Cyber sabotage and cyberespionage. Updates on Russia’s hybrid war against Ukraine. REvil seems to have returned.

Cable sabotage in France remains under investigation. Spearphishing by Cozy Bear. Widespread and damaging Russian cyberattacks have yet to appear, but criminals find a new field of activity. Hacktivism and privateering. The legal and prudential limits to hacktivism. Applying lessons learned from an earlier cyberwar. Romanian authorities say last week’s DDoS incident was retaliation for Bucharest’s support of Kyiv. Rick Howard is dropping some SBOMS. Carole Theriault reports on virtual kidnappings. REvil seems to be back after all.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/11/84

Selected reading.

How the French fiber optic cable attacks accentuate critical infrastructure vulnerabilities (CyberScoop) 

Russian hackers compromise embassy emails to target governments (BleepingComputer) 

Ukraine's defense applies lessons from a 15-year-old cyberattack on Estonia (NPR) 

Feared Russian cyberattacks against US have yet to materialize (C4ISRNet)

Hacking Russia was off-limits. The Ukraine war made it a free-for-all. (Washington Post) 

A YouTuber is promoting DDoS attacks on Russia — how legal is this? (BleepingComputer)

Ukraine’s Digital Fight Goes Global (Foreign Affairs)

Romanian government says websites attacked by pro-Russian group (The Record by Recorded Future) 

REvil ransomware returns: New malware sample confirms gang is back (BleepingComputer)

Learn more about your ad choices. Visit megaphone.fm/adchoices