Open-source, open season.
Cybercriminals target financial institutions across Africa using open-source tools. Threat actors are using a technique called Authenticode stuffing to abuse ConnectWise remote access software. A fake version of SonicWall’s NetExtender VPN app steals users’ credentials. CISA and the NSA publish a guide urging the adoption of Memory Safe Languages. Researchers identify multiple security vulnerabilities affecting Brother printers. Fake AI-themed websites spread malware. Researchers track a sharp rise in signup fraud. A new Common Good Cyber Fund has been launched to support nonprofits that provide essential cybersecurity services. Tim Starks from CyberScoop joins us to discuss calls for a federal cyberinsurance backstop. A Moscow court says ‘nyet’ to more jail time for cyber crooks.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
We are again joined by Tim Starks, Senior Reporter from CyberScoop. Tim discusses his recent piece on “Federal cyber insurance backstop should be tied to expiring terrorism insurance law, report recommends.”
Selected Reading
Cybercriminals Abuse Open-Source Tools To Target Africa’s Financial Sector (Unit 42)
Hackers Abuse ConnectWise to Hide Malware (SecurityWeek)
Fake SonicWall VPN app steals user credentials (The Register)
CISA Publishes Guide to Address Memory Safety Vulnerabilities in Modern Software Development (GB Hackers)
New Vulnerabilities Expose Millions of Brother Printers to Hacking (SecurityWeek)
Black Hat SEO Poisoning Search Engine Results For AI (ThreatLabz)
Half of Customer Signups Are Now Fraudulent (Infosecurity Magazine)
Common Good Cyber Fund Launched to Support Non-Profit Security Efforts (Infosecurity Magazine)
Russia releases REvil members after convictions for payment card fraud (The Record)
Audience Survey
Complete our annual audience survey before August 31.
Want to hear your company in the show?
You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
