Storm clouds over the waterworks.

CISA rides out a Cyber Storm. The EU struggles to share cyber threat information. Nightmare Eclipse drops another Defender zero-day. TASK#STOMP steals business documents. North Korean operatives fake their way through job interviews. A genetics lab pays $700,000 over a phishing breach. A zero-day in Meta’s Muse AI assistant opens the door to privilege hijacking. Marc Woolward, Senior Advisor to Humanix and former CTO for Goldman Sachs, discussing social engineering and vishing attacks. Infiltrating Team PCP.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Marc Woolward, former CTO for Goldman Sachs and Senior Advisor to Humanix, discussing social engineering/vishing attacks and how ShinyHunters continues to use this method on other industries.

Selected Reading

CISA’s Cyber Storm X tests cybersecurity preparedness across transportation, water and wastewater sectors (Industrial Cyber)

Another worry for water systems: infostealer exposure (CyberScoop)

Poor data sharing undermining EU cyber defences, auditors say (Reuters)

New TASK#STOMP Windows Backdoor Enables Continuous Document Theft (Hackread)

New Windows Defender zero-day blocks Microsoft antivirus updates (Bleeping Computer)

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme (SecurityWeek)

Ambry Genetics Pays $700K HIPAA Fine in Phishing Breach (GovInfo Security)