From secure to clone-tastic.

Published: Sept. 4, 2024, 8:10 p.m.

Researchers find Yubikeys vulnerable to cloning. Google warns of a serious zero-day Android vulnerability. Zyxel releases patches for multiple vulnerabilities. D-Link urges customers to retire unsupported vulnerable routers. Hackers linked to Russia and Belarus target Latvian websites. The Federal Trade Commission (FTC) reports a sharp rise in Bitcoin ATM-related scams. Dutch authorities fine Clearview AI over thirty million Euros over GDPR violations. Threat actors are misusing the MacroPack red team tool to deploy malware. CISA shies away from influencing content moderation. Our guest is George Barnes, Cyber Practice President at Red Cell Partners and Fmr. Deputy Director of NSA discussing his experience at the agency and now in the VC world. Unauthorized Wi-Fi on a Navy warship Leads to Court-Martial.\xa0\nRemember to leave us a 5-star rating and review in your favorite podcast app.\nMiss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you\u2019ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.\n\nCyberWire Guest\nOur guest is George Barnes, Cyber Practice President and Partner at Red Cell Partners and judge at the 2024 DataTribe Challenge, discussing his experience on both sides, having been at NSA and now in the VC world. Submit your startup to potentially be selected to be part of a startup competition like no other by September 27, 2024.\n\nSelected Reading\nYubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel (Ars Technica)\nGoogle Issues Android Under Attack Warning As 0-Day Threat Hits Users (Forbes)\nZyxel Patches Critical Vulnerabilities in Networking Devices (SecurityWeek)\nD-Link says it is not fixing four RCE flaws in DIR-846W routers (Bleeping Computer)\nHackers linked to Russia and Belarus increasingly target Latvian websites, officials say (The Record)\nNew FTC Data Shows Massive Increase in Losses to Bitcoin ATM Scams (FTC)\nDutch DPA imposes a fine on Clearview because of illegal data collection for facial recognition | Autoriteit Persoonsgegevens (Autoriteit Persoonsgegevens)\nRed Teaming Tool Abused for Malware Deployment (Infosecurity Magazine)\nCISA moves away from trying to influence content moderation decisions on election disinformation (CyberScoop)\nHow Navy chiefs conspired to get themselves illegal warship Wi-Fi (Navy Times)\n\nShare your feedback.\nWe want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.\xa0\n\nWant to hear your company in the show?\nYou too can reach the most influential leaders and operators in the industry. Here\u2019s our media kit. Contact us at cyberwire@n2k.com to request more info.\nThe CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. \xa9 N2K Networks, Inc.\nLearn more about your ad choices. Visit megaphone.fm/adchoices