BROADCASTS.com

CISA and the FBI issue a joint Cybersecurity Advisory on exploitation of Microsoft Exchange Online. Implementing the US National Cybersecurity Strategy. FortiGuard discovers a new LokiBot campaign. Training code turns out to be malicious in a new proof-of-concept attack discovered on GitHub. Russia resumes its pursuit of a "sovereign Internet." The GRU's offensive cyber tactics. Chris Novak from Verizon discusses business email compromise and the 2023 DBIR. Our guest is Joy Beland of Summit 7 on the role of Managed Service Providers in the supply chain to the Defense Industrial Base. And a probable Ukrainian false-flag operation.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/132\n\nSelected reading.\nCISA and FBI Release Cybersecurity Advisory on Enhanced Monitoring to Detect APT Activity Targeting Outlook Online (Cybersecurity and Infrastructure Security Agency CISA)\nEnhanced Monitoring to Detect APT Activity Targeting Outlook Online (Cybersecurity and Infrastructure Security Agency CISA)\nHow a Cloud Flaw Gave Chinese Spies a Key to Microsoft\u2019s Kingdom (WIRED)\nChinese hackers breached U.S. and European government email through Microsoft bug (Record)\nFACT SHEET: Biden-Harris Administration Publishes the National Cybersecurity Strategy Implementation Plan | The White House (The White House)\nNational Cybersecurity Strategy Implementation Plan (White House)\nLokiBot Campaign Targets Microsoft Office Document Using Vulnerabilities and Macros (Fortinet Blog)\nNew PoC Exploit Found: Fake Proof of Concept with Backdoor Malware (Uptycs)\nRussia Is Trying to Leave the Internet and Build Its Own (Scientific American)\nThe GRU's Disruptive Playbook (Mandiant)\xa0\nHack Blamed on Wagner Group Had Another Culprit, Experts Say (Bloomberg)\xa0\nLearn more about your ad choices. Visit megaphone.fm/adchoices