The early bird gets the exploit.

Amazon spots PHP exploits before disclosure. GitLab patches a critical flaw. Meta faces a $25 billion penalty. Autonomous AI agents power new cyberattacks. Hackers breach a Japanese cloud provider. CyberCartel unleashes AI against Latin American banks. Tor exit nodes are hijacked. OpenAI coding agents disable security monitoring. Interpol dismantles thousands of cybercrime networks across Africa. Our guest is Danny Manimbo, ISO and AI Practice Leader at Schellman, explaining why companies waiting for AI regulatory clarity may already be behind. Spotify hits the skip button on AI slop. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Danny Manimbo, ISO & AI Practice Leader at Schellman, discussing why companies waiting for AI regulatory clarity are already behind. If you enjoyed this conversation, check out the full interview on Caveat.

Selected Reading

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot (AWS Security Blog)

GitLab warns of new max severity code execution vulnerability (Bleeping Computer)

Meta ordered to pay $25 billion penalty in New Mexico Cambridge Analytica case (CNBC)

CrowdStrike Uncovers New Agentic AI Campaigns (CrowdStrike)

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected (Bleeping Computer)

CARLIY0S: CyberCartel's AI Attacks on Latin American Banks (Straiker)

333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email (Ars Technica)

Suppressing misalignment monitoring alerts and disabling misalignment monitoring (OpenAI Alignment)

Authorities disrupt nearly 11,000 cybercrime networks in Africa (Bleeping Computer)

One Year In: Putting Human Artistry First on Spotify (Spotify)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices