Cyber Risks · GreyNoise Blog

Storm Watch | Cyber Podcast | Cybersecurity Under Fire: MiC Leadership, Edge Device Threats, and Black Basta Secrets

Summary: This episode of GreyNoise's Storm Watch podcast covers an interview with Mary N. Chaney, CEO of Minorities in Cybersecurity, on underrepresentation of women and minority leaders in the field and the group's MiC Inclusive Community and MiC Leadership Series programs. The episode also discusses edge security products targeted through vulnerabilities in Palo Alto Networks and SonicWall products added to CISA's Known Exploited Vulnerabilities catalog, leaked Black Basta chat logs analyzed with VulnCheck, and GreyNoise observations of Salt Typhoon exploiting Cisco flaws including CVE-2018-0171.

What's compelling: Black Basta's leaked logs show the group responding rapidly to new advisories and holding pre-publication knowledge of certain CVEs, while Salt Typhoon is still actively exploiting a Cisco flaw first disclosed in 2018 - a reminder that the vulnerabilities attackers use are often ones defenders have had years to close.

Read the original at GreyNoise Blog ↗

Topics
Threat Actors & Nation-State
Mentions
CVE-2018-0171
Related