A phishing campaign targets nearly 12,000 GitHub repositories. The BlackLock ransomware group is one to watch. A federal judge orders reinstatement of workers at CISA. Over 100 car dealership websites suffer a supply chain attack, and Hellcat breaches Jaguar Land Rover. Researchers uncover a major vulnerability affecting RSA encryption keys. A Life Insurance Company notifies 355,500 individuals of a December 2024 data breach. A researcher releases a decryptor for Akira ransomware. A new mapping database aims to help NGOs and high-risk individuals find security tools. Tim Starks from CyberScoop reports that trade groups fear a cybersecurity blackout if a key panel and vital cyber law aren’t renewed. A fundamental shift of our understanding of hash tables.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today our guest is Tim Starks from CyberScoop is discussing how "Trade groups worry information sharing will worsen without critical infrastructure panel, CISA law renewal."
Selected Reading
Fake "Security Alert" issues on GitHub use OAuth app to hijack accounts (Bleeping Computer)
BlackLock Ransomware Strikes Over 40 Organizations in Just Two Months (GB Hackers)
Federal Judges Block Trump's Mass Firings of Federal Workers (BankInfo Security)
100 Car Dealerships Hit by Supply Chain Attack (SecurityWeek)
Jaguar Land Rover Breached by HELLCAT Ransomware Group using Jira Credentials (Cyber Security News)
Millions Of RSA Key Exposes Serious Flaws That Can Be Exploited (Cyber Security News)
Insurer Notifying 335,500 Customers, Agents, Others of Hack (BankInfo Security)
New Akira ransomware decryptor cracks encryptions keys using GPUs (Bleeping Computer)
Security Database Aims to Empower Non-Profits (Infosecurity Magazine)
Undergraduate Disproves 40-Year-Old Conjecture, Invents New Kind of Hash Table (WIRED)
Share your feedback.
We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.
Want to hear your company in the show?
You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices