A leak in the chain of command.

DHS suffers a massive data leak. Researchers reveal Volt Typhoon’s sophisticated methods. Cisco patches a firewall zero-day. A suspected coordinated supply chain attack targets public GitHub repositories. Online scams overtake phishing. NIST shares post-quantum cryptography guidance. CISA warns a VMware ESXi vulnerability is under active exploitation. The Federal Election Commission takes systems offline. A Ukrainian national gets prison time for ransomware operations. Our guest is Yonald Chery, CTO from Technology Advancement Center (TAC), discussing securing operational technology in our critical infrastructure. Bitcoin mining gets you in hot water. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

On today’s Industry Voices segment, we are joined by Yonald Chery, CTO from Technology Advancement Center (TAC), discussing securing operational technology in our critical infrastructure takes more than traditional I.T. cybersecurity skills. If you enjoyed this conversation, be sure to check out the full interview here.

Selected Reading

Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents (WIRED)

Silent Train: Volt Typhoon’s Sophisticated Infection Chain into US Targets Exposed (Zero Day)

New Cisco firewall zero-day exploited to crash SSL VPN devices (Bleeping Computer)

Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour (The Register)

Online Scam Volumes Double to Overtake Phishing (Infosecurity Magazine)

NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines (Infosecurity Magazine)

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day (SecurityWeek)

FEC takes down electronic filing platform after attempted hack (Nextgov)

Ukrainian Nefilim and Hive Affiliate Artem Stryzhak Jailed for 70 Months (Hackread)

Heatbit Says Your Water Heater Should Be Mining Bitcoin, and Now It Can (Gizmodo)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices