BROADCASTS.com

Palo Alto describes the Black Basta ransomware-as-a-service operation. Okta on Scatter Swine, the threat actor that compromised Twilio. Microsoft describes Nobelium's new approach to establishing persistence. Russia's war against Ukraine has induced stresses in the cyber underworld. LastPass discloses a security incident. Josh Ray from Accenture on cyber crime and the cost-of-living crisis. Our own Dave Bittner sits down with Chris Handman from TerraTrue to discuss how he works to transform legal teams into advocates and collaborators that can ensure privacy is baked in every step of the way. And CISA adds ten entries to its Known Exploited Vulnerabilities Catalog.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/11/165\n\nSelected reading.\nThreat Assessment: Black Basta Ransomware (Palo Alto Networks Unit 42)\nMagicWeb: NOBELIUM\u2019s post-compromise trick to authenticate as anyone (Microsoft Threat Intelligence Center)\nMicrosoft Uncovers New Post-Compromise Malware Used by Nobelium Hackers (The Hacker News)\nMicrosoft: Russian hackers gain powerful 'MagicWeb' authentication bypass (ZDNET)\nDetecting Scatter Swine: Insights into a relentless phishing campaign (Okta Security)\nTwilio hackers hit over 130 orgs in massive Okta phishing attack (BleepingComputer)\nTwilio says breach also compromised Authy two-factor app users (TechCrunch)\nHow the war in Ukraine is reshaping the dark web (New Statesman)\nNotice of Recent Security Incident (The LastPass Blog)\nLastPass Says Source Code Stolen in Data Breach (SecurityWeek)\nLastPass developer systems hacked to steal source code (BleepingComputer)\nLearn more about your ad choices. Visit megaphone.fm/adchoices