CyberWire Daily

Brian Davis, a Principal Software Engineer, and Thomas Gardner, a Senior Detection Engineer from Red Canary, discuss the symbiotic relationship between cloud architects and detection engineers. They emphasize the importance of collaboration, clear communication, and constant refinement of detection logic to stay ahead of cyber threats. The conversation highlights the significance of building bridges and fostering a collaborative environment for effective teamwork in cybersecurity.

Guest Greg Lesnewich, senior threat researcher at Proofpoint, discusses TA427's use of social engineering and DMARC abuse for information gathering. The group targets policy experts through phishing emails, highlighting the importance of security awareness. They explore the challenges of implementing DMARC policies to prevent spoofing attacks and the role of email in low-level espionage.

Recent cyberattacks prompt quick responses from a US telecom provider and a Texan city. Ransomware payments decrease in Q1 2024. A phishing kit impersonating LastPass emerges. US auto manufacturers targeted by FIN7. Akira ransomware earns $42 million by March 2023. WhatsApp and Threads banned in China. Concerning drop in US cybersecurity job listings. Zscaler's CSO discusses encrypted attacks and AI revolution. Meghan Markle hacked by Kate supporters.

Join the Cyber Talent Insights team for tips on starting a career in cybersecurity, finding your niche, and standing out in the competitive market. Explore the importance of certifications, skills alignment, and balancing passion with market demand. Learn about networking, specialized skills, and certifications on LinkedIn for career success.

Law enforcement takes down a major phishing operation. US election officials warned of foreign influence. House limits feds' data purchases. Michigan healthcare provider hit by ransomware. Difficulty trusting cybersecurity tools. Cloudflare reports on DDoS. Android banking malware uncovered. Kubernetes cryptominers exploiting flaws. Caleb Barlow discusses badge swipe fraud. Colorado passes law to protect privacy from big tech.

Russian hacker group targets critical infrastructure, Change Healthcare ransomware, SIM swap costs, PuTTY private keys, surge in brute-force attacks, Ivanti MDM updates, Omni Hotels data breach, steganography in Latin America, prolific cryptojacker faces prison, CISSP certification journey discussion, and data ownership responsibilities.

Cisco Dou warns of a third-party MFA breach, MGM sues FTC, FTC penalizes mental health provider. Open Source groups caution against social engineering. NSA advises securing AI. UK cracks down on deepfakes. Smart-lock vulnerabilities due to hard-coded passwords. Industry Voices discuss AI benefits in GRC. Law firm's misclick ends marriage.

Topics include exploited zero-day vulnerabilities, critical flaws in security systems, data breaches at Giant Tiger and a European semiconductor manufacturer, a second breach at Roku, charges against Hive RAT operators, a former Amazon security engineer sentenced for hacking cryptocurrency exchanges, a crackdown on scam call centers in Zambia, dual ransomware described by FBI Cyber Division, security testing of generative AI by Accenture, and the consequences of selling Pokemon cheats in Japan.

Clint Crosier and Jim Tran discuss how AWS and Iridium collaborate to enhance space missions using cloud tech and AI. Topics include IoT solutions, GPS security, resilience in space communications, and the innovative synergy of space capabilities and cloud services.

Stu Sjouwerman, CEO of a human firewall company, shares insights on his career journey, from startups to predicting the future. He emphasizes the importance of learning all aspects of the business and fostering a culture of continuous learning and adaptation.