Ukraine shakes up its security and prosecutorial services. Cyberattacks hit Albania. Advanced persistent threat actors prospect journalists. The GRU is said to be trolling researchers who look into Sandworm. Thomas Etheridge from CrowdStrike on identity management. Our guest is Robin Bell from Egress discussing their Human Activated Risk Report. And CISA opens a liaison office in London.

For links to all of today's stories check out our CyberWire daily news briefing:
https://thecyberwire.com/newsletters/daily-briefing/11/136

Selected reading.
Ukraine's Zelenskyy fires top security chief and prosecutor (AP NEWS)
Zelenskiy Ousts Ukraine’s Security Chief and Top Prosecutor (Bloomberg)
Volodymyr Zelensky sacks top aides over 'Russian collaboration' (The Telegraph)
A massive cyberattack hit Albania (Security Affairs)
Information Systems Are Intact, Says Albanian Government after Cyber Attack (Exit - Explaining Albania) 
Albania closes down online gov't systems after cyber attack (ANI News).
Albania Shuts Down Digital Services and Government Websites after Cyber Attack (Exit - Explaining Albania)
Hackers pose as journalists to breach news media org’s networks (BleepingComputer)
Cybersecurity Firm: What US Journalists Need To Know About The Foreign Hackers Targeting Them Forbes)
Sandworm APT Trolls Researchers on Its Trail as It Targets Ukraine (Dark Reading)