CVSS Vulnerability Exploits and Cybersecurity Practices

The Dem’s 2024 party platform touches on cybersecurity goals. The feds warn of increased Iranian influence operations. A severe security flaw has been discovered in a popular WordPress donation plugin. The Lazarus Group exploits a Windows zero-day to install a rootkit. Krebs on Security takes a closer look at the significant data breach at National Public Data. Toyota confirms a data breach after their data shows up on a hacking forum. A critical Jenkins vulnerability is added to CISA’s Known Exploited Vulnerabilities catalog. Cybercriminals steal credit card info from the Oregon Zoo. Guest CJ Moses, CISO at Amazon, discussing partnership and being a good custodian of the community in threat intel and information sharing. CISA gets new digs. 

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Guest CJ Moses, CISO at Amazon, speaks with N2K’s Brandon Karpf about partnership and being a good custodian of the community in threat intel and information sharing at re:Inforce 2024.

Selected Reading

Democratic Party Platform Contains Three Cyber Goals (Metacurity)

US warns of Iranian hackers escalating influence operations (Bleeping Computer)

Critical WordPress Plugin RCE Vulnerability Impacts 100k+ Sites (Cyber Security News)

Windows driver zero-day exploited by Lazarus hackers to install rootkit (Bleeping Computer)

National Public Data Published Its Own Passwords (Krebs on Security)

Toyota confirms breach after stolen data leaks on hacking forum (Bleeping Computer)

Critical Jenkins vulnerability added to CISA’s known vulnerabilities catalog (SC Media)

Cybercriminals siphon credit card numbers from Oregon Zoo website (The Record)

CISA to Get New $524 Million Headquarters in DC, Backed by Inflation Reduction Act Funding (SecurityWeek)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices