybersecurity team.

Selected Reading

Russia’s Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team (WIRED)

Apache Makes Another Attempt at Patching Exploited RCE in OFBiz (SecurityWeek)

SonicWall Access Control Vulnerability Exploited in the Wild (GB Hackers)

Linux Pluggable Authentication Modules Abused to Create Backdoors (Cyber Security News)

PoC Exploit Released for Linux Kernel Vulnerability that Allows Root Access (Cyber Security News)

Predator spyware resurfaces with signs of activity, Recorded Future says (CyberScoop)

Therapy Sessions Exposed by Mental Health Care Firm’s Unsecured Database (WIRED)

Frustration Trying to Opt-Out After the National Public Data Breach (Security Boulevard)

Musician charged with $10M streaming royalties fraud using AI and bots (Bleeping Computer)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.