"Bybit's $1.4B breech."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 06 April 2025, 0415 UTC.

Content and Source:  https://thecyberwire.com.

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

The CyberWire

24

Yesterday

Bybit’s $1.4B breach.

2 TTPs

•

The CyberWire / 23h

Zach Edwards from Silent Push is discussing their work on "New Lazarus Group Infrastructure, Acquires Sensitive Intel Related to $1.4B ByBit Hack and Past Attacks." Silent Push analysts uncovered significant infrastructure used by the Lazarus APT Group, linking them to the $1.4 billion Bybit crypto heist through the domain bybit-assessment[.]com registered just hours before the attack. The investi

President Trump fires the head of NSA and Cyber Command.

Trump fires NSA director Haugh

•

The CyberWire / 23h

Oracle Health informs customers of breach. Attackers exploit critical CrushFTP vulnerability following disclosure mix-up.

A leadership shift.

2 TTPs

•

The CyberWire / 1d

President Trump fires the head of NSA and Cyber Command. The Health Sector Coordinating Council asks the White House to abandon Biden-era security updates. Senators introduce bipartisan legislation to help fight money laundering. A critical vulnerability has been discovered in the Apache Parquet Java library. The State Bar of Texas reports a ransomware-related data breach. New Android spyware uses

President Trump fires the head of NSA and Cyber Command.

Trump fires NSA director Haugh

•

The CyberWire / 1d

Patch issued for maximum severity flaw affecting Apache Parquet. China-linked threat actor exploits Ivanti Connect Secure vulnerability.

Prompt Wars, AI Cognition & Video Deception

The CyberWire / 1d

In this week's episode: We explore "Prompt Wars," an asynchronous multiplayer LLM competition where players craft prompts to battle against others in a fascinating game of AI manipulation We dive into Anthropic's latest research on AI cognition and circuit tracing - essentially digital neuroscience for large language models Mason shares his AI BodgeLab experiment creating a low-effort podcast know

The invisible force fueling cyber chaos.

The CyberWire / 1d

A joint advisory labels Fast Flux a national security threat. Europol shuts down a major international CSAM platform. Oracle verifies a data breach. A new attack targets Apache Tomcat servers. The Hunters International group pivots away from ransomware. Hackers target Juniper routers using default credentials. A controversy erupts over a critical CrushFTP vulnerability. Johannes Ullrich, Dean of R

Federal moves raise concerns about election security.

The CyberWire / 1d

Former FTC Commissioners file lawsuit against Trump administration.

Attackers exploit critical CrushFTP vulnerability following disclosure mix-up.

2 TTPs

•

The CyberWire / 1d

CISA says fast flux technique poses threat to national security. Hunters International group plans to rebrand as extortion-only operation.

The Art of Threat Hunting

The CyberWire / 1d

In this episode of Threat Vector, host David Moulton, Director of Thought Leadership at Palo Alto Networks, welcomes Ryan Chapman, a seasoned Threat Hunter and digital forensics expert. With over 20 years of experience, Ryan has led incident response teams and authored courses on ransomware, making him a leading voice in the field. The discussion covers the evolving landscape of cybersecurity, wit

Not-so-real deals.

The CyberWire / 1d

This week our hosts, Dave Bittner, Joe Carrigan, and Maria Varmazis (also host of N2K's daily space podcast, T-Minus), are sharing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. First, we start off with some more follow-up on EZ passes, along with the newest iteration, as Kailey Cornick shares that scammers target phone numbers rather tha

A make-or-break moment for businesses.

The CyberWire / 1d

This week, we are joined by Daniel Barber, CEO and Co-Founder of DataGrail, to discuss why data privacy should matter to companies in 2025. Ben has the story of a California lawmaker’s proposal to regulate kids’ use of AI companions. Dave's got the story of a reporter's 300 mile trek through rural Virginia in search of license plate readers.

Chrome & Firefox squash the latest flaws.

The CyberWire / 1d

Google and Mozilla patch nearly two dozen security flaws. The UK’s Royal Mail Group sees 144GB of data stolen and leaked. A bizarre campaign looks to recruit cybersecurity professionals to hack Chinese websites. PostgreSQL servers with weak credentials have been compromised for cryptojacking. Google Cloud patches a vulnerability affecting its Cloud Run platform. Oracle faces a class-action lawsuit

Aura raises $140 million in Series G round. Straiker emerges from stealth with $21 million.

The CyberWire / 1d

Google and Mozilla patch high-severity browser vulnerabilities.

The CyberWire / 1d

DPRK's fraudulent IT worker operations expand to Europe. Oracle hit with class-action lawsuit over alleged data breaches.

Microsoft’s 50th Anniversary: Security Then and Now

The CyberWire / 1d

In this special episode marking 50 years of Microsoft, host Sherrod DeGrippo is joined by Charlie Bell, Stephanie Calabrese, John Lambert, and Scott Woodgate to take a deeper look at Microsoft’s incredible journey in cybersecurity. They share their experiences and reflections on how the company has grown over the last five decades, from the early days of proprietary systems to the transformative r

AI & the Hunt for Hidden Vulnerabilities with Tobias Diehl

The CyberWire / 1d

In this episode of The BlueHat Podcast, host Nic Fillingham and Wendy Zenone are joined by security researcher Tobias Diehl, a top contributor to the Microsoft Security Research Center (MSRC) leaderboards and a Most Valuable Researcher. Tobias shares his journey from IT support to uncovering vulnerabilities in Microsoft products. He discusses his participation in the upcoming Zero Day Quest hackin

The RevOps Whisperer: How Joe Aurilia Fixes the Stuff No One Wants to Touch

The CyberWire / 1d

This week, we’ve got an extra special guest, Joe Aurilia, Jr., SVP of Operations at Cyware. Joining Gianna and Maria to talk more about the art of scaling, automating, and just plain getting stuff done. Joe takes us on a ride from being Cyware’s first U.S. hire (aka "the guinea pig") to building and overseeing every corner of operations from legal and IT to rev ops and marketing ops. We chat about

Hackers beware, fines are in the air.

The CyberWire / 1d

The UK unveils the full scope of its upcoming Cyber Security and Resilience Bill. Apple warns of critical zero-day vulnerabilities under active exploitation. The InterLock ransomware group claims responsibility for a cyberattack on National Presto Industries. Microsoft flags a critical vulnerability in Canon printer drivers. Check Point Software confirms a data breach. The FTC warns 23andMe’s bank

FTC says prospective 23andMe buyers must uphold privacy commitments.

The CyberWire / 1d

UK reveals scope of its planned cybersecurity bill. Sam's Club investigates breach claims.

Hello? Is it malware you’re looking for?

The CyberWire / 1d

Welcome in! You’ve entered, Only Malware in the Building. Join us each month to sip tea and solve mysteries about today’s most interesting threats. Your host is Selena Larson, Proofpoint intelligence analyst and host of their podcast DISCARDED. Inspired by the residents of a building in New York’s exclusive upper west side, Selena is joined by N2K Networks Dave Bittner —and our newest totally unbi

Ransom demands and medical data for sale.

The CyberWire / 1d

A cyberattack targeting Oracle Health compromises patient data. The DOJ nabs over $8 million tied to romance scams. Trend Micro examines a China-linked APT group conducting cyber-espionage. A new Android banking trojan called Crocodilus has emerged. North Korea’s Lazarus Group targets job seekers in the crypto industry. CISA IDs a new malware variant targeting Ivanti Connect Secure appliances. Mar

Oracle Health informs customers of breach. China-linked Earth Alux conducts cyberespionage across APAC and Latin America.

The CyberWire / 1d

US Justice Department seizes $8.2 million stolen in romance scams.