Google and iVerify argue over the security implications of an Android app. CISA has issued a warning about a critical vulnerability in SolarWinds Web Help Desk. Ransomware attacks on industrial sectors are on the rise. Microsoft introduces mandatory MFA for Azure. Banshee Stealer is a new malware targeting macOS developed by Russian threat actors. A popular flight tracking website exposes users’ personal and professional information. San Francisco cracks down on sites that create deepfake nude photos. Daniel Blackford, Director of Threat Research at Proofpoint, joins us to discuss new threat actor tactics and trends in nation-state cybercrime. Scammers are using Google to scam Google.
Missed an episode? Sign up for our daily intelligence roundup. Daily briefing, and you will never miss a beat. And follow CyberWire Daily on LinkedIn.
CyberWire Guest
Daniel BlackfordDirector of Threat Research at Evidence pointjoined us during his residency at Black Hat to discuss new threat actor tactics and trends in nation-state cybercrime.
Selected reading
Google removes app from Pixel devices after claims it makes phones vulnerable (The recording)
Almost all Google Pixel phones are at risk due to an unpatched bug in the hidden Android app (WIRED)
Vulnerability in SolarWinds Web Help Desk may have been exploited as a zero-day attack (Safety Week)
Microsoft requires MFA for all Azure logins (Infosecurity Magazine)
New macOS malware “Banshee Stealer” costs $3,000 per month (Safety Week)
Dragos reports renewed ransomware attacks on industries, increasing the likelihood that OT networks will be targeted (Industrial Cyber)
CISA publishes eleven advisories on industrial control systems (Health and safety policy)
FlightAware – Disclosed information for pilots and users (404 media)
AI-powered ‘undressing’ websites are being sued (The Edge)
Fraudsters target dozens of Google products with malicious search ads (Malwarebytes)
Share your feedback.
We want to make sure you get the most out of the podcast, so please take a few minutes to share your thoughts with us by leaving our short listener survey while we continually work to improve the show.
Would you like to hear your company on the show?
You too can reach the most influential leaders and operators in the industry. Here is our Media kitContact us at [email protected] to request further information.
CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
