Ring around the ransom.

Vishing attacks target hedge funds. Metabase Cloud breached by zero-day flaw. Cyberattack disrupts North Carolina Ports operations. The Chinese government has launched a security review of Palo Alto Networks products. US defense supplier breached by phishing attack. Healthcare software provider breach affected 3.8 million people. New macOS malware spreads via ClickFix attacks. Microsoft and Apple issue new security updates. Cryptography expert says new AI cryptanalysis results show promise, but not an AES breakthrough. James Turgal, Optiv Security’s vice president, cyber risk, strategy and board relations, is discussing how Iranian operators and their proxies appear to pursue disruption. And a Kentucky Fried Chicken order doxxes Chinese spyware operator.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined  by James Turgal, Optiv Security’s vice president, cyber risk, strategy and board relations, discussing how Iranian operators and their proxies appear to pursue disruption by exploiting poorly secured operational technology in sectors such as water, energy, healthcare, and transportation.

Selected Reading

Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group (BleepingComputer)

Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments (GTIG)

Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigate (The Record)

China launches cybersecurity review into Palo Alto Networks products (Reuters)

Attacker phished way into US defense supplier's Microsoft 365 account (The Register)

Unlimited Technology Systems Data Breach Affects 3.8 Million Patients (HIPAA Journal)

Mac Malware Drains Crypto Wallets Via Fake CAPTCHA Scam (Huntress)

China-linked LightSpy spyware caught targeting victims in 13 countries, including the US (TechCrunch)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.