Out of office, out of service.
Microsoft 365 recovers from a global outage. StingyBasilisk pivots through Windows named pipes to infiltrate isolated networks. The FBI freezes billions after North Korea's Binance heist, while Pyongyang's Sapphire Sleet steals $400 million via spoofed video calls. Cupertino details Secure Exclaves for ambient sensor privacy. Operation TorNado nets 354 arrests in a global dark web crackdown. Check Point patches an actively exploited zero-day tied to wiper attacks. The wfx-loot campaign hijacks thousands of GitHub accounts to harvest cloud secrets. And civil liberties groups warn Congress against slipping Section 702 renewal into the defense bill. Our guests are Lauren Zabierek and Bob Lord, discussing the launch of the Software Safety Institute. United grounds personal AI agents over credential and compliance risks.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Lauren Zabierek and Bob Lord to discuss the launch of the Software Safety Institute, the work behind its creation, and the push for greater accountability among software manufacturers. If you enjoyed this conversation and want to hear the full interview, check it out here.
Selected Reading
What we know about the global Microsoft outage (BBC)
Hackers Use Windows Named Pipes and SMB to Spread Malware Across Isolated Government Networks (Cyber Security News)
FBI Tracks Billions in Stolen Crypto After Massive Binance Cyberattack (The 420)
North Korean hackers steal more than $400 million using video images, FBI says (Reuters)
Apple details Secure Exclaves, isolated runtimes for camera and microphone data (Help Net Security)
354 dark web vendors and buyers arrested in Operation TorNado (Help Net Security)
Check Point warns of zero-day flaw exploited for root access (Bleeping Computer)
Hackers compromise 4,800 GitHub accounts to steal cloud credentials (Bleeping Computer)
Don’t put Section 702 spying law renewal in defense bill, groups urge Hill leaders (CyberScoop)
United to block customers from using AI agents, citing cyber threats (The Record)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
