Cybersecurity News

Caveat

Just Now

Newsom signs an order to explore AI rules.

ShinyHunters hacked the FBI.

Daily Briefing

4 hours ago

An OpenAI agent hacked an Australian government website.

Researchers discover a new way to break RSA encryption. SolarWinds patches two RCE flaws in Observability Self-Hosted.

Hacking Humans

15 hours ago

404: scam not found.

This week, hosts of N2K CyberWire ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ alongside ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow up from Robert, who wonders why he’s never received a scam call in nearly 20 years of having the same Swedish phone number. Maria covers ACATS fraud, a little-known scam that can move stocks and retirement assets into fraudulent brokerage accounts without the victim realizing it. Dave shares his experience of nearly falling for a social engineering scam disguised as a podcast interview, where the scammers used convincing prep and a fake meeting link to try to get him to install malware. Joe shares the story of a Maryland woman who was nearly fooled by scammers posing as Wells Fargo and San Francisco police, using detailed personal information and threats of arrest to make the scam feel real. Our Catch of the Day comes from Reddit, where one person takes matters into their own hands after a scammer targets their daughter.

Caveat

15 hours ago

When digital tools get it wrong.

This week, Dave and Ben sit down to look at a recent court ruling which has rejected limits on cell phone border searches. Additionally, the two look at another case where a woman was falsely accused of bank robbery after an AI facial recognition system misidentified her and is now suing for $10 million.

AI Security Brief

15 hours ago

Can you trust AI with critical infrastructure?

In traditional IT, isolating a compromised endpoint can stop an attack. In operational technology (OT) environments, that same action could disrupt control of a pipeline, cause a rupture, or trigger environmental damage. That’s why adopting AI in critical infrastructure requires a fundamentally different security approach. Drawing on more than 25 years of experience across energy, pipelines, aerospace, and defense, Jason Cradit, CTO and CISO at Everline, explains how security leaders can move beyond blanket restrictions and establish practical AI governance and guardrails.

CyberWire Daily

23 hours ago

The hunters go after the bureau.

ShinyHunters claims to have breached FBI systems. CLOSEDQUORUM malware delegates command-and-control decisions to commercial LLMs. An IT error erases 11 years of hospital maternity data. F5 patches a critical BIG-IP APM zero-day. Ransomware activity remains high. Microsoft disrupts the EvilTokens cybercrime platform. Researchers turn Claude Code’s normal workflow against itself. Pundits propose an AI Assurance Compact. A Ryuk ransomware gang member gets two years prison time. Our guest is Jen Sovada, General Manager of Public Sector at Claroty, on Project Watershed 250 and the challenges facing U.S. water utilities. Meta’s Muse mettles with messages.

Business

Sep 23, 2026

Cyera has secured a $400 million Series G extension from Goldman Sachs.

A-LIGN has acquired Australian cloud security assessment firm AssurePoint.

Daily Briefing

Sep 23, 2026

ShinyHunters claims to have breached the FBI.

Microsoft disrupts the EvilTokens cybercrime platform. Business news: Cyera raises $400 million in a Series G extension.

Marketing

Sep 23, 2026

Creator Campaigns, LinkedIn Strategy, and RIP to the Funnel with CrowdStrike, LinkedIn, and Sandra Liu

Gianna sits down with Vab Dwivedi, VP of Digital Experience at CrowdStrike, Sandra Liu, a cybersecurity creator with over 200,000 LinkedIn followers, and Eric Becker, Enterprise Account Director at LinkedIn. They covered the CrowdStrike and Sandra Liu creator campaign, why LinkedIn reaches cybersecurity buyers differently than any other platform, how Vab thinks about measurement when the buying journey isn't linear, and why content quality will always matter more than volume.

CyberWire Daily

Sep 22, 2026

Storm clouds over the waterworks.

CISA rides out a Cyber Storm. The EU struggles to share cyber threat information. Nightmare Eclipse drops another Defender zero-day. TASK#STOMP steals business documents. North Korean operatives fake their way through job interviews. A genetics lab pays $700,000 over a phishing breach. A zero-day in Meta’s Muse AI assistant opens the door to privilege hijacking. Marc Woolward, Senior Advisor to Humanix and former CTO for Goldman Sachs, discussing social engineering and vishing attacks. Infiltrating Team PCP.

Daily Briefing

Sep 22, 2026

CISA’s tenth Cyber Storm exercise tests critical infrastructure cybersecurity.

Nightmare Eclipse publishes another Defender zero-day. Ireland fines Google $462 million over GDPR violations.

SpyCast

Sep 22, 2026

How the CIA captured Carlos the Jackal

Before he became one of the world's most notorious terrorists in the 1970s and '80s, inspiring movies, books, and future terrorists, Carlos the Jackal was born Ilich Ramírez Sánchez to a privileged family in Venezuela. Over time, his crimes grew bolder, from an attempted assassination to abductions, murder, hijackings, and bombings. Some state leaders tolerated him out of fear he would target their countries, yet his alliances with militants and dictators soured as the years passed. In his new book, The Jackal: The Rise and Fall of Carlos, the World's First Super Terrorist, journalist Joby Warrick profiles the mercenary terrorist and details how American and French intelligence took him down.

Load More