"Trump nominates Sean Plankey as news CISA director."

Views expressed in this cybersecurity, cyber crime, and security update are those of the reporters and correspondents.  Accessed on 12 March 2025, 1629 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttps%3A%2F%2Fthecyberwire.com%2Ffeeds%2Frss.xml

Please check link or scroll down to read your selections.  Thanks for joining us today.

The CyberWire

10K followers20 articles per week

#security#ciso#tech

28

Most popular

Trump nominates Sean Plankey as new CISA director.

26min

Microsoft's Patch Tuesday fixes six zero-days. Apple patches actively exploited WebKit vulnerability.

From China with love (and Malware).

5d

US Justice Department charges employees of Chinese IT contractor i-Soon. Silk Typhoon targets the IT supply chain for initial access. Chrome extensions that change shape. Attackers target airflow misconfigurations. LibreOffice vulnerability opens the door to script-based attacks. NSO group leaders face charges in spyware case. Today, our own Dave Bittner is our guest as he appeared on the Adopting

Attackers exploit critical PHP flaw patched last June.

2d

North Korea's Moonstone Sleet deploys the Qilin ransomware. Texas city declares state of emergency following cyberattack.

Yesterday

Beyond Clicks: Crafting Cybersecurity Content That Works with David J. Ebner

11h

Content isn’t just something you create and forget—it’s an asset, a living, evolving piece of your brand’s identity. According to David J. Ebner, great content isn’t about chasing trends or churning out endless articles; it’s about crafting something that stands the test of time, resonates with the right audience, and drives meaningful business outcomes. In this episode, David, CEO and Founder of

X marks the hack.

20h

X-Twitter had multiple waves of outages yesterday. Signal’s president warns against agentic AI. A new lawsuit alleges DOGE bypassed critical security safeguards. Is the Five Eyes Alliance fraying? The Minja attack poisons ai memory through user interaction. Researchers report increased activity from the SideWinder APT group. A critical Veritas vulnerability enables remote code execution. A Kansas

Alleged DDoS attacks cause major X outages.

1d

Veritas discloses critical vulnerability affecting Arctera InfoScale. New York sues Allstate over data breach.

Mar 10, 2025

What Business Leaders Can Learn from Higher Ed Cybersecurity

1d

Micah Czigan, Chief Information Security Officer at Georgetown University joins Ann on this week's episode of Afternoon Cyber Tea. With a career spanning the U.S. Navy, Department of Defense, and private sector cybersecurity, Micah shares his journey from marine biology to cryptologic communications, ultimately finding his passion for cybersecurity. He discusses the parallels between military stra

PHP flaw sparks global attack wave.

1d

PHP exploits are active in the wild. Security researchers discover undocumented commands in a popular Wi-Fi and Bluetooth-enabled microcontroller. The ONCD could gain influence in this second Trump administration. The Akira ransomware gang leverages an unsecured webcam. Mission, Texas declares a state of emergency following a cyberattack. The FBI and Secret Service confirm crypto-heists are linked

Mar 8, 2025

Adblockers, Emotional AI, & Kung-Fu Dishwashing Robots

4d

On this week's episode,we explore some updates to familiar AI tools like Suno, some new models like Wan2.0, and talk about Perry's upcoming Offensive Cyber Deception class this summer! Perry hypnotizes SesameAI into divulging its innermost thoughts and feelings Mason breaks down why some people are reporting that Google Chrome is killing their adblockers The Dumpster Fire for this week comes in th

Mar 7, 2025

Botnet’s back, tell a friend.

4d

This week we are joined by Silas Cutler, Principal Security Researcher at Censys, asking the important question of "Will the Real Volt Typhoon Please Stand Up?" The FBI's disruption of the KV Botnet in December 2023, attributed to the Chinese threat group Volt Typhoon, targeted infected systems but did not affect the botnet's control infrastructure. Despite law enforcement efforts and technical ex

CISA says it will continue monitoring Russian cyber threats.

4d

Broadcom patches zero-days that can lead to VM escape. US Justice Department charges employees of Chinese IT contractor i-Soon. Law enforcement shutters Garantex crypto exchange.

The end of the line for Garantex.

4d

Law enforcement shutters Garantex crypto exchange. NTT discloses breach affecting corporate customers. Malvertising campaign hits nearly a million devices. AI’s role in Canada’s next election. Scammers target Singapore’s PM in AI fraud. Botnets exploit critical IP camera vulnerability. In our International Women's Day and Women’s History Month special, join Liz Stokes as she shares the inspiring s

Law enforcement shutters Garantex crypto exchange.

4d

NTT discloses breach affecting corporate customers. Malvertising campaign hits nearly a million devices. Botnets exploit critical IP camera vulnerability.

Mar 6, 2025

Trump ends several prominent crypto company investigations and lawsuits.

5d

Pentagon signs new AI deal with Scale AI.

US Justice Department charges employees of Chinese IT contractor i-Soon.

