More signal, less noise—we distill the day’s critical cyber security news into a concise daily briefing.
Latest episodes
-
24 min
The T-Mobile hacker speaks (we think). SparklingGoblin enters the cyberespionage ring. Is someone stealing dat…
A young man claiming responsibility for the T-Mobile breach talks to the Wall Street Journal. A new cyberespionage group, “SparklingGoblin,” seems particularly interested in educat…
-
23 min
Consequence of the Taliban victory for influence operations and information security. Privateering gangs descr…
Al Qaeda online sources cheer the Taliban’s ascendancy. The new rulers of Afghanistan are likely to have acquired a good deal of sensitive data along with political rule and a quan…
-
25 min
More stolen alt-coin is returned. Accenture reports minimal effects in the alleged LockBit attack. Home router…
More stolen coin is returned in the case of the Poly Network cross-chain hack. Accenture says the incident it sustained had no significant effect, and the LockBit ransomware gang w…
-
19 min
Enabling connectivity enables exposures. [Research Saturday]
Guest Nathan Howe, Vice President of Emerging Technology at Zscaler, joins Dave to discuss his team's work, "2021 “Exposed” Report Reveals Corporate and Cloud Infrastructures More…
-
18 min
Using the human body as a wire-like communication channel. [Research Saturday]
Guest Dr. Shreyas Sen, a Perdue University associate professor of electrical and computer engineering, joins us to discuss the following scenario:. Instead of inserting a card or s…
-
20 min
Paying for the bomb the 21st century way. Domestic Kitten’s international romp. Malware versus gamers. Patch T…
What’s North Korea doing with all that money the Lazarus Group steals? Buying atom bombs, apparently. Iran’s Domestic Kitten is scratching at some international surveillance target…
-
23 min
A junta shuts down a nation’s data networks. Lessons from multi-domain ops against ISIS? SilentFade returns. I…
Myanmar blocks data networks. Notes on offensive cyber operations, from present and former Five Eyes officials. SilentFade seems to be back, with more ad fraud. Iranian cyber opera…
-
47 min
In the clear: what it's like working as a woman in the cleared community. [Special Edition]
This special edition podcast highlights three women, Priyanka, Ashley and Lauren, who chose to focus their careers in cybersecurity for the mission-based organization Northrop Grum…
-
30 min
Security platforms vs best of breed point products: What should you deploy? [CyberWire-X]
For 20 years, the cybersecurity practitioner’s goto move when confronted with a new risk or compliance requirement has been to install a technical tool somewhere in the security st…
-
6 min
Tom Gorup: Fail fast and fail forward. [Operations] [Career Notes]
Vice President of Security and Support Operations of Alert Logic Tom Gorup shares how his career path led him from tactics learned in Army infantry using machine guns and claymores…
-
18 min
SOAR – a first principle idea.
Rick explains the network defender evolution from defense-in-depth in the 1990s, to intrusion kill chains in 2010, to too many security tools and SOAR in 2015, and finally to devse…
-
28 min
Security operations centers: around the Hash Table.
Four members of the CyberWire’s Hash Table of experts:Don Welch: Interim CIO of Penn State UniversityHelen Patton: CISO for Ohio State UniversityBob Turner: CISO for the University…
-
21 min
Cybersecurity First Principles: DevSecOps.
This is the fifth episode in a planned series that discusses the development of a general purpose cybersecurity strategy for all network defender practitioners-- be they from the c…
-
17 min
Encore: Seedworm digs Middle East intelligence. [Research Saturday]
Researchers at Symantec have been tracking Seedworm, a cyber espionage group targeting the Middle East as well as Europe and North America. The threat group targets government agen…
-
29 min
Encore: Separating fools from money. [Hacking Humans]
Dave shares a story of airport penetration testing with high degree of yuck-factor. Joe explores research on protecting passwords from social engineering. The catch-of-the-day come…
-
26 min
Bear tracks all over the US Government’s networks. Pandas and Kittens and Bears, oh my... Emotet’s back. Spywa…
The US continues to count the cost of the SVR’s successful cyberespionage campaign. Attribution, and why it’s the TTPs and not the org chart that matters. Emotet makes an unhappy h…