Stories
the cyberwire
Just Now
Ukraine at D+174: Cyber and EW in combined arms operations.
Ukraine shows its long-range attack capability, and in so doing demonstrates a determination to take back territory occupied by Russia. That includes Crimea, which Russia had regarded as secure and uncontested. Nuisance-level Russian cyber action continues, but meaningful contributions in the fifth domain seem to come only when cyber is integrated with long-range fires.
Story
the cyberwire
Aug 16, 2022
Ukraine at D+173: OSINT for targeting; espionage and influence ops.
Ukrainian strikes are reported in Russian rear areas. Retaliatory Russian missile fire hits towns near the Belarusian border. Microsoft identifies and disrupts a Russian cyberespionage and influence operation.
Story
the cyberwire
Aug 15, 2022
Ukraine at D+172: Regrouping along the Dnipro.
As Russian command elements withdraw east across the Dnipro River, Russian war aims become increasingly clear. Cyber threat actors Shuckworm and Killnet continue to hack (recently with indifferent success) in the Russian interest.
Story
the cyberwire
Aug 15, 2022
Privilege escalation.
Host Rick Howard explains Identity and Access Management (IAM).
CSO Perspectives
the cyberwire
Aug 12, 2022
Ukraine at D+169: Partisans, both kinetic and cyber.
Ukraine appears determined to convince Russia (and its Belarusian fellow-traveler) that the rear areas, including Crimea and Belarusian border regions themselves aren't safe places any longer. A website aims to train and empower anti-Russian cyber partisans.
Story
the cyberwire
Aug 11, 2022
Ukraine at D+168: Offensive cyber ops are difficult.
Russia is struggling to replace both personnel and matériel lost in its invasion of Ukraine. Ukraine demonstrates an ability to hit Russian rear areas (including, possibly, some staging areas in Belarus). KillMilk is talking large about hacking Lockheed Martin, but evidence is scanty. ESET offers a post mortem of Industroyer2.
Story
Load More