CyberWire Daily

A patchwork of problems.

Patch Tuesday. Maersk investigates a legacy system breach. A chip-smuggling probe stalls after Nvidia reaches out to Commerce. A US Army officer is arrested in the UK for alleged Russian espionage. Kazakhstan-linked hackers deploy AI agents across Central Asia. Opsec blunders unmask an alleged Qilin ransomware boss. Researchers hijack connected cars via Android apps. Our guest is Tim Starks from CyberScoop to discuss what Democratic control of Congress means for cybersecurity. A New Jersey township holds the news until after the votes.

Transcript

The next name on CISA's door.

Palantir’s CISO gets the nod for CISA. Tehran takes the rap for sabotaging European grocery freezers. Russia’s Turla turns victim Exchange servers into passive spy hubs. Barracuda battles actively chained gateway zero-days. Vanderbilt grapples with a BYOD ransomware outbreak. CISA rushes patches for critical IBM and SignalWire flaws, while revamping its national incident portal. ENISA tracks the EU’s cyber maturity gap. Cryptographers debate whether AI will crack modern encryption. Our guest is Duncan Greatwood, CEO at Xage Security, discussing the cybersecurity problem you can’t patch away. Chinese AI labs set up shop in Silicon Valley's backyard.

Transcript

Peer pressure meets private keys.

A classified memo ties Nvidia’s chief executive to Chinese espionage. AI coding agents crack under peer pressure, coughing up private keys. Big breaches hit seven million Japanese shoppers and three million students here in the States, while a French bank takes a multi-million-dollar hit through a vendor compromise. Adversaries weaponize a fresh OpenSSH bypass in the wild, pro-Russian hacktivists put dark web bounties on senior European officials, and Google drafts digital IDs to solve the passkey recovery puzzle. Monday business briefing. Our guest is Chris Grove, Director of Cybersecurity Strategy at Nozomi Networks, discussing the critical infrastructure implications of the European refrigeration attacks. Beijing goes all-in on domestic silicon.

Transcript

Keeping cyber threats on ice.

Federal agencies warn of cyberattacks on industrial refrigeration systems. Healthcare cybersecurity could get a post-midterm boost. Chainalysis exposes customer credentials, and DigiCert discloses a breach. OpenAI's latest model learns to respect boundaries. D-Link warns of unpatched switch vulnerabilities. The EU accuses TikTok of leading users down harmful rabbit holes, while tech giants challenge California's child safety law. Federal prosecutors charge three suspects in a $129 million AI-powered impersonation scheme. Our guest is Greg Notch, CTO of Expel, sharing thoughts on how pacing AI won't stop the bad actors. Meta's AI feeding frenzy gets put on a diet.

Transcript

Claude, you've got company.

Claude Dispatch opens the door to hijacking. Residential proxies turn up on White House networks. Asian airlines suffer a wave of data breaches. Cisco and WatchGuard roll out critical patches. GhostMap traps Android phones in endless reboot loops. Hackers exploit a Zyxel zero-day to compromise nearly a thousand devices. Ukraine's scam call center crackdown ensnares senior security officials. AI-powered scammers prey on owners of missing pets. A former U.S. government IT worker admits to spying for Ethiopia. Our guest is Rebecca Krauthamer, CEO and co-founder of QuSecure, with insights on the NIST PQC roadmap. Voters pull the plug on data centers.

Transcript