From China with love (and Malware).

CyberWire Daily

N2K Networks, Inc.

Daily News, Tech News, News, Technology

4.6 • 1K Ratings

🗓️ 6 March 2025

⏱️ 30 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

US Justice Department charges employees of Chinese IT contractor i-Soon. Silk Typhoon targets the IT supply chain for initial access. Chrome extensions that change shape. Attackers target airflow misconfigurations. LibreOffice vulnerability opens the door to script-based attacks. NSO group leaders face charges in spyware case. Today, our own Dave Bittner is our guest as he appeared on the Adopting Zero Trust podcast at ThreatLocker’s Zero Trust World 2025 event with hosts Elliot Volkman and Neal Dennis and guest Dr. Chase Cunningham. And turning $1B into thin air. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today, our own Dave Bittner is in our guest spot as he appeared on the Adopting Zero Trust podcast at ThreatLocker’s Zero Trust World 2025 event with hosts Elliot Volkman and Neal Dennis and guest Dr. Chase Cunningham aka Dr. Zero Trust. Adopting Zero Trust is an ongoing conversation about the people and organizations adopting Zero Trust. You can catch the full episode here where Dave and Dr. Zero Trust weigh the difference between delivering refined news and raw perspective, hitting critical mass for AI, and the current political environment. Selected Reading US charges Chinese nationals in cyberattacks on Treasury, dissidents and more (The Record) Silk Typhoon targeting IT supply chain (Microsoft) Malicious Chrome extensions can spoof password managers in new attack (Bleeping Computer) Apache Airflow Misconfigurations Leak Login Credentials to Hackers (GB Hackers) LibreOffice Flaw Allows Attackers to Run Arbitrary Scripts via Macro URL (GB Hackers) Exploited VMware ESXi Flaws Put Many at Risk of Ransomware, Other Attacks (SecurityWeek) Catalan court says NSO Group executives can be charged in spyware investigation (TechCrunch) Former top NSA cyber official: Probationary firings ‘devastating’ to cyber, national security (CyberScoop) Financial Organizations Urge CISA to Revise Proposed CIRCIA Implementation (SecurityWeek) North Koreans finish initial laundering stage after more than $1 billion stolen from Bybit (The Record) Share your feedback. We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the Cyberwire Network, powered by N2K.
0:09.7	We've all been there.
0:15.4	You realize your business needs to hire someone yesterday.
0:19.8	How can you find amazing candidates fast? Well, it's easy. Just use
0:23.9	Indeed. When it comes to hiring, Indeed is all you need. Stop struggling to get your job post noticed.
0:31.0	Indeed's sponsored jobs helps you stand out and hire fast. Your post jumps to the top of search
0:37.2	results, so the right candidates
0:38.9	see it first. And it works. Sponsored jobs on Indeed get 45% more applications than non-sponsored
0:46.0	ones. One of the things I love about Indeed is how fast it makes hiring. And yes, we do actually
0:52.3	use Indeed for hiring here at N2K Cyberwire. Many of my colleagues
0:57.1	here came to us through Indeed. Plus, with sponsored jobs, there are no subscriptions, no long-term
1:03.6	contracts. You only pay for results. How fast is Indeed? Oh, in the minute or so that I've been
1:10.3	talking to you, 23 hires were made on Indeed, according to Indeed data worldwide.
1:16.7	There's no need to wait any longer. Speed up your hiring right now with Indeed.
1:21.3	And listeners to this show will get a $75 sponsored job credit to get your jobs more visibility at Indeed.com slash cyberwire.
1:30.7	Just go to Indeed.com slash cyberwire right now and support our show by saying you heard about Indeed on this podcast.
1:39.3	Indeed.com slash cyberwire. Terms and conditions apply. Hiring, indeed is all you need.
1:45.9	The U.S. Justice Department charges employees of Chinese IT contractor Aysoon. Silk Typhoon targets the IT supply chain for initial access, Chrome extensions that change shape.
2:12.8	Attackers target airflow misconfigurations. Libre Office vulnerability opens the door to script-based
2:18.3	attacks. NSO group leaders face charges in spyware case. Today, our own Dave Bidner is our guest,
2:25.8	as he appeared on the adopting Zero Trust podcast at Threat Locker Zero Trust World 2025 event,
2:31.2	with hosts Elliot Volkman and Neil Dennis and guest Dr. Chase Cunningham
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.