New Vulnerabilities and Cyber Security Incidents

German officials take down a dark web market. Google patched zero-day. Terrapin attack targets SSL. A look at payment fraud. Agent Tesla is spreading through an old vulnerability. An iPhone thief explains his techniques. Ukrainian reprisals for Russia's Kyivstar attack. Israeli officials warn of data wipers. Rick Howard speaks with Scott Roberts of Interpress about Driving Intelligence with MITRE ATT&CK, and leveraging limited resources to build an evolving threat repository. And go ahead and click that like button - just don’t expect to get paid.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today’s guest Scott Roberts of Interpres joins N2K’s Rick Howard from the recent MITRE ATT&CKcon event. They discuss driving intelligence with MITRE ATT&CK: Leveraging limited resources to build evolving threat repository. 

Selected Reading

German police takes down Kingdom Market cybercrime marketplace (BleepingComputer)

GOOGLE ADDRESSED A NEW ACTIVELY EXPLOITED CHROME ZERO-DAY (Securityaffairs)

SSH protects the world’s most sensitive networks. It just got a lot weaker (Ars Technica)

Annual Payment Fraud Intelligence Report: 2023 (Recorded Future)

Threat Actors Exploit CVE-2017-11882 To Deliver Agent Tesla (Zscaler)

iPhone Thief Explains How He Breaks Into Your Phone (Wall Street Journal)

Ukrainian hackers breach Rosvodokanal, seize data of Russia's largest private water utility (RBC Ukraine)

Fake F5 BIG-IP zero-day warning emails push data wipers (BleepingComputer)

“Get Paid to Like Videos”? This YouTube Scam Leads to Empty Wallets (Hack Read)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices