))
Deception, influence, and social engineering in the world of cyber crime.
The daily cybersecurity news and analysis industry leaders depend on. Published each weekday, the program also includes interviews with a wide spectrum of experts from industry, academia, and research organizations all over the world.
A fun and informative cybersecurity audio glossary from the CyberWire.
Step inside the diverse and fascinating worlds of cybersecurity professionals around the globe and hear their personal stories in their own words.
Every Saturday, we sit down with cybersecurity researchers to talk shop about the latest threats, vulnerabilities, and technical discoveries.
Encore seasons of the popular CyberWire Pro podcast hosted by Chief Analyst, Rick Howard. Join Rick and the Hash Table experts as they discuss the ideas, strategies and technologies that senior cybersecurity executives wrestle with on a daily basis. For the latest seasons ad-free along with essays, transcripts, and bonus content, sign up for CyberWire Pro.
Join us for thought provoking conversations on surveillance, digital privacy, and cybersecurity law and policy in the information age. Each week, hosts Dave Bittner and Ben Yelin break down the headlines, legal cases, and policy battles that matter most.
Get ready for a deep dive into what cybersecurity professionals often refer to as the "8th Layer" of security: HUMANS. This podcast is a multidisciplinary exploration into how the complexities of human nature affect security and risk. Author, security researcher, and behavior science enthusiast Perry Carpenter taps experts for their insights and illumination. Topics include cybersecurity, psychology, behavior science, communication, leadership, and more.
Readings from the dark underworld of cybercrime and espionage, recalled to life, reinterpreted, and reimagined for the benefit of the infosec literati. Oh, and it’s also just play and parody from the ever-restless imaginations of the CyberWire editorial team.
C
CyberWire Daily
1
TA505’s recent activity. Advice on defending organizations from BlackMatter. CISA RFI seeks EDR information. REvil’s halting attempts to return. Sinclair’s incident response.
22:06
22:06
Play later
Play later
Lists
Like
Liked
22:06
A look at TA505, familiar yet adaptable. A US joint cybersecurity advisory outlines the BlackMatter threat to critical infrastructure. CISA asks industry for technical information on endpoint detection and response capabilities. Is REvil trying to run on reputation? The Sinclair Broadcasting ransomware incident seems to provide a case study in rapi…
Cloud services intended for cyber criminals and other bad actors designed to obstruct law enforcement and other kinds of government investigations, and to provide some protection against competitors.By CyberWire Inc.
Hardware and software designed to detect and prevent cyber adversary campaigns that target industrial operations.By CyberWire, Inc.
C
CyberWire Daily
1
A US broadcaster sustains a ransomware attack. North Korean catphis expelled from Twitter. REvil’s Tor sites are hijacked. Hacking back. Prosecution and responsible disclosure?
24:00
24:00
Play later
Play later
Lists
Like
Liked
24:00
The Sinclair Broadcast Group discloses that it sustained a ransomware attack over the weekend. Twitter kicks out two North Korean catphish deployed in a cyberespionage campaign. REvil goes offline, again, perhaps this time for good. Hacking back, at least insofar as you let the hoods know you can see them. Rick Howard previews the newest season of …
C
CSO Perspectives (public)
1
Identity Management: a first principle idea.
16:41
16:41
Play later
Play later
Lists
Like
Liked
16:41
Rick discusses this history of identity management up to the current state.By CyberWire Inc.
C
CyberWire Daily
1
Ell Marquez: It's okay to be new. [Linux] [Career Notes]
9:22
9:22
Play later
Play later
Lists
Like
Liked
9:22
Linux and Security Advocate at Intezer Ell Marquez shares her journey from the family ranch to security. Needing a life change due to a bunch of circumstances that had occurred that left her almost homeless, Ell found out about a six week Linux boot camp that took her down the path toward technology. She fell in love security at at BSides Conferenc…
Linux and Security Advocate at Intezer Ell Marquez shares her journey from the family ranch to security. Needing a life change due to a bunch of circumstances that had occurred that left her almost homeless, Ell found out about a six week Linux boot camp that took her down the path toward technology. She fell in love with security at at BSides Conf…
C
CyberWire Daily
1
Groove Gang making a name for themselves. [Research Saturday]
22:03
22:03
Play later
Play later
Lists
Like
Liked
22:03
Guest Michael DeBolt, Chief Intelligence Officer from Intel471, joins Dave Bittner to discuss their work on "How Groove Gang is shaking up the Ransomware-as-a-Service market to empower affiliates." McAfee Enterprise ATR believes, with high confidence, that the Groove gang is associated with the Babuk gang, either as a former affiliate or subgroup. …
R
Research Saturday
1
Groove Gang making a name for themselves.
22:03
22:03
Play later
Play later
Lists
Like
Liked
22:03
Guest Michael DeBolt, Chief Intelligence Officer from Intel471, joins Dave Bittner to discuss their work on "How Groove Gang is shaking up the Ransomware-as-a-Service market to empower affiliates." McAfee Enterprise ATR believes, with high confidence, that the Groove gang is associated with the Babuk gang, either as a former affiliate or subgroup. …
C
CyberWire Daily
1
CISA and its partners warn of threats to water and wastewater treatment facilities. The curious case of Missouri teachers’ Social Security Numbers.
23:07
23:07
Play later
Play later
Lists
Like
Liked
23:07
A CISA-issued Joint Advisory warns of threats and vulnerabilities at water and wastewater treatment facilities. CISA issues twenty-two other industrial control system advisories. Andrea Little Limbago from Interos on trends in the human element of security. Our guest is Gidi Cohen from Skybox with Vulnerability and Threat Trends. And the Governor o…
C
CyberWire Daily
1
Notes from the underground: data breach extortion and a criminal market shuts down. International cooperation against ransomware. Cyber risk and higher education.
25:37
25:37
Play later
Play later
Lists
Like
Liked
25:37
Data breach extortion seems to be an emerging criminal trend. Notes on a darknet market’s retirement. Verizon advises Visible users to look to their credentials. Windows users’ attention is drawn to seven potentially serious vulnerabilities (all patchable). The Necro botnet is installing Monero cryptojackers. Organizing an international response to…
C
Caveat
1
Government agencies have different obligations on keeping data.
41:34
41:34
Play later
Play later
Lists
Like
Liked
41:34
Guest Paul Robichaux of Quest Software joins Dave to talk about how government agencies can better protect citizen data, Ben has a story about the European Union considering a mandate for common chargers for all phones, and Dave's got the story an Uber driver in the UK getting locked out of his account because of facial recognition software. While …
H
Hacking Humans
1
Physical pen testing: You've got to be able to think on your feet.
47:10
47:10
Play later
Play later
Lists
Like
Liked
47:10
Guest Marina Ciavatta CEO at Hekate talks with Dave about some of her social engineering and pen testing experiences, Dave's got a story is about getting your family to use a password manager, Joe's story is about NFTs (non-fungible tokens) and scams that have arisen around them, and our Catch of the Day is from listener William and it turns out Da…
C
CyberWire Daily
1
Cyber Espionage, again. Patched SolarWinds yet? Patch Tuesday. The international conference on ransomware has begun. Booter customers get a warning. A disgruntled insider alters aircraft records.
29:39
29:39
Play later
Play later
Lists
Like
Liked
29:39
A Chinese-speaking APT is distributing the MysterySnail RAT in what appears to be a cyberespionage campaign. Some users still haven’t patched vulnerable SolarWinds instances. Notes on yesterday’s Patch Tuesday. The US-convened international ransomware conference kicked off today, and Russia wasn’t invited. Former users of a criminal booter service …
C
CyberWire Daily
1
Espionage by password spraying, and espionage via peanut butter sandwich. Ransomware and DDoS warnings. Two journalists get the Nobel Peace Prize
29:59
29:59
Play later
Play later
Lists
Like
Liked
29:59
Teheran is running password spraying attacks (especially on Thursdays and Sundays). More on the renewed popularity of DDoS attacks. NCSC warns British businesses against ransomware. Two journalists win the Nobel Peace Prize. Joe Carrigan shares his thoughts on GriftHorse. Our guest is Bindu Sundaresan from AT&T Cybersecurity football season and cyb…
The practice of securing a device that connects to a network in order to facilitate communication with other devices on the same or different networks.By CyberWire Inc.
