You're listening to the Cyberwire Network, powered by N2K.

Is your AppSec program actually reducing risk?

Developers and AppSec teams drown in critical alerts, yet 95% of fixes don't reduce real risk.

Why? Traditional tools use generic prioritization and lack the ability to filter real threats from noise.

High-impact threats slip through and surface in production, costing 10 times more to fix.

Ox Security helps you focus on the 5% of issues that truly matter before they reach the cloud.

Find out what risks deserve your attention in 2025.

Download the application security benchmark from Ox Security.

Thank you. Download the application security benchmark from OX Security. Hello everyone and welcome to the CyberWires Research Saturday.

I'm Dave Bittner, and this is our weekly conversation with researchers and analysts tracking down the threats and vulnerabilities,

solving some of the hard problems and protecting ourselves in a rapidly evolving cyberspace.

Thanks for joining us.

This report that we did really came on the heels of the $1.4 billion by-bit hack.

And our team, of course, went when we saw this news, along with every other researcher in the industry,

we immediately said, my goodness, that's the largest heist that's ever existed in crypto.

Is there anything that we can see within this hack to figure out additional details or pivot into other parts of their infrastructure?

That's Zach Edwards, a researcher at Silent Push. The research we're discussing

today is titled New Lazarus Group Infrastructure, Acquires Sensitive Intel related to $1.4 billion

by-bit hack and past attacks.

And so we essentially started to immediately just look for any domains that mentioned by bit that were registered recently.

And so our process was rather elementary at the start of it, but almost immediately we had a hit that there was a domain by bit-assessment.com that was registered just hours before the attack supposedly occurred.

And so our team started looking into this domain and immediately in the Who Is Records, there was an email address exposed, which actually had been used in other Lazarus, North Korean hacker attacks in the past.

...