Cybersecurity News

CyberWire Daily

Just Now

The ballot box meets the bot.

State election officials question CISA’s commitment to election security. Stolen credentials force ConnectWise to suspend cloud services. Fake calendar invites steal Microsoft logins. Temu settles Texas privacy allegations. Toronto police arrest seven in a cryptocurrency kidnapping case. The G7 sounds the alarm on quantum threats. Monday business briefing. Ben Yelin, sits down with Kevin Tian, CEO and Co-Founder of Doppel, to share how AI is changing the threat landscape for sports organizations. MapQuest puts surveillance on the map.

Daily Briefing

4 hours ago

ConnectWise shuts down Cloud Backup service following breach.

Linux KVM flaw can allow sandbox escapes. Temu settles data privacy lawsuit with Texas.

T-Minus

Oct 18, 2026

Expanding America's space capabilities.

Through Executive Orders, the Trump administration is looking ensure that America's space capabilities have the workforce and technological innovation needed for success. Host Maria Varmazis sits down with Producer Ethan Cook to continue their conversation as they look at more space-related Executive Orders. While the ⁠previous episode⁠ looked at the orders that laid out the administration's broad space goals, this conversation looks at the orders that look to advance America's workforce and technical capabilities.

Signals and Space

Oct 18, 2026

Closing America's space gaps.

This week on T-Minus: Space-Cyber Briefing: we focus on some of the more specific EOs that look to increase America’s capacity for space talent development and technological innovation.

Special Editions

Oct 18, 2026

Cyber Resilience at Machine Speed: Author John Kindervag and contributor Dr. Chase Cunningham.

On this special edition podcast, Dave Bittner is joined by ⁠John Kindervag⁠ and ⁠Dr Chase Cunningham⁠ to discuss the principles of zero trust, cyber resilience, and how AI is transforming cybersecurity strategies. They explore practical frameworks, misconceptions, and the future of security in a machine-speed world. John is the author of "⁠Cyber Resilience at Machine Speed: The Zero Trust Model for the AI Era⁠," and Chase is one of the book's contributors.

Research Saturday

Oct 17, 2026

The wrong kind of access.

Dan Lisichkin⁠, AI Security Researcher from ⁠Pillar Security⁠, discussing their work on "A WIF Of Fresh Access, How a GitHub Issue on Gemini-CLI Led to GCP Project Compromise." Researchers at Pillar Security uncovered a vulnerability in Google’s Gemini CLI workflows that could allow an attacker to turn a malicious GitHub issue into remote code execution and gain elevated access to a Google Cloud Platform (GCP) project. The exploit chain combined a misconfigured tool allowlist that allowed unrestricted command execution with exposed Workload Identity Federation credentials and overly broad service account permissions, potentially enabling attackers to impersonate privileged accounts. Google promptly addressed the issues by tightening tool restrictions, blocking the agent’s access to credential files, and limiting service account impersonation permissions, highlighting the risks of connecting AI agents to untrusted input and sensitive infrastructure.

Week that Was

Oct 17, 2026

OpenAI engineer charged with planting a secret recording device.

BeyondTrust patches a critical zero-day. Cyberattack targets supermarket refrigeration systems across France.

CyberWire Daily

Oct 16, 2026

Reboot, rinse, repeat.

Chinese spies exploit a BeyondTrust zero-day. Atlassian faces active attacks. Rogue AI agents breach Indian networks. Ransomware gangs turn to threats of violence. A cyber incident disrupts U.S. bankruptcy courts. F5 and Juniper push critical patches. Japanese companies suffer a wave of breaches. Google brings AI-powered scam protection to Android. Our guest is Nick Jackson, Global Director of Cyber Security Services at Bitdefender, sharing how the UK are thinking about AI regulation. Braille meets brains.

Daily Briefing

Oct 16, 2026

BeyondTrust patches a critical zero-day.

CISA warns of actively exploited Atlassian flaw. Ransomware gangs increasingly threaten physical violence.

CyberWire Daily

Oct 15, 2026

A little too OpenAI.

An OpenAI engineer faces charges over an alleged covert recording device. Attackers exploit a PAN-OS firewall flaw and an Ivanti zero-day. Aoki infostealer hunts AI credentials. Researchers uncover critical weaknesses in an AI gateway. CikaBika Bot turns Discord into a command center. Online ads deliver mercenary spyware without a click. Microsoft disrupts a massive Chinese-language phishing operation. And INTERPOL leads an international crackdown on child sexual abuse material. Character.ai runs out of tokens.

Caveat

Oct 15, 2026

Banking watchdogs ramp up AI scrutiny efforts as stability fears mount.

FBI seized tools used by Chinese-affiliated hackers.

Daily Briefing

Oct 15, 2026

OpenAI engineer charged with planting a secret recording device.

Zero-click spyware delivered via targeted ads. Palo Alto Networks patches an actively exploited PAN-OS zero-day.

Load More