Playing doctor with cyberattacks.

Jul 25, 2024

A North Korean hacking group targets healthcare, energy, and finance sectors. Leaked documents from Leidos appear on the dark web. A Middle Eastern bank faces a massive DDoS attack. Crowdstrike outage fallout updates. HHS cybersecurity audit reveals cloud security gaps. Docker patches critical vulnerability again. Google enhances Chrome user protections. Threat Vector segment explores social engineering attacks with a focus on vishing and smishing. AI cameras in Paris for the Summer Olympics.

Ask episode

Chapters

Transcript

Episode notes

Intro

00:00 • 3min

Cybersecurity Threats and Breaches

03:14 • 6min

Security Vulnerabilities in Docker Engine and Enhanced Protection in Chrome

08:57 • 7min

Understanding Vishing, Smishing, and Phishing in Social Engineering Scams

15:39 • 6min

Paris' Surveillance Technology for the Olympics and Privacy Concerns

22:06 • 5min

A North Korean hacking group targets healthcare, energy and finance. Leaked Leidos documents surface on the dark web. A Middle Eastern financial institution suffered a record-breaking DDoS attack. The latest tally on the fallout from the Crowdstrike outage. A cybersecurity audit of HHS reveals significant cloud security gaps. Docker patches a critical vulnerability for the second time. Google announced enhanced protections for Chrome users. In our latest Threat Vector segment, David Moulton speaks with Sama Manchanda, a Consultant at Unit 42, to explore the evolving landscape of social engineering attacks. If you’re heading to Paris for the Summer Olympics, smile for the AI cameras.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

In this segment of Threat Vector, David Moulton, Director of Thought Leadership at Unit 42, engages with Sama Manchanda, a Consultant at Unit 42, to explore the evolving landscape of social engineering attacks, particularly focusing on vishing and smishing.

As election season heats up, these threats are becoming more sophisticated, exploiting our reliance on mobile devices and psychological tactics. Sama provides expert insights into the latest trends, the psychological manipulations used in these attacks, and the specific challenges they pose to individuals and the democratic process. You can listen to Threat Vector every Thursday starting next week on the N2K CyberWire network. Check out the full episode with David and Sama here.

Selected Reading

Mandiant: North Korean Hackers Targeting Healthcare, Energy (BankInfo Security)

Data pilfered from Pentagon IT supplier Leidos (The Register)

DDoS Attack Lasted for 6 Days, Record created for the duration of the Cyberattack (Cyber Security News)

Threat Actor Distributes Python-Based Information Stealer Using a Fake Falcon Sensor Update Lure (CrowdStrike)

Fortune 500 stands to lost $5bn plus from CrowdStrike incident (Computer Weekly)

HHS audit finds serious gaps in cloud security at agency office (SC Media)

Docker re-fixes a critical authorization bypass vulnerability (CSO Online)

Google Boosts Chrome Protections Against Malicious Files (SecurityWeek)

At The 2024 Summer Olympics, AI Is Watching You (WIRED)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

Learn more about your ad choices. Visit megaphone.fm/adchoices