CISO Talk by James Azar
CyberHub Podcast
🚨 Cyber News: Danish Energy Firms Cyberattack, Mr. Cooper Breach, Bibi Wiper Malware, Ironwind Malware, PyPI Secrets
1×
0:00
Current time: 0:00 / Total time: -14:38
-14:38

🚨 Cyber News: Danish Energy Firms Cyberattack, Mr. Cooper Breach, Bibi Wiper Malware, Ironwind Malware, PyPI Secrets

Today’s top cybersecurity news and the latest from Practicing CISO James Azar, tune in to hear how the latest headlines change the way we practice cybersecurity & defend your organization

Cyberhub Podcast Summary - November 14, 2023

In the latest episode of the Cyberhub Podcast, aired on November 14, 2023, the host, despite battling a persistent bug, delved into a series of significant cybersecurity incidents and developments.

Key Highlights:

1. Danish Energy Sector Cyberattack: The podcast began with disturbing news from Denmark, where 22 energy organizations were compromised in May 2023. The attackers exploited vulnerabilities in Zyxel firewalls, with links to Sandworm, a Russian state-sponsored group.

2. Mr. Cooper Breach: The episode also covered the Mr. Cooper cyberattack, revealing that customer data was exposed during the breach on October 31st. Mr. Cooper, a major mortgage lending company, is still investigating the extent of the compromise.

3. Iran's Cyber Activities: The host discussed Iran's increasing cyber offensive, aligning with North Korea, Russia, and China. A new phishing campaign targeting Middle Eastern government entities was highlighted, involving a new downloader, Ironwind, linked to the TA402 group.

4. Bibi Wiper Malware Expansion: The podcast touched on the evolution of the Bibi Wiper Malware, initially targeting Linux systems and now expanded to Windows. This malware is known for overwriting data and preventing recovery.

5. Juniper Device Vulnerabilities: An urgent call was made for federal agencies to secure their Juniper devices against four vulnerabilities that are being exploited in remote code execution attacks.

6. PyPI Package Secrets Leak: Tom Forbes from GitGuardian discovered thousands of secrets in PyPI packages, including critical credentials, highlighting a significant security oversight in package management.

7. Royal Ransomware Operations: The FBI investigations revealed the Royal ransomware operation, linked to over $275 million in ransom demands and targeting around 350 known victims globally.

The episode concluded with a reminder for listeners to stay cyber safe and an invitation to share stories or contact the podcast team through their website or LinkedIn page.

Listeners were encouraged to subscribe and rate the podcast on various platforms, including Google Play, Apple, and Spotify. The host emphasized the importance of cybersecurity awareness and the continuous threat landscape in the digital world.

Leave a comment

Story Links:

https://www.securityweek.com/22-energy-firms-hacked-in-largest-coordinated-attack-on-denmarks-critical-infrastructure/

https://www.bleepingcomputer.com/news/security/mortgage-giant-mr-cooper-says-customer-data-exposed-in-breach/

https://thehackernews.com/2023/11/new-campaign-targets-middle-east.html

https://thehackernews.com/2023/11/new-bibi-windows-wiper-targets-windows.html

https://www.bleepingcomputer.com/news/security/cisa-warns-of-actively-exploited-juniper-pre-auth-rce-exploit-chain/

https://www.securityweek.com/pypi-packages-found-to-expose-thousands-of-secrets/

https://www.bleepingcomputer.com/news/security/fbi-royal-ransomware-asked-350-victims-to-pay-275-million/

Thank you for watching and Please Don't forget to Like this video and Subscribe to my Channel!

Apply now to be a featured partner on the show: https://www.cyberhubpodcast.com/contact

******

Listen here: https://linktr.ee/cyberhubpodcast

SubStack:

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.

Discussion about this podcast

CISO Talk by James Azar
CyberHub Podcast
Today’s top cybersecurity news and the latest from Practicing CISO James Azar, tune in to hear how practitioners read, view and work after hearing the latest headlines and how these stories help keep practitioners sharp and ready.