Distributed denial-of-service attacks against Lithuania. Dark Crystal RAT described. Iranian steel mill suspends production due to cyberattack. Bumblebee rising. CISA adds to its Known Exploited Vulnerabilities Catalog. Music pirate sites brought down by US and Brazilian authorities. Joe Carrigan looks at Apple\u2019s private access tokens. Mister Security Answer Person John Pescatore drops some sboms. And where do Russian intelligence officers go after they\u2019ve been PNGed?\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/11/123\n\nSelected reading.\nLithuania targeted by massive Russian cyberattack over transit blockade (Newsweek)\nRussia's Killnet hacker group says it attacked Lithuania (Reuters)\nKillnet, Kaliningrad, and Lithuania\u2019s Transport Standoff With Russia (Flashpoint)\nUkraine Targeted by Dark Crystal RAT (DCRat) | FortiGuard Labs (Fortinet Blog)\nCyberattack Forces Iran Steel Company to Halt Production (SecurityWeek)\nIran\u2019s steel industry halted by cyberattack (Jerusalem Post)\nBumblebee: New Loader Rapidly Assuming Central Position in Cyber-crime Ecosystem (Broadcom Software Blogs)\nCISA Adds Eight Known Exploited Vulnerabilities to Catalog (CISA)\xa0\nUS, Brazil seize 272 websites used to illegally download music (BleepingComputer)\xa0\nSwiss intel service: Watch out for redeployed Russian spies (AP News)\nLearn more about your ad choices. Visit megaphone.fm/adchoices