Consensus on the Viasat hack: Russia did it. Kaspersky remains under investigation. The Nerbian RAT is out. NPM dependencies exploited, but to what end? Advisories from CISA and its partners.
There’s international consensus on the cyberattack against Viasat. Kaspersky remains under investigation. The Nerbian RAT is out. NPM dependencies are exploited, but to what end? Caleb Barlow examines Russia’s future on the internet. Our guest is Deepen Desai from Zscaler with the latest phishing research. And new advisories from CISA and its partners.
For links to all of today's stories check out our CyberWire daily news briefing:
https://thecyberwire.com/newsletters/daily-briefing/11/91
Selected reading.
Nerbian RAT Using COVID-19 Themes Features Sophisticated Evasion Techniques (Proofpoint)
NPM dependency confusion hacks target German firms (ReversingLabs)
npm Supply Chain Attack Targeting Germany-Based Companies (JFrog)
Adminer in Industrial Products (CISA)
Eaton Intelligent Power Protector (CISA)
Eaton Intelligent Power Manager Infrastructure (CISA)
Eaton Intelligent Power Manager (CISA)
AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere (CISA)
Mitsubishi Electric MELSOFT GT OPC UA (CISA)
CISA Adds One Known Exploited Vulnerability to Catalog (CISA)
Alert (AA22-131A) Protecting Against Cyber Threats to Managed Service Providers and their Customers (CISA)
Protecting Against Cyber Threats to Managed Service Providers and their Customers (CISA)
Russia downed satellite internet in Ukraine -Western officials (Reuters)
US and its allies say Russia waged cyberattack that took out satellite network (Ars Technica)
Western powers blame Russia for Ukraine satellite hack (The Record by Recorded Future)
Russian cyber operations against Ukraine: Declaration by the High Representative on behalf of the European Union (European Council)
Attribution of Russia’s Malicious Cyber Activity Against Ukraine - United States Department of State (United States Department of State)
Russia behind cyber-attack with Europe-wide impact an hour before Ukraine invasion (GOV.UK)
Estonia joins the statement of attribution on cyberattacks against Ukraine (Ministry of Foreign Affairs, Republic of Estonia)
Statement on Russia’s malicious cyber activity affecting Europe and Ukraine (Canada.ca)
Attribution to Russia for malicious cyber activity against European networks (Australian Government Department of Foreign Affairs and Trade)
Russia hacked an American satellite company one hour before the Ukraine invasion (MIT Technology Review)
NSA Probing Reach of Software From Russia’s Kaspersky in US Systems (Bloomberg)
Available Results
Generated results are saved to your library for reuse and search.
Choose Template
Pick the result you want. You can review provider and model before generating.
A concise first-pass summary for understanding the episode quickly.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Explicit actions, next steps, habits, recommendations, and things to avoid.
Repeatable methods, frameworks, mental models, processes, and systems.
A dedicated inventory of concrete resources named in the episode.
A concise first-pass summary for understanding the episode quickly.
A detailed readable summary organized by chapter or topic.
A navigable map of subjects, topic flow, and suggested chapters.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
Reusable atomic knowledge units extracted from the episode.
A comprehensive extraction focused on health practices, protocols, claims, and safety caveats.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Explicit actions, next steps, habits, recommendations, and things to avoid.
A dedicated inventory of concrete resources named in the episode.
A dedicated analysis of warnings, limitations, trade-offs, weak evidence, and uncertainty.
A concise first-pass summary for understanding the episode quickly.
A detailed readable summary organized by chapter or topic.
A navigable map of subjects, topic flow, and suggested chapters.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
Reusable atomic knowledge units extracted from the episode.
A comprehensive extraction focused on health practices, protocols, claims, and safety caveats.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Scientific findings, mechanisms, studies, hypotheses, and the limits of the evidence discussed.
Technologies, AI models, technical methods, capabilities, limitations, and adoption implications.
Investment theses, assets, catalysts, valuation reasoning, time horizons, and risks.
Chronologies, actors, causes, consequences, turning points, and competing historical interpretations.
Policies, proposals, stakeholders, arguments, implementation constraints, and predicted effects.
Career paths, skills, hiring signals, workplace decisions, transitions, and limitations of the advice.
Behavioral mechanisms, biases, motivation, habits, emotions, interventions, and evidence limitations.
Economic mechanisms, incentives, indicators, market structure, forecasts, and uncertainty.
Leadership principles, team systems, organizational design, culture, feedback, and failure modes.
Audience, positioning, messaging, acquisition, retention, experiments, metrics, and failed approaches.
Teaching methods, learning strategies, practice, feedback, assessment, and effectiveness evidence.
Theses, premises, arguments, objections, values, thought experiments, and unresolved questions.
Communication patterns, conflict, boundaries, expectations, repair methods, and contextual limitations.
Books, papers, authors, courses, and other learning resources mentioned in the episode.
Repeatable methods, frameworks, mental models, processes, and systems.
Explicit actions, next steps, habits, recommendations, and things to avoid.
Memorable statements and important claims with attribution and source context.
A dedicated inventory of concrete resources named in the episode.
A dedicated analysis of warnings, limitations, trade-offs, weak evidence, and uncertainty.