An overview of Russian cyber operations. The IT Army of Ukraine says it’s doxed the Wagner Group. Lapsus$ blamed for Uber hack. A look at the risk of stolen single sign-on credentials.

CyberWire Daily

An overview of Russian cyber operations. The IT Army of Ukraine claims to have doxed the Wagner Group. Who dunnit? Lapsus$ dunnit. Emily Mossburg from Deloitte and Shelley Zalis of the Female Quotient on why gender equality is essential to the success of the cyber industry. We’ve got a special preview of the International Spy Museum's SpyCast's latest episode with host Andrew Hammond interviewing Robert Gates on the 75th anniversary of the CIA. And a look at the risk of stolen single sign-on credentials.

For links to all of today's stories check out our CyberWire daily news briefing:

https://thecyberwire.com/newsletters/daily-briefing/11/181

Selected reading.

Ukraine's IT Army hacks Russia's Wagner Group (Computing)

Untangling the Russian web: Spies, proxies, and spectrums of Russian cyber behavior (Atlantic Council)

Security update | Uber Newsroom (Uber Newsroom)

Tentative attribution in the Uber breach. (CyberWire)

Uber says Lapsus$-linked hacker responsible for breach (Reuters)

Uber blames security breach on Lapsus$, says it bought credentials on the dark web (ZDNET)

Uber's breach shows how hackers keep finding a way in (Protocol)

Uber attributes hack to Lapsus$, working with FBI and DOJ on investigation (The Record by Recorded Future)

Uber data breach spotlights need for enterprises to ‘get the basics right’, say experts (ITP.net)

"Keys to the Kingdom" at Risk: Analyzing Exposed SSO Credentials of Public Companies (Bitsight)