CyberWire Daily When "out of the box" becomes "out of control."
8 snips
May 29, 2025 Tim Starks, a senior reporter at CyberScoop specializing in cybersecurity, dives into pressing issues like the controversial collection of children's DNA for criminal databases. He highlights a troubling malware incident involving ASUS routers and new tactics from the APT41 group using Google Calendar for attacks. The discussion also covers the Salt Typhoon breach, revealing serious national security failures and the need for better public-private collaboration. Additionally, Starks addresses Victoria's Secret facing a significant cybersecurity crisis and its potential impact on consumer data.
AI Snips
Chapters
Transcript
Episode notes
Ethical Issues in DNA Collection
- The U.S. collected DNA from over 133,000 migrant children, including minors not charged with crimes.
- This raises ethical concerns about privacy and misuse, as their data entered a criminal database.
ASUS Routers Exploited Without Malware
- Attackers compromised over 9,000 ASUS routers without deploying malware.
- They used legitimate settings to enable persistent backdoors while evading security features.
APT41 Uses Google Calendar C2
- APT41 malware uses Google Calendar for command and control by embedding encrypted data in calendar events.
- This innovative tactic allows inconspicuous communication with compromised hosts.