Edge, Safari, CISO Pay and Loathing, Fake AI, ASUS, OneDrive, Manus, Aaran Leyland… – SWN #481

Doug White

1. Microsoft Authenticator now warns to export passwords before July cutoff
2. Apple Safari exposes users to fullscreen browser-in-the-middle attacks
3. The million-dollar CISO: Report reveals high pay, low satisfaction
4. Mandiant finds more than 30 fake AI websites spreading malware
5. 8,000+ Asus routers popped in ‘advanced’ mystery botnet plot
6. OneDrive Gives Web Apps Full Read Access to All Files
7. AI that thinks for itself: Can we trust it? – The Boston Globe
8. AI video just took a startling leap in realism. Are we doomed?

Aaran Leyland

1. Ukraine’s Cyber Resilience: Three Years of Defending Against Russia’s Cyberwarfare

   Ukraine has seen a dramatic surge in Russian cyberattacks since the start of Russia’s full-scale invasion in 2022, according to a new analytical report titled “War and Cyber: Three Years of Struggle and Lessons for Global Security”.

   The report, published by Ukraine’s State Service of Special Communications and Information Protection (SSSCIP) and the International Cyber Environment Task Force, outlines the evolution of cyber warfare in the conflict and provides key insights for global cybersecurity strategies, The Gaze reports.

   The data shows that the number of registered cyber incidents grew more than threefold between 2021 and 2024 — from 1,350 in 2021 to 4,315 in 2024. The report attributes this sharp rise to the Russian Federation’s coordinated cyber strategy, which includes the use of state actors, cybercriminal groups, and even volunteer hackers to target Ukraine’s critical infrastructure, government institutions, and media.

   Russia’s focus shifted in 2022 from espionage to more aggressive, destructive cyber operations. These were aimed at disrupting vital services, stealing sensitive data, and launching disinformation campaigns to undermine morale.

   “The main emphasis was on destructive cyber operations aimed at disrupting critical infrastructure, stealing data, and exerting information and psychological influence,” the report says.

   One of the most concerning trends was the targeting of Ukrainian media. Over 200 cyberattacks were launched against Ukrainian news agencies and broadcasters to spread propaganda, delete content, and manipulate public perception. The use of deepfake technology became a key tactic for spreading false narratives.

   Despite the scale of attacks, Ukraine has been able to resist many of them through an evolving cyber defense model. This approach — a joint effort between government agencies, private tech companies, and international partners — has become a benchmark for digital resilience under wartime conditions.

   “Ukraine’s experience is unique globally: the digital resilience model… has demonstrated how decisive action can protect critical government data.”

   Ukraine’s cyber resilience has also been bolstered by international cooperation. Partners including the United States, United Kingdom, EU, and NATO countries have helped Ukraine quickly respond to incidents and build long-term cybersecurity capacity.