Hackers strike LiteSpeed cache again.
Aug 23, 2024•30 min•Ep 2136•Transcript available on Metacast Episode description
The exploitation of the LiteSpeed Cache Wordpress plugin has begun. Halliburton confirms a cyberattack. Velvet Ant targets Cisco Switch appliances. The Qilin ransomware group harvests credentials stored in Google Chrome. Ham radio enthusiasts pay a million dollar ransom. SolarWinds releases a hotfix to fix a hotfix. A telecom company will pay a million dollar fine over President Biden deepfakes. The Justice Department is suing the Georgia Institute of Technology and an affiliated company for allegedly failing to meet required cybersecurity standards for Pentagon contracts. Today’s guest is Dustin Moody, mathematician at NIST, speaking with N2K's Brandon Karpf about post-quantum encryption standards. When it comes to phishing simulations, sometimes the cure is scarier than the disease.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today’s guest Dustin Moody, mathematician at NIST, talks with N2K's Brandon Karpf about their first 3 finalized post-quantum encryption standards. You can hear more of Brandon and Dustin’s conversation as they go into more detail on the individual standards on Sunday in our Special Edition podcast. Stay tuned.
You can read more on the newly-released standards here. Want to learn more about what post-quantum cryptography is? Check out this resource from NICE.
Selected Reading
Hackers are exploiting critical bug in LiteSpeed Cache plugin (Bleeping Computer)
Oil industry giant Halliburton confirms 'issue' following reported cyberattack (The Record)
China-Nexus Threat Group ‘Velvet Ant’ Exploits Zero-Day on Cisco Nexus Switches (Sygnia)
Qilin ransomware now steals credentials from Chrome browsers (Bleeping Computer)
ARRL IT Security Incident - Report to Members (ARRL: The National Association for Amateur Radio)
SolarWinds Leaks Credentials in Hotfix for Exploited Web Help Desk Flaw (SecurityWeek)
Telecom company hit with $1 million penalty over AI-generated fake Biden robocalls (The Record)
DOJ sues Georgia Tech over allegedly failing to meet cyber requirements for DOD contracts (CyberScoop)
Uni phishing test based on fake Ebola scare prompts apology (The Register)
Share your feedback.
We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.
Want to hear your company in the show?
You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