The difference between organizational employee job requirements and the available skillsets in the potential employee pool.By CyberWire, Inc.
C
CSO Perspectives (public)
1
Data loss protection: around the Hash Table.
34:35
34:35
Play later
Play later
Lists
Like
Liked
34:35
Four members of the CyberWire’s hash table of experts: Tom Quinn - CISO - T. Rowe Price Associates Nikk Gilbert - CISO - Cherokee Nation Businesses Dawn Cappelli - VP of Global Security and CISO for Rockwell Automation Gary McAlum - CSO- USAA discuss the things they worry about when it comes to data loss protection.…
C
CyberWire Daily
1
Extra: Let's talk about Facebook's research. [Caveat]
44:05
44:05
Play later
Play later
Lists
Like
Liked
44:05
Our guest is author and journalist Steven Levy. He’s editor-at-large at Wired and his most recent book is "Facebook: The Inside Story. Steven offers his insights on Facebook’s internal research teams, Ben shares a newly-decided court case on whether Big Tech companies can be sued under the Anti-Terrorism statute, and Dave's got the story of some wa…
C
CyberWire Daily
1
Brandon Karpf: A sailor of the 21st century. [Transitioning service member] [Career Notes]
10:57
10:57
Play later
Play later
Lists
Like
Liked
10:57
Lieutenant in the US Navy and Skillbridge Fellow at the CyberWire, Brandon Karpf, knew he wanted to join the military at a young age. He achieved that through the US Naval Academy where he was a member of the men's heavyweight rowing team. Commissioning into the cryptologic field as a naval cryptologic warfare officer, Brandon was sent to MIT for a…
C
Career Notes
1
Brandon Karpf: A sailor of the 21st century. [Transitioning service member]
10:57
10:57
Play later
Play later
Lists
Like
Liked
10:57
Lieutenant in the US Navy and Skillbridge Fellow at the CyberWire, Brandon Karpf, knew he wanted to join the military at a young age. He achieved that through the US Naval Academy where he was a member of the men’s heavyweight rowing team. Commissioned as a cryptologic warfare officer, Brandon was sent to MIT for a graduate degree where he experien…
C
CyberWire Daily
1
Taking a closer look at UNC1151. [Research Saturday]
18:11
18:11
Play later
Play later
Lists
Like
Liked
18:11
Matt Stafford, Senior Threat Intelligence Researcher, from Prevailion joins Dave to talk about their work on "Diving Deep into UNC1151’s Infrastructure: Ghostwriter and beyond." Prevailion’s Adversarial Counterintelligence Team (PACT) used advanced infrastructure hunting techniques and Prevailion’s visibility into threat actor infrastructure creati…
Matt Stafford, Senior Threat Intelligence Researcher, from Prevailion joins Dave to talk about their work on "Diving Deep into UNC1151’s Infrastructure: Ghostwriter and beyond." Prevailion’s Adversarial Counterintelligence Team (PACT) used advanced infrastructure hunting techniques and Prevailion’s visibility into threat actor infrastructure creati…
C
CyberWire Daily
1
Fancy Bear’s snuffling at Gmail credentials. FIN12’s threat to healthcare, and BlackMatter’s threat to agriculture. REvil tries to reestablish itself in the underworld. Twitch update. Sachkov is charged ...
25:03
25:03
Play later
Play later
Lists
Like
Liked
25:03
Google warns fourteen-thousand Gmail users that Fancy Bear has probably been after their passwords. FIN12, a fast-running ransomware group, is after hospitals’ and healthcare providers’ money. BlackMatter remains active against the agriculture sector. REvil is back and talking on the RAMP forum, but so far it’s getting a chilly reception. Twitch tr…
C
CyberWire Daily
1
Espionage, mostly cyber but also physical. DDoS in the Philippines. TSA regulations for rail and airline cybersecurity are coming. US DoJ promises civil action for cyber failures. Twitch update. And NFTs ...
26:11
26:11
Play later
Play later
Lists
Like
Liked
26:11
Cyberespionage seems undeterred by stern warnings. DDoS hits the Philippine Senate. The US Department of Homeland Security intends to issue cybersecurity regulations for passenger rail and airlines. The US Department of Justice intends to use the False Claims Act to bring civil actions against government contractors who fail to follow “recognized c…
