CyberWire Daily - TheNote.app

CyberWire Daily
Follow

The CyberWire is an online cybersecurity news and analysis website. It offers daily podcasts discussing different issues and topics in the cybersecurity field. The site also hosts several categories of content including cyber defense, cyber law and policy, cyber skills, and more. They feature contributions from industry experts, interviews with leading figures, and in-depth analysis on cybersecurity threats. The CyberWire serves as a comprehensive resource for organizations and individuals looking to stay updated with the latest cybersecurity trends and tips.

CyberWire Daily thecyberwire.com

RSS feeds.megaphone.fm

RSS Hunter • Aug 19, 2024

Thread Of Notes

The AI lock comes off.

The US has lifted its export ban on Anthropic's advanced AI models, allowing their return to the market. Adobe and Citrix have rapidly released crucial patches to address significant vulnerabilities in their software. A new and rapidly evolving DDoS threat known as RustDuck has been identified, showing signs of organized growth. The ransomware group The Gentlemen has escalated its attacks with an exploit capable of disabling endpoint detection and response systems. Rocket Lab is making a substantial investment by acquiring Iridium, aiming to create a fully integrated space company. Researchers have developed and revealed a new type of ransomware that operates entirely within a web browser, making it difficult for traditional antivirus software to detect. Concerns are growing regarding New Zealand's cybersecurity preparedness following several major attacks. Iran's persistent cyber espionage activities, including a recent focus on economic espionage and intellectual property theft, are drawing renewed attention. The episode features Donald Codling, CISO at REGO, discussing the vital connection between security by design, psychological safety, and digital trust. Finally, a reminder is given to sign up for the Daily Briefing and follow CyberWire Daily on LinkedIn to stay informed.

RSS Hunter • Yesterday

The court draws a privacy line.

The Supreme Court has placed limits on geofence warrants, requiring police to obtain them before accessing Google location data. The Department of Homeland Security intends to expand CISA by hiring more cybersecurity professionals and appointing a new director. The State Department is offering a substantial reward for information leading to the identification of Russian hackers targeting communication platforms. A novel legal theory could significantly alter how data is shared between the European Union and the United States. Recent cyberattacks have impacted the D.C. Housing Authority, causing its website to go offline. Vulnerabilities in Oracle and SimpleHelp software are currently being actively exploited by malicious actors. Malware was discovered on Japanese military networks, having been present for almost a year via infected USB drives. Stolen data from an Apple supplier, including a list of parts and images for a future iPhone model, has surfaced online. John Cannava, CIO at Ping Identity, highlighted that identity threats persist year-round, especially during busy periods like major events. The Secret Service is reportedly reducing its reliance on company-issued phones, indicating a shift in security practices for BYOD.

https://www.thecyberwire.com/podcasts/daily-podcast/2583/notes thecyberwire.com

RSS Hunter • Jun 30

AI behind the velvet rope.

The US government is imposing export controls on advanced AI models, potentially creating opportunities for rivals. Russian threat actors are targeting secure messaging platforms like Signal to steal account verification codes and PINs. A high-severity vulnerability in the Linux kernel, dubbed DirtyClone, allows for privilege escalation to root access. Investigations suggest that federal websites are violating privacy rules through their redesigns. Microsoft has disrupted a campaign involving over a hundred malicious browser extensions that stole credentials and engaged in ad fraud. Researchers have discovered that carefully crafted GitHub repositories can trick AI coding agents into executing malware. The Department of Justice has successfully seized hundreds of domains used for illegal World Cup streaming. An Anonymous-linked hacker received an 18-month sentence for website defacement, specifically a cyberattack on the Texas GOP. Dylan Sandlin from the NACD highlighted cyber risk as a critical concern for corporate boards. Finally, an issue has emerged where AI models used for medical diagnosis could potentially reveal the training data they used, raising patient privacy concerns.

https://www.thecyberwire.com/podcasts/daily-podcast/2582/notes thecyberwire.com

RSS Hunter • Jun 29

Uniting Women in Cyber Podcast: Breaking Barriers in Cybersecurity with Cybersecurity Girl. [Special Edition]

In this Special Edition episode, N2K CyberWire's Dave Bittner sits down with Caitlin Sarian, widely known as Cybersecurity Girl, to explore how storytelling, authenticity, and community are reshaping a more human-centered cybersecurity landscape.Recorded live at The Cyber Guild's Uniting Women in Cyber (UWIC) Event last fall, this candid conversation highlights Caitlin’s unconventional path into cybersecurity and her mission to make the industry more accessible and relatable for all. Together, they explore how breaking down technical barriers can unlock new pathways into the field especially for those from nontraditional backgrounds.UWIC brings together industry leaders, practitioners, and emerging talent to advance the cybersecurity workforce through leadership, innovation, and inclusion. Join us on Oct 8 for UWIC 2026!

https://thecyberwire.com/podcasts/special-edition/99/notes thecyberwire.com

RSS Hunter • Jun 28

Space supply chain pressures. [T-Minus: Space-Cyber Briefing]

Despite the space sector seeing greater investment and attention year-over-year, the sector still remains bound by an outdated and ineffective supply chain, especially in the United States.In this week’s episode, host Maria Varmazis sits down with Doug Anderson, Partner at PwC, and Steve Jordan-Tomaszewski, Vice President of the Space Systems Division at AIA, to dive into PwC’s recent study looking at the sector’s supply chain limitations. During the conversation, they examine the supply chain’s base risks and bottlenecks, and what strategies can be utilized to address these concerns. Key sources:Strengthening America’s space supply chainLike what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-spaceIs there a topic or person you’d like to hear on our show? You can send your questions and feedback to [email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: https://www.surveymonkey.com/r/NJYCN2PT-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.

https://thecyberwire.com/podcasts/tminus-space-cyber-briefing/713/notes thecyberwire.com

RSS Hunter • Jun 28

More bark than byte. [Research Saturday]

This week we are joined by Daniel Schwalbe, Chief Information Security Officer & Head of Investigations at DomainTools, discussing their work on "ZionSiphon OT Malware First Attempts? Psyops? Both?" Researchers at DomainTools take a closer look at ZionSiphon, a purported operational technology malware sample targeting the water sector, and find that despite its alarming appearance, it lacks many of the capabilities needed to function as a credible cyber-physical weapon. They break down the malware's architecture, its operational shortcomings, and why it may be more of a prototype or proof of concept than a deployable threat. With heightened concern surrounding attacks on critical infrastructure amid the ongoing U.S.-Iran conflict, the research offers timely insight into separating genuine OT threats from overhyped malware.The research and executive brief can be found here:Threat Intelligence Report: ZionSiphon OT Malware First Attempts?

https://thecyberwire.com/podcasts/research-saturday/431/notes thecyberwire.com

RSS Hunter • Jun 27

Factory reset required.

