Update on Chinese cyberespionage incident. ICS vulnerabilities. USB attacks. New KEVs. Updates from Russia's hybrid war, as hacktivists swap DDoS attacks and observers draw lessons learned.

Published: July 14, 2023, 8:15 p.m.

Developments in the case of China's cyberespionage against government Exchange users. Industrial controller vulnerabilities pose a risk to critical infrastructure. USB attacks have risen three-fold in the first half of 2023. CISA adds two vulnerabilities to its Known Exploited Vulnerabilities Catalog. Ghostwriter's continued activity focuses on Poland and Ukraine. Hacktivist auxiliaries swap DDoS attacks. Awais Rashid from University of Bristol shares insights on threat modeling. Our guest is Chris Cochran from Huntress on the challenges small and medium sized businesses face with cyber security. And lessons learned from cyber warfare in Russia's war.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/133\n\nSelected reading.\nUK says it's working with Microsoft to understand impact of Chinese email hack (Reuters)\xa0\nWhat we know (and don\u2019t know) about the government email breach (Washington Post)\nYet Another MS CVE: Don\u2019t Get Caught In The Storm! (Cynet)\nChina Hacking Was Undetectable for Some Who Had Less Expensive Microsoft Services (Wall Street Journal)\nSecurity flaws in Honeywell devices could be used to disrupt critical industries (TechCrunch)\nAPT Exploit Targeting Rockwell Automation Flaws Threatens Critical Infrastructure (SecurityWeek)\nRockwell Automation ControlLogix Bugs Expose Industrial Systems to Remote Attacks (The Hacker News)\xa0\nUSB drive malware attacks spiking again in first half of 2023 (BleepingComputer)\nCISA Adds Two Known Vulnerabilities to Catalog (Cybersecurity and Infrastructure Security Agency CISA)\nMalicious campaigns target government, military and civilian entities in Ukraine, Poland (Cisco Talos Blog)\nBelarus-linked hacks on Ukraine, Poland began at least a year ago, report says (Record)\nCrowdsourced Cyber Warfare: Russia and Ukraine Launch Fresh DDoS Offensives (CEPA).\nCyber Operations during the Russo-Ukrainian War (CSIS)\nLearn more about your ad choices. Visit megaphone.fm/adchoices