A golden opportunity...for fraud.

9 hours ago

A golden opportunity...for fraud.

This week, while Dave is out, hosts ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. Maria and Joe are joined by friend of the show ⁠Michele Kellerman⁠. We start with some follow-up on the chicken coop, where the big news is that the chicks have officially hatched. Maria covers how AI is fueling a growing share of cybercrime in Africa as scammers use increasingly sophisticated digital tools to target victims. Michele looks at a multi-step gold bar scam targeting older New Yorkers, where criminals first compromise victims' devices and information before posing as government or law enforcement officials to steal their money. Joe breaks down the Fun Coffee crypto investment scam, which promised enormous returns before the platform suddenly shut down, leaving victims with more than HK$104 million in reported losses. Our Catch of the Day comes from Reddit, with another scam that proves if an offer sounds too good to be true, it probably comes with a very suspicious backstory.

Hacking Humans

A golden opportunity...for fraud.

9 hours ago

A golden opportunity...for fraud.

This week, while Dave is out, hosts ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. Maria and Joe are joined by friend of the show ⁠Michele Kellerman⁠. We start with some follow-up on the chicken coop, where the big news is that the chicks have officially hatched. Maria covers how AI is fueling a growing share of cybercrime in Africa as scammers use increasingly sophisticated digital tools to target victims. Michele looks at a multi-step gold bar scam targeting older New Yorkers, where criminals first compromise victims' devices and information before posing as government or law enforcement officials to steal their money. Joe breaks down the Fun Coffee crypto investment scam, which promised enormous returns before the platform suddenly shut down, leaving victims with more than HK$104 million in reported losses. Our Catch of the Day comes from Reddit, with another scam that proves if an offer sounds too good to be true, it probably comes with a very suspicious backstory.

Hacking Humans

Cybersecurity News

AI Security Brief

9 hours ago

What do AI-driven ‘bank heist’ attacks mean for defenders?

Attackers aren't just using AI to steal data; they're using it to fight back while you investigate them in real time. And once an adversary is inside, why would they ever want to leave? That's the unsettling reality Tom Kellermann, VP of AI Security and Threat Research at TrendAI, lays out in this episode. And the numbers prove it. According to a 2026 TrendAI survey of 46 financial-sector CISOs, more than 60% of respondents experienced counter-incident response, where adversaries actively disrupt live investigations. In addition, nearly 90% of these leaders reported more AI-enabled attacks year over year. Tom joins Johnny Hand and Dustin Childs to explain why the threats that hit banks first tend to hit everyone else next, and what defenders can do about it.

Caveat

9 hours ago

Surveillance Rulings and Social Media Scrutiny.

This week, Ben and Ethan discuss two major stories. The first looks deeper into the Supreme Court's recent ruling on the Chatrie case and the long-term impacts this decision could have on privacy within the nation. The second dives into another court case decision, which exposes social media companies to greater liability for allegedly addictive design features on their platforms and those features impacts on users.

CyberWire Daily

18 hours ago

A flurry of fixes.

We got your Patch Tuesday notes. Attackers target Microsoft SharePoint vulnerability following PoC release. Cyberattack on CEVA Logistics causes ongoing supply chain disruptions. Wesco confirms data breach following extortion claims. Akira ransomware bypasses EDR in Safe Mode. California announces AI cybersecurity fund. N2K’s Lead Analyst Ethan Cook shares about cyber weapons for space. Dave Bittner sits down with Michael Leland, VP and Field CTO at Island, at Black Hat USA to discuss the growing risks of the AI supply chain. And fasten your seatbelts and ignore the fake Wi-Fi.

Story

18 hours ago

The AI Supply Chain Has a Trust Problem with Michael Leland from Island

Michael Leland, Field CTO at Island joins Dave Bittner on the CyberWire Daily podcast for a sponsored Industry Voices at Black Hat USA 2026. He discusses the emerging risks in the AI supply chain, why AI agents introduce new challenges around trust and governance, and what organizations can do to securely adopt agentic AI without slowing innovation.

Business

18 hours ago

Corma raises $60 million in seed funding.

Visa and Deel both acquire identity verification companies.

Daily Briefing

22 hours ago

Patch Tuesday notes: Microsoft fixes three zero-days.

Attackers target SharePoint vulnerability following PoC release. Business news: Visa and Deel both acquire identity verification companies.

Microsoft Threat Intelligence

Aug 12, 2026

Shifts We Are Seeing Across Social Engineering, Post-Disruption Impact Report

In this episode of the Microsoft Threat Intelligence Podcast, Microsoft Threat Intelligence Director⁠ Elliot Volkman is joined by Microsoft Principal Threat Intelligence Analyst Crane Hassold to explore how phishing and social engineering attacks are changing beyond email. They discuss the rise of QR code phishing, Microsoft Teams scams, SMS-based attacks, and why attackers continue to follow wherever people communicate. Crane also shares practical security recommendations for organizations and explains how Microsoft's disruption of the Tycoon2FA phishing-as-a-service platform led to a dramatic decline in malicious activity while reshaping the broader phishing landscape.

Marketing

Aug 12, 2026

When to Pay for Analyst Relations and When Not To with Kelly O'Dwyer Manuel

Kelly O'Dwyer Manuel has been building analyst relations (AR) programs for a long time, and her first question is always the same when starting from scratch: what are you actually trying to accomplish? She joins Gianna and Andy T to talk through what AR looks like for a small team with a small budget, why most companies pay for analyst relationships before they are ready, and what a first year program should realistically look like.

CyberWire Daily

Aug 11, 2026

A private route to public risk.

Poland’s CERT describes winter cyberattack against heat-and-power plant. Russian military hackers target Ukrainian IT workers in fake recruitment scheme. Chinese IP connections spark security review in UK Navy drones. US and South Korea warn of “Gunra” ransomware gang with North Korean ties. OpenAI mandates strict security controls for its new cybersecurity model. Record-breaking DDoS attacks surge in H1 2026. Data-scraping AI extension returns to the Chrome Web Store. Dave Bittner sat down with Stephen Harrison, VP of Product at Abnormal AI at Black Hat USA to discuss "The Identities Your Security Stack Is Ignoring." And no pain, no gain, no authorization.

Story

Aug 11, 2026

The Identities Your Security Stack Is Ignoring with Stephen Harrison from Abnormal AI

Stephen Harrison, VP of Product at Abnormal AI joins Dave Bittner on the CyberWire Daily podcast for a sponsored Industry Voices interview at Black Hat USA 2026. He explains why AI agents and service accounts are creating a new identity challenge for security teams, how shadow AI is expanding the attack surface through unmanaged OAuth permissions, and why organizations need to understand what "normal" looks like for every identity in their environment.

Daily Briefing

Aug 11, 2026

Poland’s CERT describes winter cyberattack against heat-and-power plant.

US and South Korea warn of "Gunra" ransomware gang with North Korean ties. Chinese IP connections spark security review in UK Navy drones.

Inside the Media Minds

Aug 11, 2026

Inside the Media Minds of Byron Tau: ProPublica

On this episode of #IMM, Christine and Madison sit down with Byron Tau as he transitions from the Associated Press to ProPublica.

Load More