Tata Electronics and Bajaj Auto are still recovering from recent cyberattacks. The FCC has implemented new rules for undersea cables to enhance national security. CISA has issued a warning about a vulnerability in PTC software that is actively being exploited. The Gamaredon group is updating its methods and using legitimate services to conceal its activities. Hackers linked to Iran are weaponizing public warning systems for psychological operations. Threat actors are specifically targeting critical infrastructure throughout Southeast Asia. A framework known as DCloud is reportedly fueling a global scam economy. Polish authorities have successfully dismantled a SIM-swapping gang. France's national statistics agency experienced a cyberattack impacting nearly 13,000 employees. Michael Fanning from Splunk joined to discuss how AI reveals existing problems.

https://www.thecyberwire.com/podcasts/daily-podcast/2581/notes thecyberwire.com

RSS Hunter • Jun 26

Gone with the command.

An international operation successfully disrupted the Amadey and StealC malware infrastructure. Australian intelligence chief warned that nation-state hackers are preparing to sabotage critical infrastructure. A new stealthy backdoor may be linked to an initial access broker, and researchers have identified a supply chain vulnerability named "Cordyceps." Iran-linked MuddyWater is disguising its espionage efforts as ransomware attacks, while Cal Water disputes hacking claims about its systems. Russia reportedly continued using Cellebrite phone-cracking tools despite a ban. China's 360 cybersecurity firm has developed AI tools to compete with Anthropic's Mythos. A DraftKings hacker, known as 'Snoopy,' received an eighteen-month prison sentence. The guest, Erich Kron of KnowBe4, discussed the CAPY program, offering free cybersecurity training for families. The show also noted that nearly half of LG smart TV apps contain residential proxy SDKs.

https://www.thecyberwire.com/podcasts/daily-podcast/2580/notes thecyberwire.com

RSS Hunter • Jun 25

Klue me in on the breach.

LastPass has confirmed that customer information was affected by the Klue breach, though they assert passwords remain secure. Attackers are actively exploiting a vulnerability in Cisco Unified Communications Manager. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged actively exploited flaws in Ubiquiti and Lantronix devices, urging immediate patching. New flaws in DifyTap could allow unauthorized access to private AI conversations across different users. Researchers discovered that an AI plugin registry permitted unofficial tools to impersonate legitimate software. The launch of the xpl0itrs leak site suggests a move towards comprehensive cyber extortion services. Indian automotive giant Bajaj Auto has fallen victim to a ransomware attack. The U.S. government is urging Meta to allow its AI models to undergo national security reviews. An individual accused of administering a criminal marketplace has been extradited to the United States. Furthermore, the U.S. has expanded sanctions against a Cambodian network involved in cyber fraud operations.

https://www.thecyberwire.com/podcasts/daily-podcast/2579/notes thecyberwire.com

RSS Hunter • Jun 24

All eyes on AI.

The Five Eyes intelligence alliance has issued a warning that artificial intelligence could significantly amplify cyberattacks in the coming months. Tata Electronics, a supplier for major companies like Apple and Tesla, has confirmed a data breach where sensitive documents were allegedly stolen. Researchers have published new analysis regarding the FortiBleed vulnerability and its exploitation. Meanwhile, a breach at Gizmodo has exposed its readers to a malware campaign called ClickFix. A concerning new BootROM exploit has emerged, capable of bypassing Apple's crucial SecureROM defenses and potentially affecting millions of iPhones. Members of the cybercrime group Scattered Spider have pleaded guilty in the UK for their involvement in various cyberattacks. Attackers are actively exploiting a flaw in the Gravity SMTP plugin to steal sensitive information from WordPress websites. In a proactive move to enhance national security, an Executive Order has been signed to accelerate the federal government's transition to post-quantum cryptography. Industry experts are discussing progress and remaining challenges in achieving quantum readiness for critical infrastructure. This collection of news highlights the rapidly evolving landscape of cyber threats and security responses.

https://www.thecyberwire.com/podcasts/daily-podcast/2578/notes thecyberwire.com

RSS Hunter • Jun 23

The Klue is in the data trail.

A supply-chain attack on Klue has impacted several cybersecurity firms. A new ransomware called Prinz Eugen has been identified and is noted for its polished nature. The ShinyHunters group has leaked sensitive data belonging to 10,000 employees of the Council of Europe. Security agencies are warning about the FortiBleed operation, which targets credential harvesting. A data breach in Texas has affected hunting and fishing licensees. Microsoft has linked the Mastra AI supply-chain attack to North Korean hackers. The Vidar infostealer has developed a new method to bypass Chrome's encryption. Brazil is investigating a suspected hack of its emergency alert system. The "Industry Voices" segment features a discussion on AI-powered attacks becoming a commodity. This brief also mentions Apple patching a vulnerability in Beats Studio Buds.

https://www.thecyberwire.com/podcasts/daily-podcast/2577/notes thecyberwire.com

RSS Hunter • Jun 22

Vulnerability response: Built for humans, outpaced by machines. [CyberWire-X]

For years, security teams had time between discovery and exploitation. Time to triage. Time to validate. Time to prioritize what to fix first. AI has compressed that window. Frontier models now discover and chain vulnerabilities faster than human analysts can confirm them, and the gap between finding and fixing is shrinking in both directions. In this episode of CyberWire-X, N2K’s ⁠Dave Bittner⁠ and Federico Kirschbaum, Head of XBOW Security Lab, explore what it actually means to run autonomous offensive security, why validation workflows built for quarterly testing cycles struggle to keep up, and how practitioners are redefining what a tested application looks like when the pace of offense has fundamentally changed.

https://thecyberwire.com/podcasts/cyberwire-x/57/notes thecyberwire.com

RSS Hunter • Jun 21

Navigating the GPS threat landscape, with Brandon Karpf. [T-Minus: Space-Cyber Briefing]

Traditionally, GPS jamming attacks have been confined to the ground; however, new data shows that these attacks could be moving to target signals before they even reach the ground.In this week’s episode, host Maria Varmazis sits down with Dave Bittner and Brandon Karpf to discuss recent research that suggests the attack landscape for GPS attacks is expanding. If this research is accurate, these attacks represent a significant evolution for how defenders think about this critical technology.Key sources:Something is jamming GPS over Europe. Here's what we found.Chasing Lightning: Detecting, Characterizing, and Identifying a Powerful Space-Based GNSS Interference Source.EKS 5.Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-space Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to [email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: https://www.surveymonkey.com/r/NJYCN2P T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.

https://thecyberwire.com/podcasts/tminus-space-cyber-briefing/712/notes thecyberwire.com

RSS Hunter • Jun 21

Peeling back Banana RAT. [Research Saturday]

This week, we are joined by Tom Kellermann, Trend Micro's VP of AI Security and Threat Research, discussing their work on "Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud." Researchers from Trend Micro's MDR team uncovered the full operation behind Banana RAT, a sophisticated banking trojan they track as SHADOW-WATER-063, by analyzing both attacker infrastructure and infected victim systems. The malware uses fileless PowerShell execution, layered obfuscation, and remote-control capabilities to steal credentials, manipulate banking sessions, intercept Pix QR code payments, and facilitate financial fraud targeting Brazilian banks. The campaign appears to be operated by a Brazilian Portuguese-speaking cybercriminal group with ties to the broader Tetrade banking malware ecosystem and may be evolving toward a malware-as-a-service model.The research and executive brief can be found here:⁠Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud

https://thecyberwire.com/podcasts/research-saturday/430/notes thecyberwire.com

RSS Hunter • Jun 20

CyberWire Daily at 10: A decade of leaks, espionage, and influence operations. [Special Edition]

In this special edition of CyberWire Daily’s 10th anniversary series, N2K CyberWire's Maria Varmazis and Dave Bittner discuss leaks, espionage and influence operations over the past 10 years. Together they reflect on a decade of cybersecurity developments, focusing on the pivotal year 2016 where a shift occurred. Join N2K as we cover the rise of nation-state cyber operations, major leaks like the Panama Papers and DNC email hacks, and the evolving landscape of cyber norms, trust, and threat perception.

https://thecyberwire.com/podcasts/special-edition/99/notes thecyberwire.com

RSS Hunter • Jun 19

The botnet browser blues.

International law enforcement has successfully disrupted the SocGholish botnet, a significant achievement in combating cybercrime. The UK's cyber chief emphasized that cybersecurity is an ongoing contest, not merely a risk management exercise. Ukraine has been granted access to the EU's cybersecurity reserve, enhancing its defenses against major attacks. Meanwhile, the criminal group known as Gentlemen is reportedly upgrading its ransomware capabilities. A supply chain attack targeting WordPress via the ShapedPlugin update flow has led to malware distribution. Critical security patches have been released by vendors like F5, Atlassian, and Splunk to address vulnerabilities. A new threat called agentjacking is emerging, specifically targeting AI coding assistants by exploiting fake bug reports. Kodak has confirmed a data breach, which was subsequently claimed by the hacking group ShinyHunters. The program features Ben Yelin discussing the failure to reauthorize FISA section 702, highlighting a critical national security debate. Finally, criminal coders are experiencing anxiety about the potential for AI to automate their own illicit activities.

https://www.thecyberwire.com/podcasts/daily-podcast/2576/notes thecyberwire.com

RSS Hunter • Jun 18

The nominee in limbo.

The CyberWire Daily reports on several significant cybersecurity incidents and policy developments. President Trump has halted a key intelligence nomination, raising questions about leadership. The FBI has issued a warning about a new phishing threat targeting Microsoft 365 users. France has decided to cut ties with Palantir due to concerns about overreliance on US technology. A new Android banking trojan capable of complete device takeover has emerged.Fortinet firewalls have been targeted, with reports indicating a significant number have been compromised. CISA has issued an emergency directive for federal agencies to patch a critical vulnerability in Joomla. Data from Madison Square Garden, including information related to the Knicks, has been leaked online. Additionally, malware has been discovered hidden within Steam wallpapers, posing a risk to gamers.The DOJ has argued that artificial intelligence is vital for national security in a recent lawsuit. The podcast also features Christy Wyatt, CEO of Absolute Security, discussing a new ebook from her company. Listeners are encouraged to subscribe to the Daily Briefing for intelligence updates and to follow CyberWire Daily on LinkedIn. The CyberWire is a production of N2K Networks.

https://www.thecyberwire.com/podcasts/daily-podcast/2575/notes thecyberwire.com

RSS Hunter • Jun 17

No Mythos of escape.

Emergency talks between Anthropic and the White House regarding the Fable 5 AI model have reportedly failed. A researcher clarified that the issue stemmed from a simple code-fixing prompt, not a jailbreak attempt. Meanwhile, former President Trump is advocating for enhanced national security systems. Microsoft has released a patch for a critical vulnerability affecting its Copilot enterprise search feature. The ShinyHunters group is exploiting a zero-day flaw in PeopleSoft, targeting universities. DragonForce ransomware was found to have remained hidden within Microsoft Teams for an extended period. Amos Stealer is now specifically targeting macOS devices to steal credentials and keychain data. CISA has mandated a three-day patching deadline for a critical cPanel plugin flaw. The investigation into Delta Air Lines' 2024 system meltdown, linked to a CrowdStrike outage, has concluded without penalty. Researchers have demonstrated how easily AI search results can be manipulated using platforms like Reddit. The episode features Mike Fey, CEO of Island, discussing SASE architecture, and mentions a KPMG report retraction due to AI hallucinations.

https://www.thecyberwire.com/podcasts/daily-podcast/2574/notes thecyberwire.com

RSS Hunter • Jun 16

The fable ends before it begins.

Anthropic has deactivated its Fable 5 and Mythos 5 models to adhere to a government directive. OpenAI is currently facing an investigation from multiple state attorneys general. The Handala hacking group has claimed responsibility for breaching a California water utility. ShinyHunters has reportedly affected another victim with their cyberattacks. The FBI, in collaboration with Google, has successfully taken down a significant phishing platform known as Outsider Enterprise. A global transportation smishing campaign is a major concern, with Bogdan Botezatu from Bitdefender discussing Operation Road Trap. The increasing sophistication of deepfake technology is causing even experts to doubt their own perceptions. A former school district employee has been sentenced to jail for hacking their previous employer. Cyber leaders are defending Anthropic's decision regarding their banned models. The cybersecurity business is seeing substantial investment, with Cyera raising $600 million in a Series G funding round.

https://www.thecyberwire.com/podcasts/daily-podcast/2573/notes thecyberwire.com

RSS Hunter • Jun 15

Vulnerability management at AI speed. [CyberWire-X]

In large enterprise software companies, vulnerability management teams are facing unprecedented speed and scale as AI accelerates both discovery and exploitation of security issues. In this episode of CyberWire-X, N2K’s Dave Bittner is joined by Adobe’s Daniel Ventura, Senior Manager of the Vulnerability Operations Center, and Sangeeta Arora, Director of Vulnerability Management, to discuss how Adobe is evolving its vulnerability management strategy to keep pace with AI-driven threats. They share real world insights on prioritization, crossteam partnership, and how modern programs can balance speed with meaningful risk reduction.

https://thecyberwire.com/podcasts/cyberwire-x/56/notes thecyberwire.com

RSS Hunter • Jun 14

Securing satellites already in space, with journalist Shaun Waterman. [T-Minus: Space-Cyber Briefing]

For years, space cybersecurity has been a long sought after goal, but due to operational constraints, it was largely unfeasible.In this week’s episode, host Maria Varmazis sits down with journalist Shaun Waterman to discuss his recent article “The Newest Space Race is Cyber.” As space has increasingly become a critical infrastructure component, industry leaders and security agencies alike have begun to launch new initiatives to improve capabilities both on the ground and in orbit.Key sources:The Newest Space Race is Cyber.DHS Wants Satellite Volunteers to Test New Cyber Tools.Five Teams of Hackers will Compete to Breach US Satellite in Space.Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: ⁠https://thecyberwire.com/newsletters/signals-and-space⁠ Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to ⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: ⁠https://www.surveymonkey.com/r/NJYCN2P⁠ T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. ⁠N2K⁠ is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.

https://thecyberwire.com/podcasts/tminus-space-cyber-briefing/711/notes thecyberwire.com

RSS Hunter • Jun 14

This Sparrow doesn't migrate. [Research Saturday]

Martin Zugec, Technical Solutions Director at Bitdefender, discussing their work on "FamousSparrow APT Targets Azerbaijani Oil and Gas Industry." Bitdefender researchers uncovered a sustained cyber espionage campaign by the China-linked FamousSparrow group targeting an Azerbaijani oil and gas company, highlighting the growing focus on critical energy infrastructure in the South Caucasus. The attackers repeatedly exploited the same vulnerable Microsoft Exchange server over multiple months, deploying evolving versions of Deed RAT and Terndoor malware through sophisticated DLL sideloading techniques designed to evade detection and maintain persistence. The operation underscores FamousSparrow's adaptability and persistence, demonstrating how advanced threat actors continually refine their tooling and return to compromised environments until vulnerabilities are fully remediated and access is cut off.The research and executive brief can be found here:FamousSparrow APT Targets Azerbaijani Oil and Gas Industry

https://thecyberwire.com/podcasts/research-saturday/429/notes thecyberwire.com

RSS Hunter • Jun 13

Deadline-driven defense.

CISA is urging federal agencies to adopt a more strategic approach to vulnerability patching. Meanwhile, the House of Representatives failed to extend the FISA surveillance law. Europol has disrupted a significant cryptocurrency laundering operation, potentially linked to the "AudiA6" service, cutting off cybercriminals from substantial funds. GitHub is implementing security updates for npm to better protect against software supply chain attacks. Anthropic has denied claims that their Fable 5 AI model can be easily "jailbroken." CISA has issued a directive demanding federal agencies patch a critical, actively exploited Ivanti Sentry vulnerability within three days. Google has confirmed that the ShinyHunters group exploited a zero-day vulnerability in Oracle PeopleSoft. Evidence suggests APT28, a Russian military intelligence group, is using compromised edge devices and the MooBot botnet for its operations. Discussions are ongoing regarding increased funding for the CyberCorps scholarship program to keep pace with AI advancements. Finally, a problematic software update reportedly disabled air conditioning in Amazon delivery drivers' vehicles during hot weather.

https://www.thecyberwire.com/podcasts/daily-podcast/2572/notes thecyberwire.com

RSS Hunter • Jun 12

The court calls Google’s bluff.

Google is facing potential liability for false information generated by its AI Overviews, a ruling originating from Germany. The White House has paused public assessments of AI models due to growing national security concerns. Anthropic has launched a new, safer version of its AI technology. OpenAI has identified and addressed Chinese influence operations targeting AI discussions in the United States. A powerful new backdoor malware, MLTBackdoor, has been identified, posing a significant threat. Critical vulnerabilities have been discovered in Ivanti Sentry and Veeam Backup & Replication, prompting urgent patch releases. Supply chain attacks are evolving on the Python Package Index (PyPI), with new malware targeting developers. A massive data breach in South Korea has resulted in a record-breaking fine for an e-commerce company. The FIFA World Cup is being analyzed through the lens of AI and common clichés. Peter Barker from Ping Identity discussed how identity is becoming the central control plane for work involving humans, automation, and AI.

Hacker & Security News on Bluesky @hacker.at.thenote.app bsky.app

RSS Hunter • Jun 11

The patch pile reaches new heights.

Microsoft's recent Patch Tuesday addressed an unprecedented 206 bugs, including three zero-days. Critical infrastructure received increased attention as Congress proposed improvements to cyber plans, particularly in light of rising AI threats. A new Windows zero-day exploit, dubbed "RoguePlanet," has been released, posing a significant risk. Mobile AI applications are creating security blind spots, with a large percentage of mobile AI traffic flowing unseen by security professionals. AI agents themselves are proving susceptible to phishing attacks, as demonstrated by a recent experiment. Browser extensions represent another vulnerability, with two Chrome extensions exposing over ten million users to compromise. Spammers are increasingly using legitimate cloud services, such as Google Cloud Storage, to hide their malicious activities. CISA has recognized cybersecurity talent by announcing the winners of its annual President's Cup competition. The episode also features Joe Sykora, CEO of Coro, discussing the managed service provider (MSP) landscape. Finally, reports indicate a slight decrease in the volume of robocalls received by U.S. consumers.

https://www.thecyberwire.com/podcasts/daily-podcast/2570/notes thecyberwire.com

RSS Hunter • Jun 10

A checkmark for trust, a payload for theft.

Miasma malware is affecting Microsoft systems, while SAP has addressed critical vulnerabilities in its software. Google quickly patched a Chrome zero-day exploit that was actively being used. The npm ecosystem is being weaponized by CanisterWorm, and Mac users are targeted by a new malvertising threat. France is investigating a security breach on its secure messaging platform. Insurers are re-evaluating their approach to AI-related risks. The FBI has introduced a new list of wanted fraudsters. A U.S. citizen has admitted to spying for China. Steve Winterfeld from Akamai discusses how AI-powered bots are increasing attacks on financial services. A significant hotel bill was reversed due to a cyber-attack.

https://www.thecyberwire.com/podcasts/daily-podcast/2569/notes thecyberwire.com

RSS Hunter • Jun 9

Meta’s recovery plan needed recovery.

Meta's recent bug in a support tool inadvertently exposed over 20,000 Instagram accounts. CISA has issued a warning about active attacks targeting a vulnerability in SolarWinds Serv-U software. WordPress sites are also at risk due to the exploitation of a widely used plugin. A new variant of the Gafgyt botnet has emerged, expanding its malicious reach. Threat actors known as "Pink" are stealing cloud data using vishing and legitimate tools. Allegations have surfaced accusing IBM and AT&T of concealing hacks. Separately, a dark web drug dealer received a sentence of over 26 years. Tim Starks discussed ongoing debates regarding staffing and budget cuts at CISA. NATO recently participated in a cyber attack simulation where Ukraine acted as the adversary. The CyberWire Daily podcast is produced by N2K Networks.

https://www.thecyberwire.com/podcasts/daily-podcast/2568/notes thecyberwire.com

RSS Hunter • Jun 8

Spoofing ships, jamming drones: how GPS manipulation confuses and compromises. [T-Minus: Space-Cyber Briefing]

GPS constellations have become foundational in modern society supporting everything from navigation to financial services, making the impacts of GPS disruptions all the more concerning.As reliance on these systems have grown, so too have efforts by threat actors to disrupt them through techniques such as jamming and spoofing. As these attacks have become more effective, they are becoming increasingly common, especially in conflict zones where disruption and confusion can prove exceedingly valuable.Key sources:Information about GPS JammingWhat is GPS Spoofing?GPS jamming: The invisible battle in the Middle EastLike what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-space Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to [email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: https://www.surveymonkey.com/r/NJYCN2P T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.

https://thecyberwire.com/podcasts/tminus-space-cyber-briefing/710/notes thecyberwire.com

RSS Hunter • Jun 7

You've been muted...permanently. [Research Saturday]

Ismael Valenzuela, Arctic Wolf’s VP of Labs, Threat Research and Intelligence, discusses their work on "BlueNoroff Uses ClickFix, Fileless PowerShell, and AI-Generated Fake Zoom Meetings to Target Web3 Sector." Arctic Wolf researchers uncovered a sophisticated campaign by North Korean threat group Lazarus Group subgroup BlueNoroff that targets cryptocurrency and Web3 executives through fake Zoom and Microsoft Teams meetings, using typo-squatted links, ClickFix-style attacks, and AI-generated deepfakes to steal credentials and cryptocurrency-related data. The attackers built a self-reinforcing operation that captures victims’ webcam footage and Telegram sessions, then repurposes those assets alongside AI-generated images to create increasingly convincing fake meeting participants for future attacks. Researchers identified more than 100 victims across 20 countries, with the campaign primarily targeting CEOs, founders, investors, and senior leaders in the cryptocurrency, blockchain, and financial sectors as part of a long-running effort to steal digital assets and gain access to high-value networks.The research and executive brief can be found here:BlueNoroff Uses ClickFix, Fileless PowerShell, and AI-Generated Fake Zoom Meetings to Target Web3 Sector

https://thecyberwire.com/podcasts/research-saturday/428/notes thecyberwire.com

RSS Hunter • Jun 6

The NSA gets an AI upgrade.

The National Security Agency is reportedly using Anthropic's Mythos for cyber operations. There are discussions about a Palantir executive potentially leading CISA. A critical Linux flaw is currently being exploited in active attacks. Minecraft malware has become a commercialized offering. An npm package has been compromised as part of the Miasma worm campaign. Researchers have documented the first instance of an AI-driven container escape. A browser supply-chain attack and a university data breach have been reported, affecting individuals unexpectedly. TryHackMe's Co-Founder, Ashu Savani, discussed building effective SOC and IR teams. Online traffic is now predominantly generated by bots, exceeding human activity. The episode encourages listeners to leave ratings and reviews and offers a daily intelligence roundup.

https://www.thecyberwire.com/podcasts/daily-podcast/2567/notes thecyberwire.com

RSS Hunter • Jun 5

Not every headhunter is hiring.

The Five Eyes intelligence alliance has issued an uncommon joint warning concerning China. Jen Easterly has shared her thoughts on the President's executive order regarding artificial intelligence. Researchers have identified everyday notifications as potential attack vectors for AI systems. A new sophisticated infostealer named IronWorm, written in Rust, is specifically targeting software developers. Cisco has addressed a serious vulnerability within its Unified Communications Manager platform. Anthropic has developed a method to map AI-driven cyber activities to the MITRE ATT&CK framework. Authorities have successfully dismantled an online marketplace specializing in counterfeit identities. Jason Kikta, CTO of Automox, joins as a guest to discuss AI vulnerabilities, their real-world risks, and the challenge of rapid adoption. One extortion group was compelled to create a customer support ticket. The podcast encourages listeners to provide a five-star rating and review.

https://www.thecyberwire.com/podcasts/daily-podcast/2566/notes thecyberwire.com

RSS Hunter • Jun 4

The AI race gets a referee.

The White House is establishing oversight for artificial intelligence. A new Cyber Force is gaining traction and proposed funding. Critical infrastructure, specifically tank gauge systems, is facing cyberattacks. Acer is addressing severe zero-day vulnerabilities in its routers. A stock exchange executive was the target of a prolonged espionage campaign. A new exploit called the "HTTP/2 Bomb" can quickly disable web servers. Progress is being made in the classical computing aspects essential for quantum computers. The British military is adopting SpaceX's Starshield for its operations. A Spanish hacker known for data theft has been sentenced to jail. Benjamin Morrell from Coro Cybersecurity discusses the role of Managed Service Providers in security. Meta is adjusting its employee productivity tracking program to allow brief personal breaks.

https://www.thecyberwire.com/podcasts/daily-podcast/2565/notes thecyberwire.com

RSS Hunter • Jun 3

The bugs are piling up faster than the fixes.

A federal watchdog has raised concerns about NIST's backlog in its vulnerability database. Google has addressed a zero-day vulnerability in its Android operating system. Citizen Lab has revealed a powerful new location-tracking platform. Malware commands are being hidden within Steam comments by attackers. Researchers have observed the use of AI in developing new malware. Red Hat's npm namespace has been compromised by malicious actors. The DriveSurge malware is being distributed through ClickFix and fake updates. FreePBX has patched a critical security flaw. Dashlane has responded to a brute-force attack targeting its users. An interview with Laure Lydon of Flo Health discusses digital health platform security.

https://www.thecyberwire.com/podcasts/daily-podcast/2564/notes thecyberwire.com

RSS Hunter • Jun 2

AI joins the chain of command.

Concerns are emerging over the use of artificial intelligence in military applications. The upcoming elections are facing increased cyber threat risks. A significant vulnerability in Windows is currently being exploited by attackers. Cybersecurity agencies are considering new rules for incident reporting. A covert hacking campaign has been targeting Russian entities for an extended period. An older Linux bug has recently gained attention due to its exploitation. Heather Ceylan, CISO at Box, highlighted that governed AI depends on addressing unstructured data challenges. Microsoft is revising its approach to relationships with security researchers. Zscaler is planning to acquire identity mapping firm Symmetry Systems. The CyberWire Daily podcast is produced by N2K Networks.

https://www.thecyberwire.com/podcasts/daily-podcast/2563/notes thecyberwire.com

RSS Hunter • Jun 1

GPS: A backbone for critical infrastructure. [T-Minus: Space-Cyber Briefing]

Since its original creation in the 1970s, GPS has evolved from a technology primarily used by the military to a foundation for modern society. After the removal of selective availability for civilians in 2000, GPS’s value has significantly expanded. In the past two decades, nearly every critical infrastructure sector–telecommunications, transportation, energy, agriculture, emergency services, and financial services–relies on GPS constellations to ensure that timing and location accuracy are precise. Though many do not see its utility in day-to-day efforts, GPS has become entrenched in modern networks and services. Key sources:Removal of selective availability.Satellite Navigation - GPS - How It Works.What can GPS do?Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-spaceIs there a topic or person you’d like to hear on our show? You can send your questions and feedback to [email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: https://www.surveymonkey.com/r/NJYCN2P T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.

https://thecyberwire.com/podcasts/tminus-space-cyber-briefing/709/notes thecyberwire.com

RSS Hunter • May 31

CyberWire Daily at 10: The evolution of ransomware. [Special Edition]

In this special edition of CyberWire Daily’s 10th anniversary series, N2K CyberWire's Maria Varmazis and Dave Bittner consider the tactics, trends, and turning points that shaped the threat landscape over the last decade of ransomware. Ransomware has evolved from small-scale extortion and opportunistic attacks to sprawling, sophisticated, organized crime and state-sponsored attacks. Cryptocurrency plays a pivotal role in enabling ransomware's growth by providing untraceable payment methods.Join us as we explore key incidents like WannaCry and NotPetya, the shift from street crime to organized and nation-state cyber threats, and AI's impact on the future of ransomware.

https://thecyberwire.com/podcasts/special-edition/98/notes thecyberwire.com

RSS Hunter • May 31

The skills pay the bills. [Research Saturday]

Today we are joined by Marco Giuliani, Vice President & Head of Research at ThreatDown, discussing their work on "GachiLoader adopts AI skill lure." Threat actors are now using fake AI agent “skills” as highly convincing social engineering lures, with a new campaign disguising the GachiLoader malware as a legitimate OpenClaw tool for automated Polymarket betting. Victims are tricked through fake installation guides and polished Electron apps into downloading malware that deploys the Rhadamanthys infostealer using fileless injection and blockchain-based command-and-control infrastructure. Researchers say the campaign marks an evolution in cybercrime, turning AI skill ecosystems into a new phishing-style attack surface.The research and executive brief can be found here:⁠GachiLoader adopts AI skill lure

https://thecyberwire.com/podcasts/research-saturday/427/notes thecyberwire.com

RSS Hunter • May 30

Mind the gap between IT and OT.

The CyberWire Daily podcast discusses a range of cybersecurity incidents and developments. Iranian hackers were responsible for a cyberattack on Los Angeles transit. Chinese cyber actors are targeting infrastructure in the Middle East. Dutch authorities dismantled a massive botnet controlling 17 million devices. Researchers identified a phishing vulnerability within ChatGPT. Anthropic is preparing to launch its Mythos large language model to the public. Google Chrome has released a patch addressing numerous critical vulnerabilities. Zapier fixed a critical vulnerability chain that could have led to widespread account takeovers. The ShinyHunters hacking group claimed responsibility for a data breach at Charter Communications. A data broker who facilitated scams against millions of seniors was sentenced to prison. Maria Varmazis and Dave Bittner explored a decade of ransomware evolution in the podcast. A Google security engineer is facing charges for alleged insider trading related to Polymarket.

https://www.thecyberwire.com/podcasts/daily-podcast/2562/notes thecyberwire.com

RSS Hunter • May 29

The military wants to move at cyber speed.

Cyber Command is focused on modernization amid concerns about troop location data exposure through commercial sources. A UK visa site experienced a significant data breach, exposing passports and selfies. Microsoft criticized uncoordinated disclosures of zero-day vulnerabilities. New macOS malware is targeting crypto developers, while cryptojacking malware spreads through SEO poisoning and AI chatbots. Carnival confirmed a large-scale breach linked to the ShinyHunters group impacting millions of customer records. The alleged VenomRAT developer was extradited to France, and a Romanian hacker was sentenced for breaching Oregon state systems. The episode featured Courtney Guss from Semperis discussing crisis response planning. Listeners are encouraged to rate and review the podcast in their favorite app. Additional resources on crisis management are provided, and a daily intelligence roundup is available, along with LinkedIn updates. The show is sponsored by companies looking to reach industry leaders.

https://www.thecyberwire.com/podcasts/daily-podcast/2561/notes thecyberwire.com

RSS Hunter • May 28

Breaking the GlassWorm.

A significant operation dismantled the GlassWorm botnet, a major cyber threat. The White House updated federal cyber logging rules, aiming for stronger security practices. U.S. agencies are investigating "anti-tech extremism" as a potential security risk. GCHQ reported that Russia is actively targeting UK infrastructure with cyberattacks. New malware variants and AI-driven supply chain attacks were discovered by researchers. Extortion gangs are employing in-person tactics to steal data from law firms. The European Union is asserting control over satellite spectrum, potentially impacting U.S. space tech. Ben Yelin discussed the bipartisan effort to bolster support for CISA. The podcast also mentioned unorthodox methods for securing speaking engagements, including "hacking the system." Listeners were encouraged to leave reviews, sign up for a briefing, and provide feedback on the podcast.

https://www.thecyberwire.com/podcasts/daily-podcast/2560/notes thecyberwire.com

RSS Hunter • May 27

Attackers found a new way around MFA.

The FBI is alerting to the abuse of Microsoft OAuth authentication by attackers. India is mandating rapid patching due to the increased speed of cyberattacks, fueled by AI. Iranian hackers are combining phishing with SEO poisoning in their attacks. Anthropic's AI identified thousands of vulnerabilities in open-source projects. AI is changing bug bounty programs, and automated attacks have hit numerous GitHub repositories through the supply chain. A new zero-day exploit in a learning management system has been discovered. Authorities in the Netherlands arrested individuals associated with bulletproof hosting services used by Russian hackers. The FTC is taking action against companies for misleading claims related to "active listening" AI. Cybersecurity companies are securing notable funding. The podcast features Kurtis Minder, author of "Cyber Recon," discussing his experience in cyber espionage and ransomware negotiation.

https://www.thecyberwire.com/podcasts/daily-podcast/2559/notes thecyberwire.com

RSS Hunter • May 26

The Code of Honor: Paul J. Maurer and Ed Skoudis explore ethics in cybersecurity with Ben Yelin. [Special Edition]

Authors Paul J. Maurer and Ed Skoudis join Caveat podcast co host Ben Yelin to discuss their new book: "The Code of Honor: Embracing Ethics in Cybersecurity." The book is a comprehensive and practical framework for ethical practices in contemporary cybersecurity. Listen to Ben's discussion with Paul and Ed as they explore the ethical dimensions of cybersecurity, the influence of AI, and the responsibilities of cyber professionals. Consider joining Paul and Ed in upholding the highest standards of cybersecurity ethics by signing the Cybersecurity Code they share as part of The Code of Honor. Learn more about the book here.

https://thecyberwire.com/podcasts/special-edition/97/notes thecyberwire.com

RSS Hunter • May 25

The current state of GPS following OCX with Dr. Sean Gorman, CEO of Zephr.xyz. [T-Minus: Space-Cyber Briefing]

Despite being an indispensable technology, traditional GPS remains vulnerable to exploitation and is needed for an update. In this week's episode, host Maria Varmazis sits down with Dr. Sean Gorman, CEO of Zephr.xyz, to discuss the current state of GPS. For decades, GPS has been a cornerstone technology for private, public, and military entities; however, through new technological advancements, companies and governments are looking to modernize this technology.Key sources:Next Generation Operational Control Systems.Why GPS III, and what comes after it, still falls short in modern war.Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-space⁠ Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to [email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: https://www.surveymonkey.com/r/NJYCN2P T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.

https://thecyberwire.com/podcasts/tminus-space-cyber-briefing/708/notes thecyberwire.com

RSS Hunter • May 24

Ghosted by Grafana [Research Saturday]

Today we are joined by ⁠Sasi Levi⁠, Security Research Lead at ⁠Noma Security⁠, sharing their team's work on "GrafanaGhost: The Phantom Stealing Your Data." Researchers at Noma Security disclosed “GrafanaGhost,” a vulnerability that could allow attackers to silently exfiltrate sensitive business data from Grafana dashboards using indirect prompt injection techniques. The attack chains together multiple bypasses, including protocol-relative URLs and AI guardrail manipulation, to trick Grafana into sending sensitive data to attacker-controlled servers without requiring user interaction. Researchers say the flaw highlights growing risks tied to AI-integrated enterprise platforms, where attackers increasingly target AI behavior and weak security controls instead of traditional software bugs.The research and executive brief can be found here:⁠GrafanaGhost: The Phantom Stealing Your Data⁠

https://thecyberwire.com/podcasts/research-saturday/426/notes thecyberwire.com

RSS Hunter • May 23

Too many cooks in the algorithm.

Donald Trump delayed an AI executive order. Lawmakers are concerned about potential cuts to CISA's funding. A new scareware campaign, CypherLoc, is spreading rapidly through fake tech support scams. Ubiquiti has released patches for critical vulnerabilities in its UniFi systems. The U.S. government is investing billions of dollars in quantum computing initiatives. Researchers found Google API keys remain active even after deletion. Authorities arrested the alleged operator of the Kimwolf botnet, facing charges in both the US and Canada. Two Americans admitted guilt in a global tech support fraud scheme, supporting operations in India. The podcast features Ankit Kumar Honey, discussing GitHub's Dependabot and automating patch management. AI-generated incident reports are still proving to be insufficient currently.

https://www.thecyberwire.com/podcasts/daily-podcast/2558/notes thecyberwire.com

RSS Hunter • May 22

That shield has cracks in it.

Microsoft is addressing active exploitation of two Defender vulnerabilities. Europol took down a VPN service used by ransomware groups, making arrests. A longstanding Linux kernel bug reveals sensitive SSH data like keys. Cisco has patched a critical Secure Workload vulnerability in their product. Drupal has fixed a serious SQL injection flaw. Android malware is secretly signing users up for premium SMS services. Webworm has updated its espionage tools with Discord and Microsoft Graph backdoors. China and Russia are increasing collaboration on AI, cybersecurity, and satellite technology. This episode features an interview with Jake Moore from ESET discussing his "Deepfake Interview" keynote. Listeners are encouraged to rate and review the podcast and subscribe to the daily intelligence roundup.

https://www.thecyberwire.com/podcasts/daily-podcast/2557/notes thecyberwire.com

RSS Hunter • May 21

The cost of trusting the extension ecosystem.

GitHub experienced a security breach related to a malicious VS Code extension. Meanwhile, Anthropic contests a Pentagon blacklist, as the White House considers new AI security regulations. Drupal is urgently working on a critical core vulnerability patch. Cisco Talos is tracking the advancement of the BadIIS malware-for-hire system. Signal has implemented anti-phishing safeguards, and Microsoft is taking action against malware-signing services. China claims foreign spies have been hijacking domestic routers for phishing schemes. Wireless carriers are working together to improve cell service in dead zones. Rob T. Lee from SANS Institute discusses the Cloud Security Alliance’s “AI Vulnerability Storm” report. The episode also mentions a book regarding misinformation.

https://www.thecyberwire.com/podcasts/daily-podcast/2556/notes thecyberwire.com

RSS Hunter • May 20

CISA secrets left sitting on GitHub.

A CISA contractor accidentally exposed AWS GovCloud credentials on GitHub. INTERPOL conducted arrests in the Middle East and North Africa targeting phishing infrastructure. Microsoft addressed a critical vulnerability in the Authenticator app. Poland is switching officials from Signal due to phishing attacks. A new, sophisticated macOS infostealer called SHub has been identified. Universal Robots resolved a critical security flaw in their systems. A dark web marketplace leaked millions of stolen credit card details. Echo Protocol suffered a $76 million loss due to a synthetic Bitcoin breach. Chris Cochran from SANS is the guest, discussing their AI Security Maturity Model. The CyberWire podcast also promotes its daily intelligence roundup and listener feedback survey.

https://www.thecyberwire.com/podcasts/daily-podcast/2555/notes thecyberwire.com

RSS Hunter • May 19

The M5 just met its memory problem.

Researchers successfully exploited a vulnerability to bypass Apple's M5 memory protections. Potential leadership changes are brewing at CISA, with an IBM executive being considered. Malicious npm packages have been detected, posing a threat to software supply chains. Bug bounty programs are struggling with the influx of low-quality, AI-generated content. Several significant healthcare data breaches have been reported, impacting numerous individuals. 7-Eleven has confirmed a data breach following a ransom demand by threat actors. A series of OpenClaw flaws could allow for full host compromise. Santa Clara County has filed a lawsuit against Meta regarding alleged scam advertisements. Jason Madigan from Booz Allen discussed the balance between resilience and data residency laws. The cybersecurity community mourns the loss of security pioneer, Peter G. Neumann.

https://www.thecyberwire.com/podcasts/daily-podcast/2554/notes thecyberwire.com

RSS Hunter • May 18

From cyberspace to space-cyber. [T-Minus: Space-Cyber Briefing]

For years, in-space internet capabilities were rarely worth the hassle. Now, that’s changing.In today’s episode, Maria Varmazis and Ethan Cook sit down to discuss how internet data moves through space systems and its recent advancements. For decades, GEO satellites made up most of the marketplace; however, LEO satellites are changing the landscape improving connectivity and speeds.Key sources:In-space relay and WiFi services.Space Development Agency On Orbit.Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-space Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to [email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠.T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.

From cyberspace to space-cyber. [T-Minus: Space-Cyber Briefing] youtube.com

RSS Hunter • May 17