5d

Silk Typhoon targets the IT supply chain for initial access. Thousands of VMware ESXi instances remain vulnerable to actively exploited flaws.

Mar 5, 2025

Malvertising Campaign Leads to Info Stealers Hosted on Github

6d

In this episode of the Microsoft Threat Intelligence Podcast, host Sherrod DeGrippo is joined by Senior Microsoft Security Researcher Kajhon Soyini to explore the Luma Stealer cryptocurrency mining campaign targeting individual computers as part of a large-scale malvertising campaign. They discuss the sophisticated attack chain, which includes DLLs, clipboard malware, process injection via Explore

The Glamour and the Glory of OT Security

6d

The explosion of connected devices is creating new cybersecurity challenges. In this episode of Threat Vector, host David Moulton, Director of Thought Leadership at Unit 42, sits down with Hollie Hennessy, Principal Analyst for IoT Cybersecurity at Omdia. Hollie shares insights into the evolving risks posed by IoT devices, from industrial control systems to consumer technology. She explains how at

Scams in the henhouse.

6d

On Hacking Humans, this week Dave Bittner is on vacation so our two hosts Joe Carrigan, and Maria Varmazis (also host of N2K's daily space podcast, T-Minus), are sharing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start off the show with some follow-up from a long-time listener who shared how switching to Publii and Cloudflare Pages

US Treasury targets darknet kingpin.

6d

US Treasury Department sanctions Iranian national accused of running the Nemesis criminal marketplace. Hunters International threatens to leak data stolen from Tata Technologies. Apple challenges U.K.’s iCloud encryption backdoor order. UK competition regulator says no investigation into Microsoft's OpenAI partnership. Stealthy malware campaign targets the UAE's aviation and satellite industry. Th

NinjaOne raises $500 million in Series C extensions.

6d

Jamf to acquire Identity Automation for $215 million.

US Treasury Department sanctions Iranian national accused of running the Nemesis criminal marketplace.

6d

Hunters International threatens to leak data stolen from Tata Technologies. Scammers impersonate ransomware gang via snail mail. Stealthy malware campaign targets the UAE's aviation and satellite industry.

Mar 4, 2025

PoCs, Patching and Zero Day Quest Participation with Michael Gorelik

7d

In this episode of The BlueHat Podcast, Nic and Wendy are joined by seasoned security researcher, and CTO of Morphisec, Michael Gorelik. Michael discusses his approach to security research, which often begins by exploring PoCs released by other researcher groups and continues through to the release and validation of – sometimes multiple rounds of – fixes. Michael also provides an overview of this

The CISO Obsession Is a Mistake—Here’s Who Makes Decisions with Parham Eftekhari

7d

Most cybersecurity events feel the same: a packed schedule, a few familiar faces, and vendors trying to grab your attention. But does any of it build a lasting community? Parham Eftekhari, EVP of Communities at Cyber Risk Alliance (CRA), has spent years figuring out what security professionals want. CRA runs 150+ in-person events annually, but its focus isn’t just filling rooms—it’s creating conne

CISA keeps watch on Russia.

7d

CISA says it will continue monitoring Russian cyber threats. Broadcom patches zero-days that can lead to VM escape. Google patches 43 Bugs, including two sneaky zero-days. CISA flags vulnerabilities exploited in the wild. Palau's health ministry recovers from ransomware attack. Lost and found or lost and leaked? On this week's Threat Vector segment, David Moulton previews an episode with Hollie He

CISA says it will continue monitoring Russian cyber threats.

7d

Broadcom patches zero-days that can lead to VM escape. Ransomware attack against Lee Enterprises is still disrupting contractor payments. Palau's health ministry recovers from ransomware attack.

Mar 3, 2025

The new malware on the block.

8d

Welcome in! You’ve entered, Only Malware in the Building. Join us each month to sip tea and solve mysteries about today’s most interesting threats. Your host is Selena Larson, Proofpoint intelligence analyst and host of their podcast DISCARDED. Inspired by the residents of a building in New York’s exclusive upper west side, Selena is joined by N2K Networks Dave Bittner —and our newest totally unbi

Is it cyber peace or just a buffer?

Hegseth halts Cyber Command Russia planning

•

8d

Cyber Command ordered to halt offensive operations against Russia during Ukraine negotiations. Ransomware actors exploit Paragon Partition Manager vulnerability. Amnesty International publishes analysis of Cellebrite exploit chain. California orders data broker to shut down for violating the Delete Act. On our Afternoon Cyber Tea segment with host Ann Johnson of Microsoft Security, Ann speaks with

Cyber Command ordered to halt offensive operations against Russia during Ukraine negotiations.

Hegseth halts Cyber Command Russia planning

•

8d

Ransomware actors exploit Paragon Partition Manager vulnerability. Amnesty International publishes analysis of Cellebrite exploit chain. California orders data broker to shut down for violating the Delete Act.

End of feed