HPE OneView Flaw and RondoDocs Exploitation

Who turned out the lights in Venezuela? The European Space Agency confirms a series of cyberattacks. Dutch police nab the alleged operator of a notorious malware testing service. The U.S. and allies issue new guidance on OT security. Researchers warn of automated exploitation of a critical Hewlett-Packard Enterprise OneView flaw. TamperedChef cooks up trojanized PDF documents to deliver backdoor malware. A bluetooth vulnerability puts devices at risk. Cisco patches a maximum-severity zero-day exploited since November. Jen Easterly heads up RSAC. Our guest is Zak Kassas from Ohio State University, discussing GPS alternatives. Vintage phones face modern problems.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today Maria Varmazis from T-Minus pace sits down with Zak Kassas from the Ohio State University to discuss the study “Navigating the Arctic Circle with Starlink and OneWeb LEO Satellites”.This conversation is a preview of tomorrow’s Deep Space episode from T-Minus Space Daily.

Selected Reading

Cyberattack in Venezuela Demonstrated Precision of U.S. Capabilities (The New York Times)

Sensitive European Space Agency Data Leaked to the Dark Web by String of Cyberattacks (IBTimes UK)

Operation Endgame: Dutch Police Arrest Alleged AVCheck Operator (Hackread)

CISA, Allies Sound Alarm on OT Network Exposure (GovInfo Security)

RondoDox botnet exploits critical HPE OneView bug (The Register)

TamperedChef Malvertising Campaign Drops Malware via Fake PDF Manuals (Infosecurity Magazine)

WhisperPair Attack Leaves Millions of Bluetooth Accessories Open to Hijacking (SecurityWeek)

Cisco finally fixes AsyncOS zero-day exploited since November (Bleeping Computer)

Former CISA Director Jen Easterly Appointed CEO of RSAC (SecurityWeek)

iPhone 4 makes comeback — but experts warn of security risks (New York Post)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices