Cybersecurity Updates and Incident Response

The World Economic Forum names AI a top global threat. The SEC suffers social media breach. The FTC settles with a data broker over location data sales. A massive data leak hits Brazil. Chinese researchers claim and AirDrop hack. A major real estate firm suffers data theft. Pikabot loader is seeing use by spammers. Ukraine’s Blackhit hits Russia’s M9 Telecom. Stuxnet methods are revealed. A Patch Tuesday rundown. Our guest is ​​Tim Eades from the Cyber Mentor Fund to discuss the growing prevalence of restoration as a part of incident response. And Hackers could screw up a wrench.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Guest ​​Tim Eades from Cyber Mentor Fund joins us to discuss the growing prevalence of restoration as a part of incident response. 

Selected Reading

AI-powered misinformation is the world's biggest short-term threat, Davos report says (AP News)

NSA: Benefits of generative AI in cyber security will outweigh the bad (IT Pro)

SEC account on X ‘compromised’ and regulator has not approved bitcoin ETFs (MarketWatch)

SEC did not have 2FA enabled: X safety team on fake Bitcoin ETF post (Cointelegraph)

FTC Order Prohibits Data Broker X-Mode Social and Outlogic from Selling Sensitive Location Data (Federal Trade Commission)

Entire population of Brazil possibly exposed in massive data leak (Security Affairs)

China says state-backed experts crack Apple's AirDrop (Digital Journal)

Fidelity National Financial says hackers stole data on 1.3 million customers (TechCrunch)

Water Curupira Hackers Launch Pikabot Malware Attack on Windows Machine (GBHackers On Security)

Ukrainian “Blackjack” Hackers Take Out Russian ISP (Infosecurity Magazine)

Ukraine is on the front lines of global cyber security (Atlantic Council) 

Dutch Engineer Used Water Pump to Get Billion-Dollar Stuxnet Malware Into Iranian Nuclear Facility: Report (SecurityWeek)

New research paper explores post-quantum cryptography for critical infrastructure cybersecurity (Industrial Cyber)

AI Helps U.S. Intelligence Track Hackers Targeting Critical Infrastructure (Wall Street Journal)

Hewlett Packard Enterprise nears $13 billion deal to buy Juniper Networks (Reuters)

January Patch Tuesday: New year, more Windows bugs (The Register)

Cybersecurity Advisory: Apache Struts Vulnerability CVE-2023-50164 (Uptycs)

Hackers can infect network-connected wrenches to install ransomware (Ars Technica) 

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices