Intro

The CISA and FBI warn that Ghost ransomware has breached organizations in over 70 countries. President Trump announces his pick to lead the DOJ’s National Security Division. A new ransomware strain targets European healthcare organizations. Researchers uncover four critical vulnerabilities in Ivanti Endpoint Manager. Microsoft has patched a critical improper access control vulnerability in Power Pages. The NSA updates its Ghidra reverse engineering tool. A former U.S. Army soldier admits to leaking private call records. Our guest is Stephen Hilt, senior threat researcher at Trend Micro, sharing the current state of the English cyber underground market. The pentesters’ breach was simulated — their arrest was not. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Our guest is Stephen Hilt, senior threat researcher at Trend Micro, sharing the current state of the English cyber underground market. Learn more in the report. 

Selected Reading

CISA and FBI: Ghost ransomware breached orgs in 70 countries (Bleeping Computer)

Trump to nominate White House insider from first term to lead DOJ’s National Security Division (The Record)

New NailaoLocker ransomware used against EU healthcare orgs (Bleeping Computer)

PoC Exploit Published for Critical Ivanti EPM Vulnerabilities (SecurityWeek)

Microsoft Patches Exploited Power Pages Vulnerability (SecurityWeek)

NSA Added New Features to Supercharge Ghidra 11.3 (Cyber Security News)

Army soldier linked to Snowflake extortion to plead guilty (The Register)

Katie Arrington Returns to Pentagon as DoD CISO (GovInfo Security)

Penetration Testers Arrested by Police During Authorized Physical Penetration Testing (Cyber Security News)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices