CyberWire Daily
- Episodes
- 946
- Released
- daily
- Latest episode
- Nov 14, 2026
About the podcast
The daily cybersecurity news and analysis industry leaders depend on. Published each weekday, the program also includes interviews with a wide spectrum of experts from industry, academia, and research organizations all over the world.
Episodes 946
A little something extra comes preinstalled. [Research Saturday]
Today Cristian Silviu Stahie, Security Analyst from Bitdefender, joins to discuss their work on The phone was compromised before the user turned it on: the rise of Midnight Mimosa. Bitdefender researchers have …
Show notes
Today Cristian Silviu Stahie, Security Analyst from Bitdefender, joins to discuss their work on The phone was compromised before the user turned it on: the rise of Midnight Mimosa. Bitdefender researchers have uncovered a malware campaign dubbed Midnight Mimosa that comes preinstalled on low-cost Android devices, compromising phones before users even turn them on.
The malware operates with system-level privileges, allowing attackers to silently install and remove apps, commit ad and click fraud, collect device information, and turn infected phones into residential proxy nodes for botnets. Researchers also identified 13 apps on Google Play sharing the same malicious code and infrastructure, highlighting how the campaign reaches users through both compromised device firmware and seemingly legitimate apps.
The research and executive brief can be found here:
Learn more about your ad choices. Visit megaphone.fm/adchoices
Out of office, out of service.
Microsoft 365 recovers from a global outage. StingyBasilisk pivots through Windows named pipes to infiltrate isolated networks. The FBI freezes billions after North Korea's Binance heist, while Pyongyang's …
Show notes
Microsoft 365 recovers from a global outage. StingyBasilisk pivots through Windows named pipes to infiltrate isolated networks. The FBI freezes billions after North Korea's Binance heist, while Pyongyang's Sapphire Sleet steals $400 million via spoofed video calls. Cupertino details Secure Exclaves for ambient sensor privacy. Operation TorNado nets 354 arrests in a global dark web crackdown. Check Point patches an actively exploited zero-day tied to wiper attacks. The wfx-loot campaign hijacks thousands of GitHub accounts to harvest cloud secrets. And civil liberties groups warn Congress against slipping Section 702 renewal into the defense bill. Our guests are Lauren Zabierek and Bob Lord, discussing the launch of the Software Safety Institute. United grounds personal AI agents over credential and compliance risks.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Lauren Zabierek and Bob Lord to discuss the launch of the Software Safety Institute, the work behind its creation, and the push for greater accountability among software manufacturers. If you enjoyed this conversation and want to hear the full interview, check it out here.
Selected Reading
What we know about the global Microsoft outage (BBC)
Hackers Use Windows Named Pipes and SMB to Spread Malware Across Isolated Government Networks (Cyber Security News)
FBI Tracks Billions in Stolen Crypto After Massive Binance Cyberattack (The 420)
North Korean hackers steal more than $400 million using video images, FBI says (Reuters)
Apple details Secure Exclaves, isolated runtimes for camera and microphone data (Help Net Security)
354 dark web vendors and buyers arrested in Operation TorNado (Help Net Security)
Check Point warns of zero-day flaw exploited for root access (Bleeping Computer)
Hackers compromise 4,800 GitHub accounts to steal cloud credentials (Bleeping Computer)
Don’t put Section 702 spying law renewal in defense bill, groups urge Hill leaders (CyberScoop)
United to block customers from using AI agents, citing cyber threats (The Record)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
A patchwork of problems.
Patch Tuesday. Maersk investigates a legacy system breach. A chip-smuggling probe stalls after Nvidia reaches out to Commerce. A US Army officer is arrested in the UK for alleged Russian espionage …
Show notes
Patch Tuesday. Maersk investigates a legacy system breach. A chip-smuggling probe stalls after Nvidia reaches out to Commerce. A US Army officer is arrested in the UK for alleged Russian espionage. Kazakhstan-linked hackers deploy AI agents across Central Asia. Opsec blunders unmask an alleged Qilin ransomware boss. Researchers hijack connected cars via Android apps. Our guest is Tim Starks from CyberScoop to discuss what Democratic control of Congress means for cybersecurity. A New Jersey township holds the news until after the votes.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Tim Starks from CyberScoop is back today to discuss what Democratic control of Congress means for cybersecurity. You can check out Tim’s coverage here.
Selected Reading
Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft (SecurityWeek)
Asus, Zoom Release Security Patches (SecurityWeek)
Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities (SecurityWeek)
Fortinet Patches Nearly 100 Vulnerabilities (SecurityWeek)
Shipping giant Maersk probes 'IT security incident,' data theft (The Register)
U.S. Commerce Dept. Inquiry Into Megaspeed Was Halted After Nvidia Intervention (The New York Times)
Nvidia Intervened in US Probe of Megaspeed Chip Smuggling (Bloomberg)
U.S. Army officer arrested in U.K. on suspicion of trying to steal secrets for Russia (The Washington Post)
Kazakhstan-linked hackers used AI agent to spy on Central Asian governments (The Record)
Who Runs the Ransomware Group Qilin? (Krebs on Security)
Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns (The Register)
The $26 Million Cyber Heist Rocking a Small New Jersey Town (Wall Street Journal)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
CyberWire Daily at 10: Developments in AI and machine learning over the past decade. [Special Edition]
In this episode, Dave Bittner joins Maria Varmazis to explore how AI in cybersecurity has changed over the past decade, from opaque, marketed machine-learning features to widely accessible generative AI. They …
Show notes
In this episode, Dave Bittner joins Maria Varmazis to explore how AI in cybersecurity has changed over the past decade, from opaque, marketed machine-learning features to widely accessible generative AI. They examine defensive automation, attacker enablement, workforce consequences, and why human oversight remains essential, before looking ahead and recalling the early chatbot ELIZA.
Join Maria and Dave as they discuss:
- Cybersecurity AI development from anomaly detection, Watson, and the DARPA Cyber Grand Challenge to today’s generative AI and autonomous agents.
- How AI has changed phishing, deepfakes, vulnerability discovery, sensitive-data exposure, and the speed of attacker operations.
- TheAutomation’s impact on security teams, including entry-level roles and the balance between machine-speed analysis and human judgment.
- Keeping humans in the loop while remaining optimistic that AI could ultimately give defenders an advantage.
Learn more about your ad choices. Visit megaphone.fm/adchoices
The next name on CISA's door.
Palantir’s CISO gets the nod for CISA. Tehran takes the rap for sabotaging European grocery freezers. Russia’s Turla turns victim Exchange servers into passive spy hubs. Barracuda battles actively chained …
Show notes
Palantir’s CISO gets the nod for CISA. Tehran takes the rap for sabotaging European grocery freezers. Russia’s Turla turns victim Exchange servers into passive spy hubs. Barracuda battles actively chained gateway zero-days. Vanderbilt grapples with a BYOD ransomware outbreak. CISA rushes patches for critical IBM and SignalWire flaws, while revamping its national incident portal. ENISA tracks the EU’s cyber maturity gap. Cryptographers debate whether AI will crack modern encryption. Our guest is Duncan Greatwood, CEO at Xage Security, discussing the cybersecurity problem you can’t patch away. Chinese AI labs set up shop in Silicon Valley's backyard.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
On today’s Industry Voices segment, we are joined by Duncan Greatwood, CEO at Xage Security, discussing the cybersecurity problem you can’t patch away. If you enjoyed this conversation be sure to check out the full interview here.
Selected Reading
White House Nominates Palantir Security Chief Michael LoSapio to Lead CISA (HSToday)
CISA updates Cyber Incident Reporting form to improve threat intelligence analysis, national cyber defense (Industrial Cyber)
ENISA reveals the State of Cybersecurity in the Union (ENISA)
France, U.S. Suspect Iran Was Behind Cyberattack on European Fridges (Wall Street Journal)
Quantum Computers Are Poised to Crack Encryption. AI Could Beat Them to It. (Wall Street Journal)
Hackers now exploit critical Barracuda ESG flaws to gain root access (Bleeping Computer)
Exchange for breakfast: Turla’s Cereal tricks are not for kids (ESET)
Vanderbilt University hit in BYOD ransomware attack, data theft claimed (Bleeping Computer)
IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks (SecurityWeek)
Chinese AI labs hire Silicon Valley engineers to rival OpenAI, Anthropic (Rest of World)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Peer pressure meets private keys.
A classified memo ties Nvidia’s chief executive to Chinese espionage. AI coding agents crack under peer pressure, coughing up private keys. Big breaches hit seven million Japanese shoppers and three million …
Show notes
A classified memo ties Nvidia’s chief executive to Chinese espionage. AI coding agents crack under peer pressure, coughing up private keys. Big breaches hit seven million Japanese shoppers and three million students here in the States, while a French bank takes a multi-million-dollar hit through a vendor compromise. Adversaries weaponize a fresh OpenSSH bypass in the wild, pro-Russian hacktivists put dark web bounties on senior European officials, and Google drafts digital IDs to solve the passkey recovery puzzle. Monday business briefing. Our guest is Chris Grove, Director of Cybersecurity Strategy at Nozomi Networks, discussing the critical infrastructure implications of the European refrigeration attacks. Beijing goes all-in on domestic silicon.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire GuestToday, we are joined by Chris Grove, Director of Cybersecurity Strategy at Nozomi Networks, to discuss the critical infrastructure implications of the European refrigeration attack part 2.
Selected ReadingRubio Warned Officials About Nvidia Chief’s Entanglement With Chinese Spy (The New York Times)
Agents reveal secrets when offered to team up with each other (The Register)
Japanese homeware giant pulls online store after cloud breach puts 7.7M records at risk (The Register)
Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH (SecurityWeek)
Crédit Mutuel Arkéa Targeted in Reported $133m Heist (Infosecurity Magazine)
Over 3 Million People Hit by Frontline Education Data Breach (SecurityWeek)
Google proposes using digital credentials for secure account recovery (Biometric Update)
Pro-Russian hackers target European officials, offer rewards for personal information (The Record)
CrowdStrike acquires Fiddler AI and Dreadnode. (N2K Pro Business Briefing)
Huawei says it’s made a 100 percent Chinese PC (The Register)
Share your feedback.What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
The hidden risks of system integration. [T-Minus: Space-Cyber Briefing]
Though many look to ensure that they meet mission readiness requirements, overreliance on these practices can allow hidden risks to go unchecked. Host Maria Varmazis sits down with Vito Askins, founder of Green …
Show notes
Though many look to ensure that they meet mission readiness requirements, overreliance on these practices can allow hidden risks to go unchecked.
Host Maria Varmazis sits down with Vito Askins, founder of Green Until Integration Consulting, to discuss risk accumulation and operational readiness. The two look at how these integration risk can often go overlooking during systems integration monitoring efforts.
Key Sources:
Like what you heard? Be sure to subscribe to our free Signals and Space Briefing, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-space Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to [email protected]. You can also fill our our audience survey: https://www.surveymonkey.com/r/NJYCN2P
T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Stealing more than the spotlight. [Research Saturday]
This week, we are joined by Matt Poto, Associate Triage Analyst at Huntress, discussing their work on "Grand Theft Auto VI Hype Leads to Malware." Threat actors are exploiting the hype surrounding the upcoming …
Show notes
This week, we are joined by Matt Poto, Associate Triage Analyst at Huntress, discussing their work on "Grand Theft Auto VI Hype Leads to Malware." Threat actors are exploiting the hype surrounding the upcoming release of Grand Theft Auto VI (GTA6) by distributing fake leaked game downloads designed to infect unsuspecting gamers.
Huntress identified malicious ISOs promoted through search engine poisoning, gaming forums, torrent sites, and social media that contain multiple types of malware, including remote access trojans (RATs), an infostealer, and ransomware. The malware can steal credentials and personal information, give attackers control of compromised systems, and encrypt or destroy files, with evidence suggesting the campaign may be targeting Russian-speaking gamers.
The research and executive brief can be found here:
Learn more about your ad choices. Visit megaphone.fm/adchoices
Keeping cyber threats on ice.
Federal agencies warn of cyberattacks on industrial refrigeration systems. Healthcare cybersecurity could get a post-midterm boost. Chainalysis exposes customer credentials, and DigiCert discloses a breach …
Show notes
Federal agencies warn of cyberattacks on industrial refrigeration systems. Healthcare cybersecurity could get a post-midterm boost. Chainalysis exposes customer credentials, and DigiCert discloses a breach. OpenAI's latest model learns to respect boundaries. D-Link warns of unpatched switch vulnerabilities. The EU accuses TikTok of leading users down harmful rabbit holes, while tech giants challenge California's child safety law. Federal prosecutors charge three suspects in a $129 million AI-powered impersonation scheme. Our guest is Greg Notch, CTO of Expel, sharing thoughts on how pacing AI won't stop the bad actors. Meta's AI feeding frenzy gets put on a diet.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire GuestToday we are joined by Greg Notch, CTO of Expel, sharing thoughts on how pacing AI won't stop the bad actors.
Selected ReadingUS Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems (IC3)
How Democrats' Win Could Reshape Healthcare Cyber Policy (GovInfo Security)
Chainalysis says breach exposed credentials for all customers (Bleeping Computer)
DigiCert Data Breach Impacts Business Customer Information (SecurityWeek)
OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line (SecurityWeek)
D-Link warns of multiple zero-days in DGS-3130 Series switches (Bleeping Computer)
EU accuses TikTok of trapping users in harmful ‘rabbit holes’ (The Record)
Social media giants sue California to overturn law shielding kids 15 and under from compulsive use (The Record)
3 Charged in Scheme to Use AI to Impersonate CEOs and Attorneys to Steal $129 Million (SecurityWeek)
Everyone Everywhere Hated Meta’s New AI Training Terms. Now, They’re On Pause (404 Media)
Share your feedback.What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Claude, you've got company.
Claude Dispatch opens the door to hijacking. Residential proxies turn up on White House networks. Asian airlines suffer a wave of data breaches. Cisco and WatchGuard roll out critical patches. GhostMap traps …
Show notes
Claude Dispatch opens the door to hijacking. Residential proxies turn up on White House networks. Asian airlines suffer a wave of data breaches. Cisco and WatchGuard roll out critical patches. GhostMap traps Android phones in endless reboot loops. Hackers exploit a Zyxel zero-day to compromise nearly a thousand devices. Ukraine's scam call center crackdown ensnares senior security officials. AI-powered scammers prey on owners of missing pets. A former U.S. government IT worker admits to spying for Ethiopia. Our guest is Rebecca Krauthamer, CEO and co-founder of QuSecure, with insights on the NIST PQC roadmap. Voters pull the plug on data centers.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Rebecca Krauthamer, CEO and co-founder of QuSecure, sharing insights on the NIST PQC roadmap.
Selected Reading
Want to Rent an Internet Address at the White House? (Krebs On Security)
Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries (The Register)
More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus (The Record)
Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws (SecurityWeek)
GhostMap: The Android flaw that crashes your phone before you open the app (Bitdefender)
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day (SecurityWeek)
Ukraine fires two senior security officials amid corruption probe into scam call centers (The Record)
Scammers using AI-generated images of missing pets to demand rewards (BBC News)
US gov IT worker pleads guilty to sending Top Secret files to Ethiopia (The Register)
The Results Are In: Voters Hate Data Centers (WIRED)
Midterm Data Center Backlash Puts AI Expansion Plans at Risk (BankInfo Security)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Ballots, bots, and backlash.
Election Day brings typical cyber threats, technical glitches, and misinformation. Hackers tamper with European refrigeration systems. OpenAI faces questions over years of security warnings. Nvidia reportedly …
Show notes
Election Day brings typical cyber threats, technical glitches, and misinformation. Hackers tamper with European refrigeration systems. OpenAI faces questions over years of security warnings. Nvidia reportedly restricts business with Chinese data center customers. Binance details a six-billion-dollar heist attributed to North Korea. Barracuda patches critical security flaws. Gartner predicts an engineering-heavy future for security operations. Canadians face charges for hacking U.S. universities. Our guest is Heather Ceylan, CISO at Box, discussing Enterprise AI in 2026: what security leaders learned — and what comes next. AI takes the pitch, misses the point.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
On today’s Industry Voices segment, we are joined by Heather Ceylan, CISO at Box, discussing Enterprise AI in 2026: what security leaders learned — and what comes next. If you enjoyed this conversation, be sure to check out the full conversation here.
Selected Reading
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting (CyberScoop)
Voters deliver "AI earthquake," rebuking tech and billionaires (Axios)
Election office reports failed attempts to hack its online services (Nextgov)
Hackers Hijacked French Blood Plasma Freezers, Changing Temperature Settings From −30°C to 110°C (Cyber Security News)
Hackers Alter Refrigeration Settings, Forcing European Stores to Discard Food (Hackread)
OpenAI employees warned about operational security lapses for years, sources say (Reuters)
Qualcomm signs major 5G infrastructure deal with SpaceX for Starlink Mobile network (Reuters)
Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist (SecurityWeek)
North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack (SecurityWeek)
Barracuda warns of critical flaws allowing root access to devices (Bleeping Computer)
Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028 (Bleeping Computer)
US charges two Canadians accused of hacking US universities (Bleeping Computer)
I Put a Bunch of AI Agents in Charge of a Fantasy Soccer Team. They’re Not Better Than Humans—Yet (WIRED)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Democracy without a safety net.
CISA scales back its Election Day role. Google takes down a massive Android TV botnet. The UK warns of AI-powered attacks on critical infrastructure. German lawmakers face potential spyware threats. An …
Show notes
CISA scales back its Election Day role. Google takes down a massive Android TV botnet. The UK warns of AI-powered attacks on critical infrastructure. German lawmakers face potential spyware threats. An AI-enabled infostealer ranks its victims. Ivanti patches more exploited zero-days. NATO launches cyber war games in Estonia. A Harvard breach exposes data linked to 850,000 email addresses. Our guest is Alex Weinert, Chief Product Officer at Semperis, on protecting the identity fabric in the AI era. Democracy is calling. And texting.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today on our Industry Voices segment, we are joined by Alex Weinert, Chief Product Officer at Semperis, talking about protecting the identity fabric in the AI era. If you enjoyed this conversation be sure to check out the full interview here.
Selected Reading
CISA Retreats From Election Security Ahead of Midterms (The New York Times)
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies (Krebs On Security)
NCSC Chief Warns of Imminent AI Ransomware Threat to UK Critical Infrastructure (Infosecurity Magazine)
Germany says lawmakers' iPhones may have been hacked with spyware (TechCrunch)
Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims (WIRED)
Ivanti patches two more Connect Secure zero-days chained in attacks (Bleeping Computer)
NATO's Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training (SecurityWeek)
Harvard University data breach exposed info of 851,000 accounts (Bleeping Computer)
My Journey to the Center of America’s Political Spam Text Hell (WIRED)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
A TraderTraitor's guide to getting away with billions.
The FBI blames North Korea for a record-breaking crypto heist. Hackers hijack air raid alerts in Ukraine and Russia. European supermarket freezers come under attack again. Aur0ra ransomware operators put AI …
Show notes
The FBI blames North Korea for a record-breaking crypto heist. Hackers hijack air raid alerts in Ukraine and Russia. European supermarket freezers come under attack again. Aur0ra ransomware operators put AI agents to work. Android’s SMS of Death gets a proof-of-concept exploit. Malicious Claude Code extensions infiltrate Cursor’s marketplace. Google offers a quarter-million-dollar bug bounty. ChatGPT faces a wrongful death lawsuit. Monday business briefing. Our guest is Cynthia Kaiser, SVP of Halcyon’s Ransomware Research Center and former Deputy Director of the FBI’s Cyber Division, sharing how the AI cybercrime economy is open for business and booming. The secure USB drive that wasn’t.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Cynthia Kaiser, SVP of Halcyon’s Ransomware Research Center and former Deputy Director of the FBI’s Cyber Division, shares how the AI cybercrime economy is open for business and booming.
Selected Reading
FBI Attributes Binance Heist to North Korea’s TraderTraitor (Infosecurity Magazine)
Ukraine's air raid alert system hacked, Russian system targeted hours later (Kyiv Independent)
News Cybercrime Recorded Future Second wave of suspected cyberattacks hits supermarket freezers across Europe (The Record)
AI used in Aur0ra ransomware testing and execution (SOPHOS)
New Android SMS of Death exploit can remotely crash unpatched phones (Bleeping Computer)
Malicious Claude Code Extension Served in Cursor Supply Chain Attack (SecurityWeek)
Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward (SecurityWeek)
Parents of woman who died of seizure after ChatGPT misguidance sue OpenAI (The Guardian)
Upwind Security raises $400 million in Series C funding. (N2K Pro Business Briefing)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Building interoperable satellite connectivity. [T-Minus: Space-Cyber Briefing]
As space's infrastructure continues to grow, the question of space leadership will not center around who has the most satellites, but instead around who can leverage the greatest satellite capabilities. Host …
Show notes
As space's infrastructure continues to grow, the question of space leadership will not center around who has the most satellites, but instead around who can leverage the greatest satellite capabilities.
Host Maria Varmazis met with Yasrine Ibnyahya, VP of technology investments and partnerships at Viasat, to discuss Mobile Satellite Services Association (MSSA) Reference Architecture. Ibnyahya discusses how evolving architecture has continued to build on earlier work utilizing multiple waveform technologies, greater interoperability, and incorporating more satellite payloads.
Key Sources:
Like what you heard? Be sure to subscribe to our free Signals and Space Briefing, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-space Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to [email protected]. You can also fill our our audience survey: https://www.surveymonkey.com/r/NJYCN2P
T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.
Learn more about your ad choices. Visit megaphone.fm/adchoices
The long road to root. [Research Saturday]
Today we are joined by Subhajeet Singha, Senior Security Researcher at Acronis Threat Research Unit, discussing their work on "Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new …
Show notes
Today we are joined by Subhajeet Singha, Senior Security Researcher at Acronis Threat Research Unit, discussing their work on "Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit." A Chinese-speaking threat actor tracked as Red Heron exploited a critical Gitea remote code execution vulnerability, CVE-2026-60004, within days of its public disclosure, compromising organizations across five countries and stealing source code, credentials, and sensitive infrastructure data.
The campaign involved deploying persistent backdoors and a newly identified Linux implant called JITTERLY, which contains an undocumented rootkit, SIXZUT, capable of hiding files, processes, and network connections while protecting the malware from removal. Acronis assesses with moderate confidence that Red Heron operates within a PRC-linked context, highlighting how quickly attackers can weaponize newly disclosed vulnerabilities and turn exposed development platforms into gateways for broader network compromise.
The research and executive brief can be found here:
Learn more about your ad choices. Visit megaphone.fm/adchoices
Crypto's biggest withdrawal.
Binance suffers a record-breaking cryptocurrency heist. Attackers exploit a critical GitLab flaw. Russian disinformation targets U.S. elections. Treasury sanctions North Korean IT worker operations. A …
Show notes
Binance suffers a record-breaking cryptocurrency heist. Attackers exploit a critical GitLab flaw. Russian disinformation targets U.S. elections. Treasury sanctions North Korean IT worker operations. A cyberattack halts Polymarket trading. GCHQ loses track of thousands of storage devices. An abandoned Mac app leaves security risks behind. Japan Airlines reports a third-party breach. An AI-powered command-and-control framework emerges in the wild. Our guest is Josh Devon, Co-founder & CEO of Sondera, winner of the 9th annual DataTribe Challenge. We bid farewell to the captain who inspired a generation of innovators.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today Josh Devon, Co-founder & CEO of Sondera and winner of the 9th annual DataTribe Challenge, is discussing their win.
Selected Reading
CISA says max severity GitLab flaw now exploited in the wild (Bleeping Computer)
Covert Russian Group Targets James Talarico With Baseless Claims in Texas Senate Race (The New York Times)
US sanctions Russians, North Koreans for laundering IT worker earnings (The Record)
Polymarket confirms cyberattack on third-party provider after outages (The Record)
Britain’s spy agency doesn’t know where thousands of its memory sticks are (POLITICO)
Old 'Popcorn Time' App Left Hundreds of Thousands of Macs at Risk (MacRumors)
Japan Airlines warns of data breach as country grapples with multiple cyber incidents (The Record)
NIK C2: The new AI-enabled command-and-control framework (Cisco Talos)
How North Korean hackers pulled off the biggest crypto heist in history (Metacurity)
Patrick Stewart, ‘Star Trek’ Captain and Professor X on ‘X-Men,’ Dies at 86 (The New York Times)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
A leak in the chain of command.
DHS suffers a massive data leak. Researchers reveal Volt Typhoon’s sophisticated methods. Cisco patches a firewall zero-day. A suspected coordinated supply chain attack targets public GitHub repositories …
Show notes
DHS suffers a massive data leak. Researchers reveal Volt Typhoon’s sophisticated methods. Cisco patches a firewall zero-day. A suspected coordinated supply chain attack targets public GitHub repositories. Online scams overtake phishing. NIST shares post-quantum cryptography guidance. CISA warns a VMware ESXi vulnerability is under active exploitation. The Federal Election Commission takes systems offline. A Ukrainian national gets prison time for ransomware operations. Our guest is Yonald Chery, CTO from Technology Advancement Center (TAC), discussing securing operational technology in our critical infrastructure. Bitcoin mining gets you in hot water.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
On today’s Industry Voices segment, we are joined by Yonald Chery, CTO from Technology Advancement Center (TAC), discussing securing operational technology in our critical infrastructure takes more than traditional I.T. cybersecurity skills. If you enjoyed this conversation, be sure to check out the full interview here.
Selected Reading
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents (WIRED)
Silent Train: Volt Typhoon’s Sophisticated Infection Chain into US Targets Exposed (Zero Day)
New Cisco firewall zero-day exploited to crash SSL VPN devices (Bleeping Computer)
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour (The Register)
Online Scam Volumes Double to Overtake Phishing (Infosecurity Magazine)
NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines (Infosecurity Magazine)
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day (SecurityWeek)
FEC takes down electronic filing platform after attempted hack (Nextgov)
Ukrainian Nefilim and Hive Affiliate Artem Stryzhak Jailed for 70 Months (Hackread)
Heatbit Says Your Water Heater Should Be Mining Bitcoin, and Now It Can (Gizmodo)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
A matter of national secrecy.
Senators accuse the White House of illegally withholding a secret surveillance court ruling. A suspected surveillance operation targets Starlink users. Attackers probe vulnerable Oracle E-Business Suite …
Show notes
Senators accuse the White House of illegally withholding a secret surveillance court ruling. A suspected surveillance operation targets Starlink users. Attackers probe vulnerable Oracle E-Business Suite systems. The FBI shuts down a bulletproof hosting provider. Tailworm targets Tailscale. Ohio’s Auditor of State investigates a cyberattack. A suspected ransomware attack disrupts Israel’s largest vehicle importer. Norway raises their cyber risk level to high. Our guest is Amy Blackshaw, Senior Vice President of Product Marketing for Identity at Palo Alto Networks, discussing AI exploits and identity containment. AI science needs a spam filter.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today on our Industry Voices segment, we are joined by Amy Blackshaw, Senior Vice President of Product Marketing for Identity at Palo Alto Networks, discussing "The three-month clock: Neutralizing frontier AI exploits through identity containment." If you enjoyed this conversation, check out the full interview here.
Selected Reading
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans (WIRED)
EXCLUSIVE: Alleged Israeli spy company heavily targeted Starlink users, sources say (Reuters)
How Cosmos 2612 Ran Down ICEYE-X36 in October 2026 (KeepTrack)
Hackers now scanning systems for recently-patched Oracle flaw (Bleeping Computer)
FBI seizes ‘bulletproof’ hosting site accused of facilitating child abuse, money laundering (The Record)
Tailscale Rushes Patches After Uncoordinated Disclosure of 'Tailworm' Flaws (SecurityWeek)
State official: Auditor of State's Office targeted in overseas cyberattack (News 5 Cleveland)
Colmobil cyberattack exposes vulnerabilities in Israel’s connected-car ecosystem (Ctech)
NSM hever det nasjonale cyberrisikonivået til HØYT (NSM)
The maths bust-up fuelling fears that AI is undermining science (BBC News)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
CyberWire GuestSelected Reading
Want to hear your company in the show?Learn more about your ad choices. Visit megaphone.fm/adchoices
The strategy behind the shield.
CISA unveils its 2030 cyber strategy. PHP2Shell exploits are in the wild. HHS preserves healthcare security requirements. Microsoft offers buyouts amid its AI spending spree. A cyberattack disrupts New Mexico …
Show notes
CISA unveils its 2030 cyber strategy. PHP2Shell exploits are in the wild. HHS preserves healthcare security requirements. Microsoft offers buyouts amid its AI spending spree. A cyberattack disrupts New Mexico hospitals. Google’s Finnish data center plans hit an environmental roadblock. Blue Initiative tracks maritime vulnerabilities. A Chinese national faces charges in a $37 million cryptocurrency scam. Our guest is Cal Al-Dhubaib, host of the new Authorized Intelligence podcast. Anthropic’s prospectus includes an existential disclaimer.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Cal Al-Dhubaib, host of Authorized Intelligence, sharing his vision and some highlights of the new show joining the N2K CyberWire network. If you want to learn more, listen to the trailer here.
Selected Reading
CISA lays out plan to push cyber adversaries out of US critical infrastructure (Help Net Security)
CISA confirms PHP2Shell vulnerabilities now exploited in attacks (Bleeping Computer)
HHS Retreats on Plan to Scrap EHR Security, Privacy Regs (BankInfo Security)
Microsoft offers voluntary buyouts as AI leads to efficiency push (CNBC)
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics (SecurityWeek)
‘Pure arrogance’: anger in Finland as Google illegally fells 250,000 trees for datacentre (The Guardian)
Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems (SecurityWeek)
Authorities extradite Chinese national for alleged $37M investment scam (CyberScoop)
Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI (SecurityWeek)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
The breach wasn't in the model.
A cybersecurity startup claims to have accessed sensitive internal documents at Anthropic. The Pentagon spins up covert technology programs. AI developers get a crash course in key management. A ransomware …
Show notes
A cybersecurity startup claims to have accessed sensitive internal documents at Anthropic. The Pentagon spins up covert technology programs. AI developers get a crash course in key management. A ransomware recovery executive faces federal fraud charges. Two men are accused of using AI generated phone calls to scam bank customers. Stadia RAT rises from the StealC ashes. Researchers extract sensitive information using USB power-management signals. Patching what matters…matters. Monday business briefing. Tim Starks from CyberScoop is discussing targeted ads as a security risk. Championship rings come with a catch.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Tim Starks from CyberScoop discussing targeted ads as a security risk.
Selected Reading
It took just 12 hours for an AI start-up founded by ex-DOGE staffers to break into Anthropic (Washington Post)
The Pentagon is quietly building an elite new tech sabotage agency (POLITICO)
Popular AI tool LiteLLM says unrevoked key allowed hackers to target users (The Record)
Cybersecurity CEO Indicted for Allegedly Scamming Millions From Ransomware Victims (ProPublica)
Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts (SecurityWeek)
StealC Malware Returns as Stadia RAT After Operation Endgame Takedown (Hackread)
SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs (Hackread)
The Real Jump Scare Isn’t the Attacker; It’s The Vulnerabilities You’re Focusing On (Qualys)
Proofpoint to acquire Varonis for $6.3 billion. (N2K Pro Business Briefing)
Knicks sent employees fake offer of championship rings in phishing test: Report (Ars Technica)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
The shield in space. [T-Minus: Space-Cyber Briefing]
The Ukraine has experienced a second major outage of its Starshield services reigniting questions about relying on a single private provider for critical national security services. Host Maria Varmazis sits …
Show notes
The Ukraine has experienced a second major outage of its Starshield services reigniting questions about relying on a single private provider for critical national security services.
Host Maria Varmazis sits down Dave Bittner and Brandon Karpf to discuss the recent incident where Ukraine lost Starshield coverage. They explore how the growing role of private satellite companies in warfare creates challenges for establishing operational accountability and impacts US alliances.
Key Sources:
- Musk ordered Starlink slowdown that blindsided Ukraine.
- Starlink access in Ukraine a decision for Musk, not White House, Rubio says.
Like what you heard? Be sure to subscribe to our free Signals and Space Briefing, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-space Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to [email protected]. You can also fill our our audience survey: https://www.surveymonkey.com/r/NJYCN2P
T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.
Learn more about your ad choices. Visit megaphone.fm/adchoices
The middlemen of cyber espionage. [Research Saturday]
Today we have Damon Rouse, Threat Intelligence from Lumen's Black Lotus Labs, discussing their work on "The infrastructure quartermaster: inside a China-nexus state enablement model." Black Lotus Labs …
Show notes
Today we have Damon Rouse, Threat Intelligence from Lumen's Black Lotus Labs, discussing their work on "The infrastructure quartermaster: inside a China-nexus state enablement model." Black Lotus Labs identified a China-nexus cyber infrastructure provider, dubbed a “quartermaster,” that supplies reconnaissance, proxy routing, and obfuscation services to Chinese cyber espionage actors.
Its interconnected systems, including QScan and Fast Labyrinth, help identify high-value targets, conceal malicious traffic, and support potential exploitation of government, military, research, and critical infrastructure networks. Researchers warn that this shared infrastructure makes traditional IP-based defenses less effective and recommend following CISA and NCSC guidance, reducing external attack surfaces, and keeping routers, firewalls, and IoT devices updated.
The research and executive brief can be found here:
Learn more about your ad choices. Visit megaphone.fm/adchoices
The apps are only the beginning.
Attackers target critical PHP flaws, and former CISA director Chris Krebs weighs in on AI’s role in the vulnerability surge. Railway confirms a cyberattack. HPE patches critical ArubaOS flaws. Quest Diagnostics …
Show notes
Attackers target critical PHP flaws, and former CISA director Chris Krebs weighs in on AI’s role in the vulnerability surge. Railway confirms a cyberattack. HPE patches critical ArubaOS flaws. Quest Diagnostics investigates a disruptive intrusion. Capcom reports a data breach. China-linked hackers put AI-powered attacks on autopilot. And researchers uncover a Microsoft 365 campaign that hijacks authentication tokens to bypass MFA. Our guest is Anudeep Parhar, COO at Entrust, sharing his thoughts on AI kill switches. eMudra throws in the certificate towel.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today, we are joined by Anudeep Parhar, COO at Entrust, sharing his thoughts on "If you need the AI kill switch, it's already too late."
Selected Reading
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge (SecurityWeek)
426 Android and iOS Apps Linked to PHP2Shell Backend Risks (Hackread)
Chris Krebs on AI discovering cyber vulnerabilities: It'll get worse before it gets better (CNBC)
Developer platform Railway urges 'all users' to revoke secret keys after cyberattack (TechCrunch)
HPE patches eight max severity RCE and auth bypass AOS flaws (Bleeping Computer)
Quest Diagnostics warns of potential data theft after attack on lab service system (The Record)
Gaming Giant Capcom Confirms Data Breach Exposed Users' Personal Information (Infosecurity Magazine)
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks (SecurityWeek)
M365 Token Spray and Replay Campaign Compromises Business Email Accounts (Huntress)
eMudhra to Exit global SSL/TLS Certificate Business (eMudhra)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
The early bird gets the exploit.
Amazon spots PHP exploits before disclosure. GitLab patches a critical flaw. Meta faces a $25 billion penalty. Autonomous AI agents power new cyberattacks. Hackers breach a Japanese cloud provider. CyberCartel …
Show notes
Amazon spots PHP exploits before disclosure. GitLab patches a critical flaw. Meta faces a $25 billion penalty. Autonomous AI agents power new cyberattacks. Hackers breach a Japanese cloud provider. CyberCartel unleashes AI against Latin American banks. Tor exit nodes are hijacked. OpenAI coding agents disable security monitoring. Interpol dismantles thousands of cybercrime networks across Africa. Our guest is Danny Manimbo, ISO and AI Practice Leader at Schellman, explaining why companies waiting for AI regulatory clarity may already be behind. Spotify hits the skip button on AI slop.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Danny Manimbo, ISO & AI Practice Leader at Schellman, discussing why companies waiting for AI regulatory clarity are already behind. If you enjoyed this conversation, check out the full interview on Caveat.
Selected Reading
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot (AWS Security Blog)
GitLab warns of new max severity code execution vulnerability (Bleeping Computer)
Meta ordered to pay $25 billion penalty in New Mexico Cambridge Analytica case (CNBC)
CrowdStrike Uncovers New Agentic AI Campaigns (CrowdStrike)
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected (Bleeping Computer)
CARLIY0S: CyberCartel's AI Attacks on Latin American Banks (Straiker)
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email (Ars Technica)
Suppressing misalignment monitoring alerts and disabling misalignment monitoring (OpenAI Alignment)
Authorities disrupt nearly 11,000 cybercrime networks in Africa (Bleeping Computer)
One Year In: Putting Human Artistry First on Spotify (Spotify)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
No time to PHP around.
Critical PHP flaws threaten millions of websites. Weak certificates from an Indian authority spark a global security scramble. Investigators probe a U.S. consulting executive’s alleged ties to ShinyHunters …
Show notes
Critical PHP flaws threaten millions of websites. Weak certificates from an Indian authority spark a global security scramble. Investigators probe a U.S. consulting executive’s alleged ties to ShinyHunters. SafePay ransomware hits at least 600 critical infrastructure organizations. Researchers find troubling security biases in Chinese AI-generated code. A $10 million initiative bolsters cybersecurity for small U.S. utilities. An American pleads guilty to stealing from thousands of servicemembers and veterans. Leo Scott, Managing Director of DataTribe, is talking about their upcoming Cyber Innovation Conference and the 9th annual DataTribe Challenge. Two pallets of GPUs never make it to baggage claim.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Leo Scott, Managing Director of DataTribe, talking about their upcoming Cyber Innovation Conference and the 9th annual DataTribe Challenge.
Selected Reading
PHP warns it plans to release 2 emergency patches imminently (Ars Technica)
The Internet goes on high alert after discovery of 8 compromised TLS certs (Ars Technica)
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site (Krebs on Security)
SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns (Infosecurity Magazine)
China Defends DeepSeek After US Ban of Its AI From Government Systems (SecurityWeek)
Chinese AI Model Writes More Hackable Code When Told It's for US Contractor (SecurityWeek)
Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers (CyberScoop)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Cloudy with a chance of outages.
A Google Cloud outage disrupts UK banks. DHS bans DeepSeek. Shape-shifting ransomware targets Macs. Bank of America hires an army to patch AI-discovered flaws. Canada looks to bypass the U.S. with a …
Show notes
A Google Cloud outage disrupts UK banks. DHS bans DeepSeek. Shape-shifting ransomware targets Macs. Bank of America hires an army to patch AI-discovered flaws. Canada looks to bypass the U.S. with a transatlantic cable. A contractor breach exposes California student data. Cybersecurity hiring slumps, but AI skills are booming. Researchers expose the Silent Ransom Group’s playbook. A suspected Qilin ransomware operator takes a vacation straight into custody. Our guest is Roman Arutyunov, Co-Founder of Xage Security, discussing the next era of Zero Trust. A hotel phishing scheme gets a chilly reception.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today on our Industry Voices segment, we are joined by Roman Arutyunov, Co-Founder and Chief Product Officer at Xage Security, discussing the next era of Zero Trust is about actions, not just access. If you enjoyed this conversation, check out the full interview here.
Selected Reading
Google Cloud services down in UK; banks, public sector report issues (Reuters)
US banning Chinese AI DeepSeek from government agency IT systems (Reuters)
Heartbreaker 💔 (Objective-See)
Bank of America hired 1,000 contractors to patch software flaws exposed by Anthropic's Mythos (CNBC)
One Compromised Login Exposed Millions of California Students' Records (SecurityWeek)
US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars (SecurityWeek)
Behind the Help Desk Call: Insights from the Leaked Chats of an IT-Impersonation Extortion Crew (GuidePoint Security)
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient's death (Bitdefender)
Nearly 480,000 Phishing Emails Traced to Computer Hidden Behind Hotel Fridge (Hackread)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
The ballot box meets the bot.
State election officials question CISA’s commitment to election security. Stolen credentials force ConnectWise to suspend cloud services. Fake calendar invites steal Microsoft logins. Temu settles Texas privacy …
Show notes
State election officials question CISA’s commitment to election security. Stolen credentials force ConnectWise to suspend cloud services. Fake calendar invites steal Microsoft logins. Temu settles Texas privacy allegations. Toronto police arrest seven in a cryptocurrency kidnapping case. The G7 sounds the alarm on quantum threats. Monday business briefing. Ben Yelin, sits down with Kevin Tian, CEO and Co-Founder of Doppel, to share how AI is changing the threat landscape for sports organizations. MapQuest puts surveillance on the map.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today Ben Yelin, from the University of Maryland Center for Cyber, Health, and Hazard Strategies, and co-host of Caveat sits down with Kevin Tian, CEO and Co-Founder of Doppel, sharing how AI is changing the threat landscape for sports organizations and why the team is expanding its investment in social engineering defense.
Selected Reading
This Cybersecurity Agency Is Supposed to Protect U.S. Elections. Officials Fear It’s Been Compromised by Trump. (ProPublica)
FBI and CISA Warn of AI-Written Phishing Before the 2026 Midterms (Technology.org)
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365 (SecurityAffairs)
Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft (Hackread)
Chinese online retailer Temu agrees to data privacy curbs to settle Texas lawsuit (Reuters)
Toronto Police Arrest Seven Men, Seize More Than 2,700 Rounds of Ammunition Following Violent Abduction Investigation (Toronto Police Service)
G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules (Infosecurity Magazine)
Harmonic Security secures $50 million in a Series B round. (N2K Pro Business Briefing)
MapQuest now lets you locate nearby surveillance cameras, like Flock (This Week in Security)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Expanding America’s space capabilities. [T-Minus: Space-Cyber Briefing]
Through Executive Orders, the Trump administration is looking ensure that America's space capabilities have the workforce and technological innovation needed for success. Host Maria Varmazis sits down with …
Show notes
Through Executive Orders, the Trump administration is looking ensure that America's space capabilities have the workforce and technological innovation needed for success.
Host Maria Varmazis sits down with Producer Ethan Cook to continue their conversation as they look at more space-related Executive Orders. While the previous episode looked at the orders that laid out the administration's broad space goals, this conversation looks at the orders that look to advance America's workforce and technical capabilities.
Key Sources:
Like what you heard? Be sure to subscribe to our free Signals and Space Briefing, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-space Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to [email protected]. You can also fill our our audience survey: https://www.surveymonkey.com/r/NJYCN2P
T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Cyber Resilience at Machine Speed: Author John Kindervag and contributor Dr. Chase Cunningham. [Special Edition]
On this special edition podcast, Dave Bittner is joined by John Kindervag and Dr Chase Cunningham to discuss the principles of zero trust, cyber resilience, and how AI is transforming cybersecurity strategies …
Show notes
On this special edition podcast, Dave Bittner is joined by John Kindervag and Dr Chase Cunningham to discuss the principles of zero trust, cyber resilience, and how AI is transforming cybersecurity strategies. They explore practical frameworks, misconceptions, and the future of security in a machine-speed world.
John is the author of "Cyber Resilience at Machine Speed: The Zero Trust Model for the AI Era," and Chase is one of the book's contributors.
Learn more about your ad choices. Visit megaphone.fm/adchoices
The wrong kind of access. [Research Saturday]
Dan Lisichkin, AI Security Researcher from Pillar Security, discussing their work on "A WIF Of Fresh Access, How a GitHub Issue on Gemini-CLI Led to GCP Project Compromise." Researchers at Pillar Security …
Show notes
Dan Lisichkin, AI Security Researcher from Pillar Security, discussing their work on "A WIF Of Fresh Access, How a GitHub Issue on Gemini-CLI Led to GCP Project Compromise." Researchers at Pillar Security uncovered a vulnerability in Google’s Gemini CLI workflows that could allow an attacker to turn a malicious GitHub issue into remote code execution and gain elevated access to a Google Cloud Platform (GCP) project.
The exploit chain combined a misconfigured tool allowlist that allowed unrestricted command execution with exposed Workload Identity Federation credentials and overly broad service account permissions, potentially enabling attackers to impersonate privileged accounts. Google promptly addressed the issues by tightening tool restrictions, blocking the agent’s access to credential files, and limiting service account impersonation permissions, highlighting the risks of connecting AI agents to untrusted input and sensitive infrastructure.
The research and executive brief can be found here:
Learn more about your ad choices. Visit megaphone.fm/adchoices
These are the latest 40 of 946 episodes. You’ll find older episodes in the podcast’s feed.
Similar podcasts
More News podcasts
Is this your podcast?
Confirm it with an entry in your feed: you get a code here, add it as podcast:txt to the channel of your feed, and we check it. Your podcast is then shown as “verified” on SoundNode.