Ring around the ransom.

Vishing attacks target hedge funds. Metabase Cloud breached by zero-day flaw. Cyberattack disrupts North Carolina Ports operations. The Chinese government has launched a security review of Palo Alto Networks products. US defense supplier breached by phishing attack. Healthcare software provider breach affected 3.8 million people. New macOS malware spreads via ClickFix attacks. Microsoft and Apple issue new security updates. Cryptography expert says new AI cryptanalysis results show promise, but not an AES breakthrough. James Turgal, Optiv Security’s vice president, cyber risk, strategy and board relations, is discussing how Iranian operators and their proxies appear to pursue disruption. And a Kentucky Fried Chicken order doxxes Chinese spyware operator.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by James Turgal, Optiv Security’s vice president, cyber risk, strategy and board relations, discussing how Iranian operators and their proxies appear to pursue disruption by exploiting poorly secured operational technology in sectors such as water, energy, healthcare, and transportation.

Selected Reading

Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group (BleepingComputer)

Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments (GTIG)

Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigate (The Record)

China launches cybersecurity review into Palo Alto Networks products (Reuters)

Attacker phished way into US defense supplier's Microsoft 365 account (The Register)

Unlimited Technology Systems Data Breach Affects 3.8 Mi