Evolution of Bug Bounty Tactics and the Increasing Pressure to Pay

Microsoft highlights adversaries experiments with AI LLMs. A misconfiguration exposes a decades worth of emails. SentinelOne describes Kryptina ransomware as a service. The European Court of Human Rights rules against backdoors. Senator Wyden calls out a location data broker. GoldFactory steals facial scans to bypass bank security. The Glow fertility app exposes the data of twenty five million users. Qakbot returns. Our Guest Rob Boyce from Accenture talks about tailored extortion. And hacking the airport taxi line leads to prison. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Guest Rob Boyce from Accenture talks about tailored extortion as actors continue to shift to pure data extortion, with old and new tactics.

Selected Reading

State-backed hackers are experimenting with OpenAI models (Cyberscoop)

Staying ahead of threat actors in the age of AI (Microsoft)

U.S. Internet Leaked Years of Internal, Customer Emails (Krebs on security)

Kryptina RaaS | From Underground Commodity to Open Source Threat  (SentinelOne)

Backdoors that let cops decrypt messages violate human rights, EU court says (Arstechnica)

A company tracked visits to 600 Planned Parenthood locations for anti-abortion ads, senator says (POLITICO)

Cybercriminals are stealing Face ID scans to break into mobile banking accounts (theregister)

Fertility tracker Glow fixes bug that exposed users’ personal data (TechCrunch)

New Qbot malware variant uses fake Adobe installer popup for evasion (bleepingcomputer)

Duo headed to prison for charging cabbies to skip JFK Airport line with Russian hackers' aid (nydailynews)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices