NSA and CISA release a list of the ten most common misconfigurations along with Identity and access management guidelines. The Predator Files. Cyber cooperation between Russia and North Korea. Hacktivist auxiliaries hit Australia. Hacktivists and hacktivist auxiliaries scorn the application of international humanitarian law. The direction of Russian cyber operations. Dave Bittner speaks with Andrea Little Limbago from Interos to talk about geopolitics, cyber and the C-suite. Rick Howard talks with John Hultquist, Chief Analyst at Mandiant, at the mWISE 2023 Cybersecurity Conference about cyber threat intelligence. And, finally, adventures in catphishing: “LoveGPT.”

For links to all of today's stories check out our CyberWire daily news briefing:
https://thecyberwire.com/newsletters/daily-briefing/12/192

Selected reading.
NSA and CISA Release Advisory on Top Ten Cybersecurity Misconfigurations (Cybersecurity and Infrastructure Security Agency CISA)
CISA and NSA Release New Guidance on Identity and Access Management (Cybersecurity and Infrastructure Security Agency CISA)
Microsoft Digital Defense Report 2023 (Microsoft)
Predator Files | EIC (European Investigative Collaborations)
Meet the ‘Predator Files,’ the latest investigative project looking into spyware (Washington Post)
NORTH KOREA–RUSSIA SUMMIT : A NEW ALLIANCE IN CYBERSPACE? - CYFIRMA (CYFIRMA) 
Australia’s home affairs department hit by DDoS attack claimed by pro-Russia hackers (the Guardian) 
Pro-Russia hacktivist group targets Australian government agencies over support for Ukraine (Cyberdaily.au) 
Home Affairs, Administrative Appeals Tribunal websites hit by cyber attacks (SBS News) 
‘War has no rules’: Hacktivists scorn Red Cross’ new guidelines (Record) 
Espionage fuels global cyberattacks (Microsoft On the Issues) 
LoveGPT: How “single ladies” looking for your data upped their game with ChatGPT (Avast Threat Labs)
Learn more about your ad choices. Visit megaphone.fm/adchoices