Malicious packages are found attached to NuGet. Russia will establish its own substitute for VirusTotal. Commodity tools empower low-grade Russian cybercriminals. Malware mealkits, and other notes from the cyber underground. Insights from a Cybersecurity workforce study. Mr Security Answer Person John Pescatore looks at MFA. Drew Rose from Living Security on the very scary human side of cyber attacks. And more details from President Biden’s Executive Order on artificial intelligence.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/12/208

Selected reading.

IAmReboot: Malicious NuGet packages exploit loophole in MSBuild integrations (ReversingLabs) 

Russia to launch its own version of VirusTotal due to US snooping fears (Record).

Russian hacking tool floods social networks with bots, researchers say (Record) 

How Kopeechka, an Automated Social Media Accounts Creation Service, Can Facilitate Cybercrime (Trend Micro)

HP Wolf Security Threat Insights Report Q3 2023 (HP Wolf Security)

How the Economy, Skills Gap and Artificial Intelligence are Challenging the Global Cybersecurity Workforce (ISC2)

Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence (The White House)

Learn more about your ad choices. Visit megaphone.fm/adchoices