Cybersecurity News

Daily Briefing

2 hours ago

Google Cloud outage disrupts UK banking.

Data breach impacts millions of California students. Malware hides within a functional PDF viewer.

SpyCast

7 hours ago

Unraveling a Secret KGB Investigation That Separated a Father and Son

The Kremlin is not a fan of Alex Goldfarb. He left the Soviet Union as a scientist, becoming a prominent author and human rights activist. In 2006, he was in the room with ex-FSB officer Alexander Litvinenko, reading his dying words, which accused Vladimir Putin of assassination by radioactive polonium. Today, Alex's memoir, Refusenik's Son, traces a complicated family history made clear only decades later. His father, David, was a Jewish scientist denied permission to leave the Soviet Union - one of the so-called "refuseniks." David had been a prominent microbiologist in the 1970s and '80s, when Moscow's secret bioweapons program was under development. But only after an exiled KGB officer contacted Alex in 2010 did the full reason for his father's confinement become clear. It's a winding story involving an anthrax accident and a media leak, a Soviet scientist and a U.S. journalist trying to help him. Two men pulled unknowingly into a tide of suspicion.

CyberWire Daily

22 hours ago

The ballot box meets the bot.

State election officials question CISA’s commitment to election security. Stolen credentials force ConnectWise to suspend cloud services. Fake calendar invites steal Microsoft logins. Temu settles Texas privacy allegations. Toronto police arrest seven in a cryptocurrency kidnapping case. The G7 sounds the alarm on quantum threats. Monday business briefing. Ben Yelin, sits down with Kevin Tian, CEO and Co-Founder of Doppel, to share how AI is changing the threat landscape for sports organizations. MapQuest puts surveillance on the map.

Daily Briefing

Oct 19, 2026

ConnectWise shuts down Cloud Backup service following breach.

Linux KVM flaw can allow sandbox escapes. Temu settles data privacy lawsuit with Texas.

T-Minus

Oct 18, 2026

Expanding America's space capabilities.

Through Executive Orders, the Trump administration is looking ensure that America's space capabilities have the workforce and technological innovation needed for success. Host Maria Varmazis sits down with Producer Ethan Cook to continue their conversation as they look at more space-related Executive Orders. While the ⁠previous episode⁠ looked at the orders that laid out the administration's broad space goals, this conversation looks at the orders that look to advance America's workforce and technical capabilities.

Signals and Space

Oct 18, 2026

Closing America's space gaps.

This week on T-Minus: Space-Cyber Briefing: we focus on some of the more specific EOs that look to increase America’s capacity for space talent development and technological innovation.

Special Editions

Oct 18, 2026

Cyber Resilience at Machine Speed: Author John Kindervag and contributor Dr. Chase Cunningham.

On this special edition podcast, Dave Bittner is joined by ⁠John Kindervag⁠ and ⁠Dr Chase Cunningham⁠ to discuss the principles of zero trust, cyber resilience, and how AI is transforming cybersecurity strategies. They explore practical frameworks, misconceptions, and the future of security in a machine-speed world. John is the author of "⁠Cyber Resilience at Machine Speed: The Zero Trust Model for the AI Era⁠," and Chase is one of the book's contributors.

Research Saturday

Oct 17, 2026

The wrong kind of access.

Dan Lisichkin⁠, AI Security Researcher from ⁠Pillar Security⁠, discussing their work on "A WIF Of Fresh Access, How a GitHub Issue on Gemini-CLI Led to GCP Project Compromise." Researchers at Pillar Security uncovered a vulnerability in Google’s Gemini CLI workflows that could allow an attacker to turn a malicious GitHub issue into remote code execution and gain elevated access to a Google Cloud Platform (GCP) project. The exploit chain combined a misconfigured tool allowlist that allowed unrestricted command execution with exposed Workload Identity Federation credentials and overly broad service account permissions, potentially enabling attackers to impersonate privileged accounts. Google promptly addressed the issues by tightening tool restrictions, blocking the agent’s access to credential files, and limiting service account impersonation permissions, highlighting the risks of connecting AI agents to untrusted input and sensitive infrastructure.

Week that Was

Oct 17, 2026

OpenAI engineer charged with planting a secret recording device.

BeyondTrust patches a critical zero-day. Cyberattack targets supermarket refrigeration systems across France.

CyberWire Daily

Oct 16, 2026

Reboot, rinse, repeat.

Chinese spies exploit a BeyondTrust zero-day. Atlassian faces active attacks. Rogue AI agents breach Indian networks. Ransomware gangs turn to threats of violence. A cyber incident disrupts U.S. bankruptcy courts. F5 and Juniper push critical patches. Japanese companies suffer a wave of breaches. Google brings AI-powered scam protection to Android. Our guest is Nick Jackson, Global Director of Cyber Security Services at Bitdefender, sharing how the UK are thinking about AI regulation. Braille meets brains.

Daily Briefing

Oct 16, 2026

BeyondTrust patches a critical zero-day.

CISA warns of actively exploited Atlassian flaw. Ransomware gangs increasingly threaten physical violence.

CyberWire Daily

Oct 15, 2026

A little too OpenAI.

An OpenAI engineer faces charges over an alleged covert recording device. Attackers exploit a PAN-OS firewall flaw and an Ivanti zero-day. Aoki infostealer hunts AI credentials. Researchers uncover critical weaknesses in an AI gateway. CikaBika Bot turns Discord into a command center. Online ads deliver mercenary spyware without a click. Microsoft disrupts a massive Chinese-language phishing operation. And INTERPOL leads an international crackdown on child sexual abuse material. Character.ai runs out of tokens.

Load More