Cybersecurity News

CyberWire Daily

Just Now

The breach wasn't in the model.

A cybersecurity startup claims to have accessed sensitive internal documents at Anthropic. The Pentagon spins up covert technology programs. AI developers get a crash course in key management. A ransomware recovery executive faces federal fraud charges. Two men are accused of using AI generated phone calls to scam bank customers. Stadia RAT rises from the StealC ashes. Researchers extract sensitive information using USB power-management signals. Patching what matters…matters. Monday business briefing. Tim Starks from CyberScoop is discussing targeted ads as a security risk. Championship rings come with a catch.

Daily Briefing

5 hours ago

A cybersecurity startup claims to have accessed sensitive Anthropic data.

Arista fixes a critical zero-day in VeloCloud Orchestrator. Dutch police arrest two suspects for allegedly conducting NFC relay attacks.

T-Minus

Oct 25, 2026

The shield in space.

The Ukraine has experienced a second major outage of its Starshield services reigniting questions about relying on a single private provider for critical national security services. Host Maria Varmazis sits down Dave Bittner and Brandon Karpf to discuss the recent incident where Ukraine lost Starshield coverage. They explore how the growing role of private satellite companies in warfare creates challenges for establishing operational accountability and impacts US alliances.

Signals and Space

Oct 25, 2026

The military’s dependency on private technology.

This week on T-Minus: Space-Cyber Briefing: we look deeper into the role that private space companies have in military operations and how this relationship may already impact national security.

Research Saturday

Oct 24, 2026

The middlemen of cyber espionage.

Today we have ⁠Damon Rouse⁠, Threat Intelligence from ⁠Lumen⁠'s Black Lotus Labs, discussing their work on "The infrastructure quartermaster: inside a China-nexus state enablement model." Black Lotus Labs identified a China-nexus cyber infrastructure provider, dubbed a “quartermaster,” that supplies reconnaissance, proxy routing, and obfuscation services to Chinese cyber espionage actors. Its interconnected systems, including QScan and Fast Labyrinth, help identify high-value targets, conceal malicious traffic, and support potential exploitation of government, military, research, and critical infrastructure networks. Researchers warn that this shared infrastructure makes traditional IP-based defenses less effective and recommend following CISA and NCSC guidance, reducing external attack surfaces, and keeping routers, firewalls, and IoT devices updated.

Week that Was

Oct 24, 2026

PHP2Shell vulnerabilities put millions of sites at risk.

Indian certificate authority exposes private keys. Threat actors compromise LiteLLM.

CyberWire Daily

Oct 23, 2026

The apps are only the beginning.

Attackers target critical PHP flaws, and former CISA director Chris Krebs weighs in on AI’s role in the vulnerability surge. Railway confirms a cyberattack. HPE patches critical ArubaOS flaws. Quest Diagnostics investigates a disruptive intrusion. Capcom reports a data breach. China-linked hackers put AI-powered attacks on autopilot. And researchers uncover a Microsoft 365 campaign that hijacks authentication tokens to bypass MFA. Our guest is Anudeep Parhar, COO at Entrust, sharing his thoughts on AI kill switches. eMudra throws in the certificate towel.

Daily Briefing

Oct 23, 2026

Mirai botnet operators target PHP2Shell.

HPE patches eight maximum-severity flaws in ArubaOS. Quest Diagnostics discloses a breach.

CyberWire Daily

Oct 22, 2026

The early bird gets the exploit.

Amazon spots PHP exploits before disclosure. GitLab patches a critical flaw. Meta faces a $25 billion penalty. Autonomous AI agents power new cyberattacks. Hackers breach a Japanese cloud provider. CyberCartel unleashes AI against Latin American banks. Tor exit nodes are hijacked. OpenAI coding agents disable security monitoring. Interpol dismantles thousands of cybercrime networks across Africa. Our guest is Danny Manimbo, ISO and AI Practice Leader at Schellman, explaining why companies waiting for AI regulatory clarity may already be behind. Spotify hits the skip button on AI slop.

Caveat

Oct 22, 2026

Anthropic pitches AI safety bill.

Critical vulnerabilities take sites offline across the globe.

Daily Briefing

Oct 22, 2026

GitLab patches a maximum-severity vulnerability.

Threat actors compromise LiteLLM. Amazon detected PHP2Shell exploitation days before disclosure.

AI Security Brief

Oct 22, 2026

How do you plan for AI system failure?

Your AI initiative gets the green light. But now all the parameters and guardrails you built into your plan need to be executed. Who owns AI once it goes live? Who’s watching as AI use expands? And if the AI workflow fails, can anyone still run the process it replaced? In this episode, Maria Haight, Global Information Security Officer at Joyson Safety Systems, joins Dustin Childs to unpack the operational realities of AI security. She advocates for preserving human know-how, assigning business ownership, and backing up critical data to keep the business running should an AI system fail or dare we say it, go rogue.

Load More