CISA Flags OpenPLC SCADABR XSS

European authorities take down an illegal cryptomixer. An Australian man is sentenced for running an airport evil twin WiFi campaign. Researchers unmask a Scattered LAPSUS$ Hunters impresario. CISA flags a cross-site scripting flaw in OpenPLC ScadaBR. A major South Korean retailer suffers a data breach affecting over 33 million customers. Threat actors abuse digital calendar subscription features. New York’s new hospital cybersecurity mandates may raise the bar nationwide. Scammers target Cyber Monday shoppers. Monday business brief. Ann Johnson speaks with Microsoft’s Amy Hogan-Burney on the Afternoon Cyber Tea segment. Google gets caught reheating someone else’s holiday recipe. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, ⁠Daily Briefing⁠, and you’ll never miss a beat. And be sure to follow CyberWire Daily on ⁠LinkedIn⁠.

Afternoon Cyber Tea segment

Afternoon Cyber Tea host Ann Johnson speaks with Amy Hogan-Burney, Corporate Vice President of Customer Trust and Security at Microsoft, about how Microsoft Is redefining global cyber defense. Ann and Amy discuss Microsoft’s evolving approach to combating global cybercrime and the importance of collaboration across the private and public sectors. You can listen to their full conversation here and catch new episodes of Afternoon Cyber Tea every other Tuesday on your favorite podcast app. 

Selected Reading

Cryptomixer crypto laundering service taken down by law enforcement (Help Net Security)

Man behind in-flight Evil Twin WiFi attacks gets 7 years in prison (Bleeping Computer)

Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’ (Krebs on Security)

U.S. CISA adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog (Security Affairs)

Data breach hits 'South Korea's Amazon,' potentially affecting 65% of country’s population (The Record)

Threat Actors Exploit Calendar Subscriptions for Phishing and Malware (Infosecurity Magazine)

New York Hospital Cyber Rules to 'Raise the Bar' Nationwide (GovInfo Security)

Over 2,000 Fake Shopping Sites Spotted Before Cyber Monday (Hackread)

Guardio secures $80 million in new funding. (N2K Pro Business Briefing)

Google deletes X post after getting caught using a ‘stolen’ AI recipe infographic (Bleeping Computer)

Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.  

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices