The end of the line for Garantex.

Summary

Podcast Summary: CyberWire Daily – The End of the Line for Garantex

Podcast Information:

• Title: CyberWire Daily
• Host/Author: N2K Networks
• Description: The daily cybersecurity news and analysis industry leaders depend on. Published each weekday, the program also includes interviews with a wide spectrum of experts from industry, academia, and research organizations all over the world.
• Episode: The End of the Line for Garantex
• Release Date: March 7, 2025

---

Introduction

In this episode of CyberWire Daily, hosts Maria Varmazes and Dave Bittner delve into a range of pressing cybersecurity issues, from the takedown of a notorious Russian cryptocurrency exchange to significant breaches affecting major corporations. Additionally, the episode features a special segment celebrating International Women's Day and Women's History Month, highlighting the contributions of women shaping the future of cybersecurity.

Main News Highlights

1. Seizure of Garantex

Timestamp: [02:01]

The U.S. Secret Service, in collaboration with international law enforcement agencies, successfully seized the domains of Garantex, a Russian cryptocurrency exchange implicated in facilitating ransomware gangs' money laundering activities. A Secret Service spokesperson informed The Register that Garantex has been a crucial tool for cybercriminals, enabling illicit financial transactions. The seizure is part of an ongoing investigation, with additional details pending.

A notice on Garantex's website declared, "The domain for Garantex has been seized by the United States Secret Service pursuant to a seizure warrant obtained by the United States Attorney's Office for the Eastern District of Virginia under the authority of 18 USC sections 981 and 982."

Furthermore, Tether, a stablecoin operator, has proactively blocked Garantex's wallets in alignment with EU sanctions imposed the previous week, effectively disrupting the exchange's operations.

2. NTT Communications Breach

Timestamp: [02:01]

Japanese telecom giant NTT Communications Corporation disclosed a significant security breach affecting approximately 18,000 corporate customers. Discovered in February, the breach compromised sensitive information, including names, contract numbers, phone numbers, email addresses, physical addresses, and service usage data. The attackers infiltrated NTT's order information distribution system, which stores extensive customer data. According to NTT, some of this information "might have been leaked externally," though the company has not yet detailed the extent of the data exposure.

3. Microsoft Malvertising Campaign

Timestamp: [02:01]

Microsoft reported a widespread malvertising campaign that compromised nearly one million devices globally. The attack originated from illegal streaming websites, where malvertising redirectors directed users to a GitHub repository designed to deceive them into installing malware as part of a tech support scam. Upon redirection to GitHub, the hosted malware established an initial foothold on the infected devices, acting as a dropper for additional malicious payloads. These payloads included information stealers aimed at collecting system and browser data. The malware variants involved were primarily Lummus Dealer or an updated version of Doanerium.

4. AI's Role in Canada's Next Election

Timestamp: [02:01]

Canada's Communications Security Establishment (CSE) issued a warning regarding the potential misuse of generative artificial intelligence in the upcoming federal election. The agency anticipates that foreign adversaries and hacktivists may deploy AI-generated deepfakes—realistic but fabricated videos and images—to deceive voters and influence public opinion. Such disinformation campaigns could misrepresent political events or statements, exacerbating political polarization and undermining democratic processes. The CSE forecasts an increase in AI-driven disinformation efforts over the next two years, highlighting a significant threat to the integrity of elections.

5. Scam Targeting Singapore's Prime Minister

Timestamp: [02:01]

Singapore's Prime Minister Lawrence Wong has raised alarms about the rise of deepfake videos misusing his likeness to promote fraudulent services, including cryptocurrency schemes and permanent residency application services. In a Facebook post dated March 7, 2025, at 5:00 PM, Wong emphasized that these AI-generated videos are scams and urged citizens to avoid engaging with such content or sharing personal information. He highlighted the sophistication of these scams and the importance of public vigilance in combating AI-facilitated fraud.

6. Botnets Exploiting IP Camera Vulnerability

Timestamp: [02:01]

The U.S. Cybersecurity and Infrastructure Agency (CISA) released an advisory concerning an actively exploited vulnerability in EdiMax IP cameras. This flaw allows for remote code execution and has been assigned a CVSS score of 9.3, indicating a critical severity level. Security analysts at Akamai detected multiple Mirai-based botnets exploiting this vulnerability since the fall of the previous year. These botnets leverage the flaw to gain unauthorized access and control over affected devices, posing significant risks to network security and privacy.

7. Akamai Thwarts Magecart Attack

Timestamp: [02:01]

Akamai, a leading content delivery network and cybersecurity firm, successfully thwarted a Magecart attack targeting a global retailer's e-commerce platform. Magecart groups are known for injecting malicious scripts into websites to steal customers' payment information during transactions. In this incident, Akamai's security team identified unusual activities and swiftly removed the malicious code embedded within the retailer's website. By collaborating closely with the retailer, Akamai safeguarded customer data and preserved the retailer's reputation. This case underscores the necessity of continuous monitoring and rapid response mechanisms to defend against sophisticated web-based threats.

International Women's Day Special

Timestamp: [02:01]

In celebration of International Women's Day and Women's History Month, CyberWire Daily features an inspiring segment highlighting the achievements, resilience, and critical roles of women in cybersecurity. Producer Liz Stokes introduces the segment, emphasizing the importance of recognizing and supporting women's contributions to the field.

Highlights from the Celebration:

Maria Velasquez – Chief Growth Officer and Co-founder, Cybersecurity Marketing Society

Timestamp: [11:15]

Maria Velasquez shares her journey as a minority woman, immigrant, and co-founder of the Cybersecurity Marketing Society. She underscores the challenges faced in a predominantly male industry and the importance of mentorship and support. Velasquez states, "When one of us rises, we all do," highlighting the collective advancement of women in cybersecurity.

Jennifer Iban – Executive Producer, N2K Cyberwire

Timestamp: [12:09]

Jennifer Iban discusses her role in promoting diversity within cybersecurity podcasts. As one of the founders of CyberWire, she emphasizes the necessity of elevating women's voices to change the traditional male-dominated dynamic. Iban remarks, "We prefer to share the mic with others who bring different perspectives," advocating for a more inclusive representation in the industry.

Selena Larson – Staff Threat Researcher, Proofpoint

Timestamp: [13:41]

Selena Larson, a former journalist turned cybersecurity practitioner, highlights the value of diverse backgrounds in enhancing security ecosystems. She shares her experiences overcoming sexism and prejudices, advocating for a safer and more inclusive industry. Larson notes, "Working in the cybersecurity industry is great because I know at the end of the day, the work that I do directly contributes to bad actors having bad days."

Anne Lang – Lead Technical Editor, N2K Cyber Vista

Timestamp: [14:46]

Anne Lang recounts a personal security incident that underscored the importance of end-user training in cybersecurity. She discovered her personal information was publicly posted without consent, illustrating the vulnerabilities consumers face daily. Lang emphasizes the critical role of educating users to handle information securely.

Gianna Witber – Co-founder and CEO, Cybersecurity Marketing Society

Timestamp: [16:11]

Gianna Witber shares her unconventional career path, transitioning from IBM to commercial real estate and finally into cybersecurity marketing. She underscores the importance of persistence and community support, stating, "I think being a woman in cybersecurity means sometimes you have to stand up more for yourself." Witber advocates for mutual support among women in the field to drive collective success.

Chris Hare – Project Management Specialist, N2K Networks

Timestamp: [17:55]

Chris Hare reflects on his relatively recent entry into cybersecurity after a 15-year career in technology. He celebrates the contributions of female pioneers and encourages ongoing support and inclusion within the industry. Hare emphasizes that cybersecurity is a welcoming field where professionals are supported regardless of age or background.

Maria Varmazes – Host, T Minus Space Daily & Co-host of Hacking Humans

Timestamp: [18:37]

Maria Varmazes expresses her admiration for the diverse women she has worked with in cybersecurity. She highlights the authenticity and breadth of experiences women bring to the field, challenging traditional molds and strengthening the industry. Varmazes asserts, "Whatever the day-to-day challenges may hold in our careers or in the culture at large, that is an immutable fact at the core of what we do."

Liz Stokes concludes the celebration: Timestamp: [19:49]

Liz Stokes honors all women in cybersecurity—leaders, learners, fighters, and innovators—acknowledging their resilience, brilliance, and unwavering commitment. She extends gratitude to mentors and trailblazers, affirming that every woman in the field belongs and contributes to a stronger industry.

Maria Varmazes adds a heartfelt note: Timestamp: [20:27]

Maria thanks all women in cybersecurity and beyond who are breaking barriers and driving innovation. She emphasizes the lasting impact of their contributions and encourages continued inspiration and forward momentum.

Insider Threat Case: StubHub Contractor Digital Ticket Heist

Timestamp: [22:17]

In a dramatic turn of events, two contractors from Sutherland Global Services in Jamaica executed a sophisticated digital ticket heist targeting StubHub. Tyrone Rose, 20, and Shamara Simmons, 31, exploited a security loophole to intercept nearly 1,000 high-demand tickets for major events, including Taylor Swift's Eras Tour, Ed Sheeran, Adele, NBA games, and the US Open, amassing $635,000 before the scam unraveled. Their method involved infiltrating a restricted StubHub system and redirecting ticket download links to themselves and their accomplices.

The scheme fell apart when a key accomplice passed away, leaving behind a digital trail that led investigators to Rose and Simmons. Both individuals now face charges of grand larceny, computer tampering, and conspiracy, with potential penalties of up to 15 years in prison. This case serves as a stark reminder of how insider threats can transform minor glitches into significant financial exploits, emphasizing the importance of robust internal security measures.

Conclusion

The episode of CyberWire Daily presents a comprehensive overview of critical cybersecurity incidents and celebrates the pivotal role of women in advancing the field. From high-profile breaches and sophisticated cyberattacks to inspiring stories of female leaders breaking barriers, the episode underscores the dynamic and ever-evolving landscape of cybersecurity. It highlights both the external threats facing organizations and the internal efforts to create a more inclusive and resilient industry.

In closing, the hosts encourage listeners to stay informed and engaged, emphasizing the importance of continuous learning and community support in combating cyber threats and fostering a stronger, more diverse cybersecurity ecosystem.

---

Notable Quotes:

• Maria Velasquez on collective advancement: "When one of us rises, we all do." ([11:15])
• Jennifer Iban on diversity: "We prefer to share the mic with others who bring different perspectives." ([12:09])
• Selena Larson on the impact of her work: "The work that I do directly contributes to bad actors having bad days." ([13:41])
• Gianna Witber on persistence: "I think being a woman in cybersecurity means sometimes you have to stand up more for yourself." ([16:11])
• Maria Varmazes on authenticity: "Whatever the day-to-day challenges may hold in our careers or in the culture at large, that is an immutable fact at the core of what we do." ([18:37])

---

Final Remarks:

This episode of CyberWire Daily effectively balances urgent cybersecurity news with a heartfelt tribute to the women driving progress in the industry. By addressing both external threats and internal culture, it provides a holistic view of the current state and future direction of cybersecurity. Listeners are left with actionable insights into recent cyber incidents and inspired by the stories of resilience and leadership showcased in the International Women's Day special.

Transcript

[Maria Varmazes]

You're listening to the Cyberwire Network powered by N2K.

[Dave Bittner]

We've all been there. You realize your business needs to hire someone yesterday. How can you find amazing candidates fast? Well, it's easy. Just use Indeed when it comes to hiring, Indeed is all you need. Stop struggling to get your job post noticed Indeed Sponsored Jobs helps you stand out and hire fast. Your post jumps to the top of search results so the right candidates see it first and it works. Sponsored Jobs on indeed get 45% more applications than non sponsored ones. One of the things I love about Indeed is how fast it makes hiring. And yes, we do actually use Indeed for hiring here at N2K CyberWire. Many of my colleagues here came to us through Indeed. Plus with Sponsored Jobs. There are no subscriptions, no long term contracts. You only pay for results. How fast is Indeed? Oh, in the minute or so that I've been Talking to you, 23 hires were made on Indeed according to Indeed Data Worldwide. There's no need to wait any longer. Speed up your hiring right now with Indeed and listeners to this show will get a $75 sponsored job credit. To get your jobs more visibility at indeed.com cyberwire just go to indee indeed.com cyberwire right now and support our show by saying you heard about Indeed on this podcast. Indeed.com cyberwire terms and conditions apply. Hiring Indeed is all you need.

[Maria Varmazes]

Law Enforcement Shutters Guarantec's Crypto Exchange NTT discloses breach affecting corporate customers Malvertising campaign hits nearly a million devices AI's role in Canada's next election Scammers target Singapore's PM in AI fraud Botnets exploit critical IP camera vulnerability in our International Women's Day and Women's History Month special. Join producer Liz Stokes as she shares the inspiring stories of women who are shaping the future of cybersecurity and how did insider threats turn a glitch into a gold min? Today is Friday, March 7, 2025. I'm Maria Varmazes from N2K's own T minus Space Daily podcast in for Dave Bittner and this is your Cyber Wire Intel Briefing. Thanks for rounding out the first week of March with us. Let's get into your Friday intel briefing. The U.S. secret Service, working with international law enforcement partners, has seized domains used by the Russian cryptocurrency exchange Guarantex, which was frequently used by ransomware gangs for money laundering. A Secret Service spokesman told the Register that the US Secret Service has seized website domains associated with the administration and operation of Russian cryptocurrency Exchange. Garantex is part of an ongoing investigation. We are unable to provide additional comments at this time and will release additional information when available. A notice on the Exchange's website states. Everyone's favorite seizure notice the domain for Garantex has been seized by the United States Secret Service pursuant to a seizure warrant obtained by the United States Attorney's Office for the Eastern District of Virginia under the authority of 18 USC sections 981 and 982. Stablecoin operator Tether has also blocked Garantech's wallets as part of the EU sanctions levied last week. Japanese telecom giant NTT Communications Corporation has disclosed a breach that affected nearly 18,000 of its corporate customers, according to a report from Bleeping Computer. The breach, which was discovered in February, affected names, contract numbers, phone numbers, email addresses, physical addresses and service usage information. The hackers gained access to NTT's order information distribution system, which holds information on corporate customers. NTT says some of the information, quote might have been leaked externally, Microsoft says a malvertising campaign impacted nearly 1 million devices around the world, originating on illegal streaming websites. Malvertising redirectors on these sites sent users to a GitHub repository designed to trick them into installing malware as part of a tech support scam. Microsoft states that once the redirection to GitHub occurred, the malware hosted on GitHub established the initial foothold on the user's device and functioned as a dropper for additional payload stages and running malicious code. The additional payloads included information stealers to collect system and browser information on the compromised device, of which most were either Lummus dealer or an updated version of Doanerium. Canada's Communications Security Establishment, or cse, warns that foreign adversaries and hacktivists are likely to exploit generative artificial intelligence to influence voters ahead of the next federal election. The agency anticipates the use of AI generated deepfakes, realistic but fabricated videos and images depicting politicians and officials to deceive the public and so discord. These deepfakes can misrepresent events or statements, potentially leading to political polarization. The CSE's report highlights that such AI driven disinformation campaigns are expected to become more prevalent within the next two years, posing a significant threat to democratic processes. Singapore's Prime Minister Lawrence Wong has alerted the public to the proliferation of deepfake videos, misusing his likeness to promote fraudulent services including cryptocurrency schemes and permanent residency application services. In a Facebook post dated March 7, 2020 5:00pm, Wong emphasized that these AI generated videos are scams and urged citizens to refrain from engaging with such content or sharing personal information. The U.S. cybersecurity and Infrastructure Agency, otherwise known as CISA, has published an advisory on an actively exploited vulnerability affecting EdiMax IP cameras. The flaw can lead to remote code execution and received a CVSS score of 9.3. Security Week reports that multiple Mirai based botnets are exploiting the vulnerability. Researchers at Akamai, who discovered this flaw, told Security Weeks that attackers have been exploiting it since fall of last year. And speaking of Akamai, Akamai recently thwarted a magecart attack targeting a global retailer's e commerce platform. Magecart groups specialize in injecting malicious scripts into websites to steal customers payment information during transactions. In this incident, Akamai's security team detected unusual activity and promptly identified the malicious code embedded in the retailer's website. By collaborating closely with the retailer, Akamai facilitated the swift removal of the threat, safeguarding customer data and preserving the retailer's reputation. This case underscores the critical importance of continuous monitoring and rapid response mechanisms and defending against sophisticated web based threats. And that's your Friday intel briefing everybody. Coming up after the break, we celebrate International Women's Day a little bit early as we shine a spotlight on incredible women in and around our network for shaping the future of cybersecurity and stick around for how insider threats turn a glitch into a gold mine.

[Dave Bittner]

Your business needs AI solutions that are not only ambitious, but also practical and adaptable. That's where Domo's AI and Data Products platform comes in. With Domo, you can channel AI and data into innovative uses that deliver measurable impact. Secure AI agents connect Prepare and automate your data workflows, helping you gain insights, receive alerts and act with ease through guided apps tailored to your role. Data is hard. Domo is easy. Learn [e-mail] that's AI.domo.com cyber threats are more sophisticated than ever. Passwords. They're outdated and can be cracked in a minute. Cybercriminals are intercepting SMS codes and bypassing authentication apps. While businesses invest in network security, they often overlook the front door, the login. Yubico believes the future is passwordless. Yubikeys offer unparalleled protection against phishing for individuals, SMBs and enterprises. They deliver a fast, frictionless experience that users love. Yubico is offering N2K followers a limited buy one, get one offer. Visit yubico.com N2K to unlock this deal. That's Yubico. Say no to modern cyber threats. Upgrade your security today.

[Maria Varmazes]

Tomorrow is International Women's Day, by the way, and throughout Women's History Month, we're celebrating the brilliant women shaping cybersecurity. So let's join producer Liz Stokes as we shine a light on their achievements, resilience and the vital role they play and keeping our digital world secure. So today we're sharing their voices, our voices, and the stories of perseverance, success, and the impact that they're making every day.

[Liz Stokes]

March 8 is International Women's Day, and today we want to take a moment to celebrate the amazing women in cybersecurity who are breaking barriers, driving innovation, and making this industry stronger every day. Cybersecurity is a field that thrives on resilience, determination and collaboration. Qualities that so many women in our community exemplify. Some have navigated non traditional paths to get here. Some have overcome challenges that tested their strength. And some are actively working to make this space more inclusive and supportive for those who follow. For many, success in this field isn't just about individual achievement. It's about lifting others up, breaking down barriers, and ensuring the next generation has an easier path forward. Today, we're sharing their voices, their stories of perseverance, success and inspiration.

[Maria Velasquez]

Hello, my name is Maria Velasquez and I'm the Chief Growth Officer and co founder of the Cybersecurity Marketing Society. I've been in cybersecurity marketing for about 10 years now, and as a minority woman, an immigrant, and someone who's had to defy a lot of odds to get here, I know this journey isn't always easy. But I also know I wouldn't be here without the incredible women who've supported me, challenged me, and helped shape me. Not just as a cybersecurity professional, a marketing professional, but as a woman, a wife, and a mother to two amazing daughters. So today we're shining a light on those stories. The mentors, the friends, the trailblazers who remind us that we belong in this space. Because when one of us rises, we all do. I hope a lot of women today are going to celebrate, uplift and keep each other moving together.

[Jennifer Iban]

My name is Jennifer Iban and I'm the executive producer here at N2K Cyberwire. I was one of the founders of the Cyberwire back in 2016, one of five people and the only woman. That's how my story was in cybersecurity for quite some time. I started back in 2012. I was one of a handful of women I'd find at industry events and in conversations, and I really feel that is still the case in some instances, but it definitely is improving. In my role curating voices for our podcasts, I really try to elevate and highlight women doing amazing things in our industry so that typical dynamic of men dominating conversations in cybersecurity changes. It's my personal mission and I feel my professional duty to strive to include diverse voices across our network of podcasts. My goal is always to have women's and other minority voices from our industry heard as the thought leaders that they are on our shows. We prefer to share the mic with others who bring different perspectives to the constantly changing fabric of cybersecurity and the challenges that we all face. I hope our network and the voices that we share continue to represent our audiences and that it's as diverse as those that we serve, not just for International Women's Day and not just for Women's History Month, but always.

[Liz Stokes]

Cybersecurity is an industry built on problem solving and persistence. Many of the women leading the way today didn't take the traditional path, but that's exactly what makes their contributions so impactful.

[Selena Larson]

I'm Selena Larson, staff threat Researcher at proofpoint. I used to be a journalist before I started working as a cybersecurity practitioner, and core skills like communication, research, writing and problem solving have been integral to my success as an intelligence analyst. I'm just one of many people, including many women who have non traditional backgrounds in this industry, and our diversity of experiences directly contributes to more secure ecosystems. It's not always easy. Sexism and various prejudices are still a problem, which I hope my colleagues in this industry work to call out and eradicate to build a safer, more secure world. But I am also lucky that on my journey I've learned a lot by asking questions, speaking up, and finding mentors and collaborators to work on interesting problem sets together. Working in the cybersecurity industry is great because I know at the end of the day, the work that I do directly contributes to bad actors having bad days.

[Liz Stokes]

Every woman in cybersecurity has a story, some of triumph, some of resilience, and some that remind us why this work is so important.

[Anne Lang]

My name is Anne Lang and I am the lead technical editor at N2K Cyber Vista. So the most alarming moment from my career was not the time that I went to change out the hard drive in a computer and I unscrewed the case and I had approximately 1,000 live baby praying mantises explode out and fall in my lap. It was actually the day that I was looking on some genealogy forums online and I discovered that a well meaning relative of mine had posted my full name, my date of birth, my town of birth and my mother's maiden name to this public forum that wouldn't let me take the information down. I feel like end user training is actually one of the most important cybersecurity practices because as consumers we interact every single day with websites and information collection devices and machines that we don't quite know the capability of and that we aren't always trained to handle in a secure manner. So I am really grateful that that is exactly what my job allows me to do.

[Liz Stokes]

For many women, breaking into cybersecurity required persistence, boldness and the willingness to ask for the seat at the table and sometimes build that table themselves.

[Gianna Witber]

Hello, my name is Gianna Witber and I am co founder and CEO of the Cybersecurity Marketing Society, which is a community for marketers in cybersecurity. My career has been interesting. There's been a lot of jumping around. I started off at IBM working on deal teams, selling middleware and servers and mainframes. Took a long break to go explore commercial real estate investment development, and I landed into cyber for the very first time by basically being persistent. So I had met someone who worked at a cyber company. I said, do you need marketing help? They said, maybe. And I followed up with them every two weeks for the next four months until they gave me a job. Now I run my own company and along with my co founder Maria Velasquez, we advocate for marketers in the industry and also women in the industry. We have a huge community now to rely on. I think that being a woman in cybersecurity means sometimes you have to stand up more for yourself, say a little bit more, speak up, be seen, be heard. But most importantly, reach your hand out and grab onto the hands of others. I love the cybersecurity industry. I think it's one of the most important in this industry. Everyone in cyber is trying to do good and we can also do good for each other.

[Liz Stokes]

Cybersecurity isn't just about protecting networks and data. It's about people, the ones securing our world today and the ones paving the way for our future.

[Chris Hare]

Chris Hare, Project Management Specialist and content developer at N2K Networks I consider myself a newer member of the cybersecurity industry and I feel privileged to have a seat at this important table. I've been in the technology industry for more than 15 years and it's given me a wealth of opportunity to learn and find my place as a subject matter expert and writer. I celebrate International Women's Day with my peers as an opportunity to shine a light on the efforts of the many female pioneers who paved our way here, as well as to those who are carving out the path today and to the many more who will make the world a better place tomorrow. No matter what age you are or where you live, you will be welcomed and supported.

[Maria Varmazes]

Maria Vermaz is here. I'm host of T Minus Space daily here at N2K Networks and I'm also co host of Hacking Humans and occasional guest host on the Cyberwire. And I say it all the time because I believe it from the bottom of my heart. But infosec professionals are some of the most fascinating people out there. Yes, you listening? And what field better understands the importance of looking in unexpected places for the biggest surprises than we do? In my career, the women that I've worked with, incident responders, vulnerability researchers, pen testers, responsible disclosure advocates, sales engineers, marketing professionals, policy wonks, lock sport enthusiasts, they have all taught me how to show up in ways that are authentic and not just fit the mold, but of what I might think a cybersecurity practitioner should look like, or act like, or dress like, or even sound like women showing up to do this hard work, no matter how we get here, make this industry stronger and make our world safer. Whatever the day to day challenges may hold in our careers or in the culture at large, that is an immutable fact at the core of what we do. So never lose sight of it.

[Liz Stokes]

Today we're celebrating all the women in cybersecurity, the leaders, the learners, the fighters and the innovators. We honor your resilience, your brilliance and your unwavering commitment to making this industry stronger. To all the mentors, the trailblazers, the change makers, thank you. And to every woman watching, listening or working in cybersecurity today, just remember, you belong here. Happy International Women's Day.

[Maria Varmazes]

And thank you to all of the incredible women out there in cybersecurity and in every field who are breaking barriers, driving innovation and leading with strength and resilience. Your contributions make a lasting impact and the industry is stronger because of you. Keep pushing forward, inspiring others and shaping the future.

[Dave Bittner]

Hey everybody, Dave here. Have you ever wondered where your personal information is lurking online? Like many of you, I was concerned about my data being sold by data brokers, so I decided to try DeleteMe. I have to say, delete me is a game changer. Within days of signing up, they started removing my personal information from hundreds of data brokers. I finally have peace of mind knowing my data Privacy is protected. DeleteMe's team does all the work for you with detailed reports so you know exactly what's been done. Take control of your data and keep your private life private by signing up for Deleteme NOW at a special discount for our listeners today. Get 20% off your DeleteMe plan when you go to JoinDeleteMe.com n2k and use promo code n2k at checkout. The only way to get 20% off is to go to JoinDeleteMe.com N2K and enter code N2K at checkout. That's JoinDeleteMe.com N2k code N2K two.

[Maria Varmazes]

Insiders at a StubHub contractor pulled off a digital ticket heist worthy of a Hollywood script. That is, until they got caught. Prosecutors say Tyrone Rose, 20, and Shamara Simmons, 31, working for Sutherland Global Services in Jamaica, exploited a security loophole to intercept nearly 1,000 high demand tickets, including Taylor Swift's Eras tour, raking in $635,000 before the scam fell apart. Their trick was sneaking into a restricted StubHub system and rerouting ticket download links to themselves and their co conspirators. And by the way, the stolen stash wasn't just Swifties. Golden passes, Ed Sheeran, Adele, NBA games and the US Open were all on their list. But the scheme hit a snag when a key accomplice passed away, leaving a digital trail for investigators to then follow. Now both suspects face grand larceny, computer tampering and conspiracy charges. With up to 15 years in prison on the line, it's a hard lesson on how insider threats can turn a glitch into a gold mine until the house of cards collapses. And that's the Cyberwire. For links to all of today's stories, check out our daily [e-mail] be sure to check out this week's Research Saturday, where Dave Bittner sits down with Silas Cutler, principal security researcher at Census, asking, will the real Volt Typhoon please stand up? That's Research Saturday. Check it out. We'd love to know what you think of this podcast. Your feedback ensures we deliver the insights that keep you a step ahead in the rapidly changing world of cybersecurity. If you like the show, please share a rating and review in your podcast app. Please also fill out the survey in the show notes or send an email to cyberwire2k.com we're privileged that N2K Cyberwire is part of the daily routine of the most influential leaders and operators in the public and private sector. From the Fortune 500 to many of the world's preeminent intelligence and law enforcement agencies, N2K makes it easy for companies to optimize your biggest investment your people. We make you smarter about your teams while making your teams smarter. Learn [e-mail] N2K's senior producer is Alice Carruth. Our Cyberwire producer is Liz Stokes. We're mixed by Trey Hester with original music and sound design by Elliot Peltzman. Our executive producer is Jennifer Ibin. Peter Kilpe is our publisher and I'm Maria Varmazes subbing in for Dave Buettner, who should be back on Monday. Thanks for listening. Have a wonderful weekend.

[Dave Bittner]

Cyber threats are evolving every second, and staying ahead is more than just a challenge, a necessity. That's why we're thrilled to partner with Threat Locker, the cybersecurity solution trusted by businesses worldwide. ThreatLocker is a full suite of solutions designed to give you total control, stopping unauthorized applications, securing sensitive data, and ensuring your organization runs smoothly and securely. Visit threatlocker.com today to see how a default deny approach can keep your company safe and compliant.