GhostFrame: a stealthy phishing kit

Chinese threat actors deploy Brickstorm malware. The critical React2Shell vulnerability is under active exploitation. Cloudflare’s emergency patch triggered a brief global outage. Phishing kits pivot to fake e-commerce sites. The European Commission fines X(Twitter) €120 million for violating the Digital Services Act. Predator spyware has a new bag of tricks. A Russian physicist gets 21 years in prison for cybercrimes. Twin brothers are arrested for allegedly stealing and destroying government data. Our guest is Blair Canavan, Director of Alliances - PKI & PQC Portfolio from Thales, discussing post quantum cryptography. Smart toilet encryption claims don’t hold water. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today on our Industry Voices segment, we are joined by Blair Canavan, Director of Alliances - PKI & PQC Portfolio from Thales, discussing post quantum cryptography (PQC). Listen to Blair’s full conversation here.

Selected Reading

Chinese hackers used Brickworm malware to breach critical US infrastructure (TechRadar)

React2Shell critical flaw actively exploited in China-linked attacks (BleepingComputer)

Cloudflare blames today's outage on emergency React2Shell patch (Bleeping Computer)

SMS Phishers Pivot to Points, Taxes, Fake Retailers (Krebs on Security)

Threat Spotlight: Introducing GhostFrame, a new super stealthy phishing kit (Barracuda)

EU issues €120 million fine to Elon Musk's X under rules to tackle disinformation  (The Record)

Predator spyware uses new infection vector for zero-click attacks (Bleeping Computer)

Russian scientist sentenced to 21 years on treason, cyber sabotage charges (The Record)

Twins with hacking history charged in insider data breach affecting multiple federal agencies (Cyberscoop)

‘End-to-end encrypted’ smart toilet camera is not actually end-to-end encrypted (TechCrunch)- kicker

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices