Microsoft Exchange zero-days exploited. Supply chain attack reported. New Lazarus activity. Mexican government falls victim to hacktivism. Hacking partial mobilization. Former insider threat.
Two Microsoft Exchange zero-days exploited in the wild. A supply chain attack, possibly from Chinese intelligence services. There’s new Lazarus activity: bring-your-own-vulnerable-driver. The Mexican government falls victim to apparent hacktivism. Flying under partial mobilization’s radar. Betsy Carmelite from Booz Allen Hamilton talks about addressing the cyber workforce skills gap. Our guest Rachel Tobac from SocialProof Security brings a musical approach to security awareness training. How’s your off-boarding program working out?
For links to all of today's stories check out our CyberWire daily news briefing:
https://thecyberwire.com/newsletters/daily-briefing/11/190
Microsoft Releases Guidance on Zero-Day Vulnerabilities in Microsoft Exchange Server (CISA)
Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server (Microsoft Security Response Center)
Warning: New attack campaign utilized a new 0-day RCE vulnerability on Microsoft Exchange Server (GTSC)
URGENT! Microsoft Exchange double zero-day – “like ProxyShell, only different” (Naked Security)
Microsoft confirms two Exchange Server zero days are being used in cyberattacks (The Record by Recorded Future)Microsoft confirms new Exchange zero-days are used in attacks (BleepingComputer)
Two Microsoft Exchange zero-days exploited in the wild. (CyberWre)
CISA Adds Three Known Exploited Vulnerabilities to Catalog (CISA)
Suspected Chinese hackers tampered with widely used customer chat program, researchers say (Reuters)
Report: Commercial chat provider hijacked to spread malware in supply chain attack (The Record by Recorded Future)
CrowdStrike Falcon Platform Identifies Supply Chain Attack via a Trojanized Comm100 Chat Installer (crowdstrike.com)
Amazon‑themed campaigns of Lazarus in the Netherlands and Belgium (WeLiveSecurity)
Lazarus & BYOVD: evil to the Windows core (Virus Bulletin)
Lazarus hackers abuse Dell driver bug using new FudModule rootkit (BleepingComputer)
Mexican government suffers major data hack, president's health issues revealed (Reuters)
Mexican president confirms ‘Guacamaya’ hack targeting regional militaries (The Record by Recorded Future)
Analysis: Mexico data hack exposes government cybersecurity vulnerability (Reuters)
Russians dodging mobilization behind flourishing scam market (BleepingComputer)
Honolulu Man Pleads Guilty to Sabotaging Former Employer’s Computer Network (US Department of Justice)
Available Results
Generated results are saved to your library for reuse and search.
Choose Template
Pick the result you want. You can review provider and model before generating.
A concise first-pass summary for understanding the episode quickly.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
A comprehensive extraction focused on health practices, protocols, claims, and safety caveats.
A dedicated analysis of warnings, limitations, trade-offs, weak evidence, and uncertainty.
Repeatable methods, frameworks, mental models, processes, and systems.
Scientific findings, mechanisms, studies, hypotheses, and the limits of the evidence discussed.
A concise first-pass summary for understanding the episode quickly.
A detailed readable summary organized by chapter or topic.
A navigable map of subjects, topic flow, and suggested chapters.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
Reusable atomic knowledge units extracted from the episode.
A comprehensive extraction focused on health practices, protocols, claims, and safety caveats.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Explicit actions, next steps, habits, recommendations, and things to avoid.
A dedicated inventory of concrete resources named in the episode.
A dedicated analysis of warnings, limitations, trade-offs, weak evidence, and uncertainty.
A concise first-pass summary for understanding the episode quickly.
A detailed readable summary organized by chapter or topic.
A navigable map of subjects, topic flow, and suggested chapters.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
Reusable atomic knowledge units extracted from the episode.
A comprehensive extraction focused on health practices, protocols, claims, and safety caveats.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Scientific findings, mechanisms, studies, hypotheses, and the limits of the evidence discussed.
Technologies, AI models, technical methods, capabilities, limitations, and adoption implications.
Investment theses, assets, catalysts, valuation reasoning, time horizons, and risks.
Chronologies, actors, causes, consequences, turning points, and competing historical interpretations.
Policies, proposals, stakeholders, arguments, implementation constraints, and predicted effects.
Career paths, skills, hiring signals, workplace decisions, transitions, and limitations of the advice.
Behavioral mechanisms, biases, motivation, habits, emotions, interventions, and evidence limitations.
Economic mechanisms, incentives, indicators, market structure, forecasts, and uncertainty.
Leadership principles, team systems, organizational design, culture, feedback, and failure modes.
Audience, positioning, messaging, acquisition, retention, experiments, metrics, and failed approaches.
Teaching methods, learning strategies, practice, feedback, assessment, and effectiveness evidence.
Theses, premises, arguments, objections, values, thought experiments, and unresolved questions.
Communication patterns, conflict, boundaries, expectations, repair methods, and contextual limitations.
Books, papers, authors, courses, and other learning resources mentioned in the episode.
Repeatable methods, frameworks, mental models, processes, and systems.
Explicit actions, next steps, habits, recommendations, and things to avoid.
Memorable statements and important claims with attribution and source context.
A dedicated inventory of concrete resources named in the episode.
A dedicated analysis of warnings, limitations, trade-offs, weak evidence, and uncertainty.