Episode Details

In this briefing, we examine the escalating threat to global critical infrastructure posed by the Gunra ransomware group. By exploiting specific flaws in Fortinet and Schneider Electric appliances, Gunra has established a foothold in sectors ranging from healthcare to finance. We also break down a unique supply chain compromise at BdThemes that bypasses traditional file-based detection by poisoning API responses. Our guest, Chad Thompson, provides systems-level analysis on the 'Pass-ta-key' vulnerability and its implications for Windows-based authentication. The episode concludes with a look at massive surges in DDoS traffic and a first-of-its-kind lateral movement technique through private mobile APNs observed in the Polish energy sector.

Topics Covered

• 🚨 Gunra Ransomware Exploitation of Fortinet and Schneider Electric
• 📦 BdThemes Supply Chain Attack and JSON Poisoning Tactics
• 🔐 Pass-ta-key Analysis: Windows Passkey Security vs. Mobile Enclaves
• 🌐 Cloudflare Q2 DDoS Report: The Rise of Terabit-Scale Attacks
• ⚡ Polish Energy Plant Breach via Private Mobile Gateways

Disclaimer: This briefing is for informational purposes only and does not constitute professional security advice.

Neural Newscast is AI-assisted, human reviewed. View our AI Transparency Policy at NeuralNewscast.com.

• (01:07) - Conclusion
• (01:07) - Pass-ta-key & Identity Risk
• (01:07) - Supply Chain & Infrastructure