Hacking Humans

30/09/2023

brings you up to date on week's news.
-Joint advisory warns of Beijing's "BlackTech" threat activity.
-New players in the C2C market.
-Unattributed APTs.
-Threat actors appear to target war crimes investigations.
Catch up:

Joint advisory warns of Beijing's "BlackTech" threat activity. New players in the C2C market. Unattributed APTs. Threat actors appear to target war crimes investigations. More MOVEit-related data breaches are disclosed.

23/09/2023

Read catches you up on the news of the week. Headlines:
✅Cyberattack on the ICC.
✅CISA, FBI warn of Sn**ch ransomware.
✅Cybercrime and cyberespionage developments.
✅Updates on recent cyber incidents.
Check it out here:

ICC sustains a cyberattack. CISA, FBI warn of Sn**ch ransomware. Cyber threats trending from East Asia. ShroudedSnooper intrusion activity is both novel and simple. Earth Lusca's cyberespionage techniques. Criminal malware from China prospects Sinophone victims. AI training data accidentally publish...

22/09/2023

Get that popcorn ready! New episode of coming out on Sunday! Dave Bittner & Rick Howard share examples of like you find on the podcast, but in clips of fav movies. Find older episodes here:

An occasional series from the team at the Hacking Humans podcast. The CyberWire's Dave Bittner and co-host from the Johns Hopkins University Information Security Institute, Joe Carrigan, are joined by the Cyberwire’s Chief Security Officer and Chief analyst, Rick Howard. The team watches clips fro...

16/09/2023

headlines this week: campaigns. targets a grid. hits casinos. And other news from the cyber sector. Catch up here:

Two Iranian cyberespionage campaigns reported this week. Redfly cyberespionage targets a national grid. Ransomware attacks against MGM Resorts and Caesars Entertainment. Access broker's phishing facilitates ransomware. And other news from across the cyber sector.

09/09/2023

Grab your coffee and pull up the latest . Get caught up on the latest headlines: : China, Russia, the DPRK, and possibly others. Triad. storage exploit. New version of $. Read it here:

Microsoft releases results of investigation into cloud email compromise. "Multiple nation-state actors" target the aerospace sector. DPRK targets security researchers. Fancy Bear makes an attempt on Ukrainian energy infrastructure. "Smishing Triad" impersonates postal services. MinIO storage exploit...

02/09/2023

Busy week? Catch up on the news all in one spot w/ . Headlines: Calling out the . as the present & future of hacktivism. & . Adversary-in-the-middle attacks. Read more:

Five Eyes call out GRU cyberespionage campaign. Russian hacktivist auxiliary hits Polish and Czech organizations. Investigation of railroad incidents in Poland continues. DPRK's Lazarus Group exploits ManageEngine issues. China's GREF deploys tools used against Uyghurs in broader espionage. Cyberesp...

02/09/2023

Add a bit of the CyberWire to your weekend.
has latest research: https://hubs.li/Q020-kHk0.
Read news of the week in : https://hubs.li/Q020-lcN0
Hear latest episode of : https://hubs.li/Q020-pjh0

26/08/2023

Need a refresher on the week's headlines? Check out the ! This week: . Threats to the space sector. 's cyber phases. Recent trends in cybercriminal TTPs.

DPRK cyberespionage this week. US Intelligence Community warns of cyber threats to space systems. China's cyberespionage campaign against vulnerable Barracuda appliances. The cyber phase of Russia's hybrid war against Ukraine. Recent trends in cybercriminal tactics and techniques.

19/08/2023

headlines: campaign by 's Ministry of State Security. CSRB will look into cyberespionage against Microsoft Exchange. Attacks against industrial systems. Threats to satellite communications. Catch up here:

Wide-ranging cyberespionage campaign by China's Ministry of State Security. Cyber Safety Review Board will look into cyberespionage against Microsoft Exchange. Attacks against industrial systems. Threats to satellite communications. Patch news, policy and agency equities, legal news, and the cyberse...

12/08/2023

headlines: The fate and effects of a supply chain compromise. Cyberespionage: China, Russia, and North Korea. Lessons from a hybrid war. Major data breaches. CPU vulnerabilities. Catch up on the news here:

The fate and effects of a supply chain compromise. Cyberespionage: China, Russia, and North Korea. Lessons from a hybrid war. Major data breaches. CPU vulnerabilities. And the usual developments in policy, law, markets, and technical innovation.

05/08/2023

Headlines for : Hunting pre-staged . SVR and FSB . C2-as-a-service. Top vulnerabilities. Workforce development. Catch up on the week's news here:

US hunts Chinese malware staged in US networks. SVR cyberespionage on several fronts. The FSB shakes up its infrastructure. C2-as-a-service (and APTs are the customers). Five Eyes warn against top exploited vulnerabilities. Patch news. Crime and punishment. Courts and torts. Policies, procurements,....

29/07/2023

The is your one-stop for all things news. This week's headlines: claims to have accessed data from a third Big Four accounting firm. A malign AI tool: . Catch up:

Cl0p claims to have accessed data from a third Big Four accounting firm. A malign AI tool: FraudGPT. Report: Ransomware victims increased by 66% from Q1 to Q2 2023. Data breaches exact a rising cost. Norwegian government offices sustain a zero-day attack of undetermined origin. Russia-Ukraine hybrid...

29/07/2023

Cheers! Enjoy your weekend beverage w/the CyberWire:
Saturday: Latest cybersecurity research on . https://hubs.li/Q01ZlRvs0
Catch up on week's cyber news w/ . https://hubs.li/Q01ZlQ6J0
Sunday: Latest episode of . https://hubs.li/Q01ZlQ290

22/07/2023

Scan the headlines: vulnerability remediated faster than most. Report: US companies made up 51% of ransomware victims in Q2 2023, w/ taking 1st place among gangs. Want to know more? Read here:

MOVEit vulnerability remediated faster than most. Report: US companies made up 51% of ransomware victims in Q2 2023, with LockBit taking first place among the gangs. Report: WhatsApp accounts may be at risk. Possible privilege escalation within Google Cloud. APT compromises JumpCloud. Russia-Ukraine...

15/07/2023

This week's headlines: threat actor hit US organizations w/Microsoft cloud exploit. Training code turns out to be malicious in a new proof-of-concept attack discovered on . Read about these & more:

Chinese threat actor hit US organizations with a Microsoft cloud exploit. Training code turns out to be malicious in a new proof-of-concept attack discovered on GitHub. Multichain reports over $100 million stolen in crypto heist. USB attacks have risen three-fold in the first half of 2023. CISA and....

15/07/2023

Add a bit of the CyberWire to your weekend.
has latest research: https://hubs.li/Q01XRTHN0.
Read news of the week in : https://hubs.li/Q01XRTZx0
Hear latest episode of : https://hubs.li/Q01XRTD50

08/07/2023

Headlines from the : 3.0 claims responsibility for Nagoya attack. and SEO poisoning. Catch up on the news of the week here:

LockBit 3.0 claims responsibility for Nagoya ransomware attack. BlackCat and SEO poisoning. LockBit seeks to extort semiconductor manufacturer. Professionals in the cyber underworld. Microsoft debunks claims of data theft by Anonymous Sudan. Russia-Ukraine hybrid war update. Courts and torts. Polici...