A new OpenSSH vulnerability affects Linux systems. The Supreme Court sends social media censorship cases back to the lower courts. Chinese hackers exploit a new Cisco zero-day. HubSpot investigates unauthorized access to customer accounts. Japanese media giant Kadokawa confirmed data leaks from a ransomware attack. FakeBat is a popular malware loader. Volcano Demon is a hot new ransomware group. Google launches a KVM hypervisor bug bounty program.\xa0 Johannes Ullrich from SANS Technology Institute discusses defending against API attacks. Goodnight, Sleep Tight, Don\u2019t Let the Hackers Byte!\nMiss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you\u2019ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.\n\nCyberWire Guest\nGuest is Johannes Ullrich from SANS Technology Institute talking about defending against attacks affecting APIs and dangerous new attack techniques you need to know about. This conversation is based on Johannes\u2019 presentations at the 2024 RSA Conference. You can learn more about them here:\xa0\n\nAttack and Defend: How to Defend Against Three Attacks Affecting APIs\n\nThe Five Most Dangerous New Attack Techniques You Need to Know About\n\n\nSelected Reading\nNew regreSSHion OpenSSH RCE bug gives root on Linux servers (Bleeping Computer)\nUS Supreme Court sidesteps dispute on state laws regulating social media (Reuters)\nChina\u2019s \u2018Velvet Ant\u2019 hackers caught exploiting new zero-day in Cisco devices (The Record)\nHubSpot accounts breach under investigation (SC Media)\nJapanese anime and gaming giant admits data leak following ransomware attack (The Record)\nExposing FakeBat loader: distribution methods and adversary infrastructure (Sekoia.io blog)\nHalcyon Identifies New Ransomware Operator Volcano Demon Serving Up LukaLocker (Halcyon)\nGoogle launches Bug Bounty Program for KVM Hypervisor (Stack Diary)\nHow to Get Root Access to Your Sleep Number Bed (Dillan Mills)\n\nShare your feedback.\nWe want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.\xa0\n\nWant to hear your company in the show?\nYou too can reach the most influential leaders and operators in the industry. Here\u2019s our media kit. Contact us at cyberwire@n2k.com to request more info.\nThe CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. \xa9 N2K Networks, Inc.\nLearn more about your ad choices. Visit megaphone.fm/adchoices