app_store_button

google_play_button

DK - Details page - Device banner - 894x1036

Lyt når som helst, hvor som helst 

N2K Networks

The daily cybersecurity news and analysis industry leaders depend on. Published each weekday, the program also includes interviews with a wide spectrum of experts from industry, academia, and research organizations all over the world.

CyberWire Daily

The U.S. and China agree on an AI safety channel. Some states say CISA’s election security plan comes too late. Citrix patches critical zero-days under active exploitation. AI agents probed government websites in unexpected and concerning ways. ShinyHunters launches a new campaign against Oracle PeopleSoft customers. A New Mexico jury finds Meta misled state residents. Business briefing. Tim Starks from CyberScoop shares insights on multiple issues facing CISA. Who’s ready for algorithmic holiday shopping? 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Tim Starks from CyberScoop who is sharing insights on multiple issues facing CISA.

Selected Reading

China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks (SecurityWeek)

40 days to midterms, election officials say new US cyber plan comes too late (TwinCities Pioneer Press)

Citrix Patches Critical Zero Days Under Active Exploitation (Infosecurity Magazine)

OpenAI’s A.I. Went Rogue and Meddled With U.S. Government Websites (The New York Times)

OpenAI, Anthropic CEOs called to appear at Australian AI probe (Reuters)

Top AI companies probing tens of thousands of security incidents (Axios)

Google Warns of ShinyHunters' Fresh Oracle PeopleSoft Campaign (SecurityWeek)

Meta misled users about Facebook data practices, New Mexico jury finds (Reuters)

Cyera has secured a $400 million Series G extension from Goldman Sachs. (N2K Pro Business Briefing)

Consumer AI use a boon for the holidays as AI traffic doubles (Yahoo Finance)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. 

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

The AI hotline.

Though spacecraft are important, space cybersecurity extends well beyond these assets touching ground stations, mission-control assets, and other critical components.

Host Maria Varmazis speaks with Milenk Starcevic, cybersecurity lead at Vision Space, and Andrzej “Andy” Olchawa, a space-focused offensive security professional, about the broader space cybersecurity attack surface. By considering all aspects of a space mission, both in orbit and on the ground, cybersecurity professionals can better understand where vulnerabilities exist and what measures can be taken to reduce risk.

Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: ⁠⁠⁠⁠⁠⁠⁠⁠https://thecyberwire.com/newsletters/signals-and-space⁠⁠⁠⁠⁠⁠⁠⁠

Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to ⁠⁠⁠⁠⁠⁠⁠⁠space@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: ⁠⁠⁠⁠⁠⁠⁠⁠https://www.surveymonkey.com/r/NJYCN2P ⁠⁠⁠⁠⁠⁠⁠⁠

T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. ⁠⁠⁠⁠⁠⁠⁠⁠N2K⁠⁠⁠⁠⁠⁠⁠⁠ is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at ⁠⁠⁠⁠⁠⁠⁠⁠n2k.com⁠⁠⁠⁠⁠⁠⁠⁠.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Space cybersecurity starts on the ground. [T-Minus: Space-Cyber Briefing]

On this special edition podcast, N2K CyberWire's Dave Bittner spoke with Camille Stewart Gloster⁠. Camille is the author of The Insider You Built: How Organizations Stay in Control of Autonomous AI Agents, and founder of⁠ CAS Strategies⁠. Dave and Camille discuss her new book and the broader questions it raises about AI agents. 

Listen in as Camille Stewart Gloster discusses the implications of autonomous AI agents, focusing on authority, accountability, and risk management in organizations. She emphasizes the importance of understanding and controlling AI behavior to maximize value and mitigate risks. You can learn more about "The Insider You Built” ⁠here⁠.
Learn more about your ad choices. Visit megaphone.fm/adchoices

The Insider You Built with author Camille Stewart Gloster. [Special Edition]

Today we are joined by Ensar Seker, VP of Research and CISO at SOCRadar, discussing their work on "Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain." An investigation into AnonyMousKIT reveals an AI-powered Phishing-as-a-Service platform designed to steal Apple credentials and disable Activation Lock on stolen devices. 

The platform uses email, SMS, WhatsApp, and AI-driven voice calls to impersonate Apple Support, with researchers uncovering a broader ecosystem spanning 506 domains, 168 storefront brands, and 30 backend installations. Despite its sophisticated social-engineering capabilities, basic coding flaws exposed extensive operational logs and revealed the shared infrastructure, developer activity, and reseller network behind the criminal operation.

The research and executive brief can be found here:

 ⁠Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain

Learn more about your ad choices. Visit megaphone.fm/adchoices

An apple a day, a phish away. [Research Saturday]

Kiteworks urges customers pull the plug on vulnerable servers. CISA lays out its election security plan. Known vulnerabilities linger unpatched. Big AI labs consider a new standards body. Questions surround claims of an OpenAI Medicare hack. File notifications become a privacy leak. SectopRAT hides in audio software. A new Android banking trojan takes control. An attacker puts open-source AI agents to work hacking hundreds of organizations. A Rydox cybercrime marketplace operator pleads guilty. Our guest is Todd Thorsen, CISO of CrashPlan, with ways to prepare for and react to critical infrastructure campaigns. Americans give AI the side-eye.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Todd Thorsen, CISO of CrashPlan, discusses ways to prepare for and react to critical infrastructure campaigns, and how AI is contributing to a bigger and more disruptive attack surface.

Selected Reading

Imminent Zero-Day Attack: KiteWorks Urges Customers to Shut Down Servers (Heise)

CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks (SecurityWeek)

Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated (Hackread)

Google, OpenAI, Anthropic Plan Frontier AI Standards Body (GovInfo Security)

Doubts grow over claims OpenAI agent hacked Australian Medicare portal (The Record)

Windows, Linux, Android File Notification Systems Leak User Activity (SecurityWeek)

SectopRAT Abuses Legitimate Audio Software Files to Steal PC Data (Hackread)

RemControl Banking Trojan Gives Attackers Remote Control of Android Devices (Infosecurity Magazine)

Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs (The Register)

Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court (SecurityWeek)

Americans Fear AI Will Make the World Worse, Love It Anyway (404 Media)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. 

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Shut it down before they do.

Researchers find a new way to weaken RSA. ShinyHunters allegedly exposes sensitive FBI details. CISA and the FBI warn of third-party ICS risks. An OpenAI agent hacks an Australian government portal. SolarWinds patches critical flaws. A placeholder domain delivers ClickFix. Digital forensics executives face charges over alleged Russian ties. ENISA maps Europe’s cyber threats. The U.S. and China have very different ideas about AI safety. Our guest is Kurt Dusek, Technical Product Advisor at Appdome, sharing thoughts on segregation of duties and AI agents. Women in tech have their say. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Kurt Dusek, Technical Product Advisor at Appdome, sharing thoughts on "Segregation of duties was built for humans. What happens when the workers are AI agents?"

Selected Reading

There's a new way to break RSA that's faster than anything we've seen before (Ars Technica)

Stolen FBI data reveals employees’ roles in intelligence and surveillance (Nextgov/FCW)

CISA, FBI warn critical infrastructure operators of third-party ICS risks, urge least privilege and remote access controls (Industrial Cyber)

OpenAI Agent Hacks Australian Medicare Portal (Infosecurity Magazine)

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted (SecurityWeek)

Placeholder domain used in dev docs now serves ClickFix attacks (Bleeping Computer)

Phone Hacking Software Firm Hid Russian Ownership, Say Feds (GovInfo Security)

Exploring the evolution of the cyber threat landscape: How dependencies weaken our digital resilience (ENISA)

Opinion | The U.S. and China Are Far Apart on A.I. Safety (The New York Times)

We Surveyed 634 Women Who Work in Tech. They Let Loose (WIRED)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

No factoring necessary.

ShinyHunters claims to have breached FBI systems. CLOSEDQUORUM malware delegates command-and-control decisions to commercial LLMs. An IT error erases 11 years of hospital maternity data. F5 patches a critical BIG-IP APM zero-day. Ransomware activity remains high. Microsoft disrupts the EvilTokens cybercrime platform. Researchers turn Claude Code’s normal workflow against itself. Pundits propose an AI Assurance Compact. A Ryuk ransomware gang member gets two years prison time. Our guest is Jen Sovada, General Manager of Public Sector at Claroty, on Project Watershed 250 and the challenges facing U.S. water utilities. Meta’s Muse mettles with messages.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Jen Sovada, General Manager, Public Sector at Claroty, on what Project Watershed 250 can reveal about the cybersecurity challenges facing U.S. water utilities.

Selected Reading

‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees (404 Media)

The Closed Quorum: Inside the first reported autonomous AI C2 implant (Cisco Talos)

IT mistake erases 11 years of viewing history for hospitals’ maternity records (Ars Technica)

F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks (Bleeping Computer)

UK launches its first 'space squadron' to counter hostile threats (The National)

Ransomware Attacks Reach Record High for 2026 (Infosecurity Magazine)

Disrupting EvilTokens: The AI Chatbot Built for Cybercrime (Microsoft On the Issues)

Fable to Haiku: How a Malicious Repo Tricked Claude Code Into Running Malware (Straiker)

The President has called for AI leadership. Here’s the mission (CyberScoop)

Ryuk ransomware member sentenced to 24 months in prison (Bleeping Computer)

Meta’s New Muse AI Agent Read My Private Messages. I Never Asked It To (Inc.)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. 

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

The hunters go after the bureau.

CISA rides out a Cyber Storm. The EU struggles to share cyber threat information. Nightmare Eclipse drops another Defender zero-day. TASK#STOMP steals business documents. North Korean operatives fake their way through job interviews. A genetics lab pays $700,000 over a phishing breach. A zero-day in Meta’s Muse AI assistant opens the door to privilege hijacking. Marc Woolward, Senior Advisor to Humanix and former CTO for Goldman Sachs, discussing social engineering and vishing attacks. Infiltrating Team PCP.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Marc Woolward, former CTO for Goldman Sachs and Senior Advisor to Humanix, discussing social engineering/vishing attacks and how ShinyHunters continues to use this method on other industries.

Selected Reading

CISA’s Cyber Storm X tests cybersecurity preparedness across transportation, water and wastewater sectors (Industrial Cyber)

Another worry for water systems: infostealer exposure (CyberScoop)

Poor data sharing undermining EU cyber defences, auditors say (Reuters)

New TASK#STOMP Windows Backdoor Enables Continuous Document Theft (Hackread)

New Windows Defender zero-day blocks Microsoft antivirus updates (Bleeping Computer)

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme (SecurityWeek)

Ambry Genetics Pays $700K HIPAA Fine in Phishing Breach (GovInfo Security)

Meta Muse AI app flaw lets local malware redirect dictation traffic (The Register)

An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang (WIRED)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. 

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Storm clouds over the waterworks.

Google confirms unauthorized access by Gemini. AI’s growing power outpaces its defenses. Hackers target Colorado water utilities. Georgia weighs voting-system security. ShinyHunters hijacks Clop’s leak site. FamousSparrow spies across Latin America. CrowdSec loses source code. New npm malware slips past supply-chain defenses. Monday business briefing. Our guest is Matt Fredrikson, CEO of Gray Swan AI, discussing OpenAI's Astra. A new app warns Glassholes to ZuckOff. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Matt Fredrikson, Carnegie Mellon University Associate Professor and CEO of Gray Swan AI, discussing OpenAI's Astra and real industry risks.

Selected Reading

Google says Gemini breached three companies during security test (The Record)

Hackers who broke into OpenAI warn the AI industry has a security problem (Washington Post)

Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems (Security Week)

Lawmakers mull cybersecurity concerns as they prepare for overhaul of Georgia’s voting system (Cobb Courier)

Clop gets a taste of its own medicine after ShinyHunters hijack leak site (The Register)

China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America (Hackread)

CrowdSec Confirms Source Code Stolen in Supply Chain Attack (Security Week)

Malicious npm packages evade install-script defenses at runtime (Bleeping Computer)

Physical AI security company Exein lands $270 million. (N2K Networks)

ZuckOff Is a Free App That Sees Meta Glasses Before They See You (WIRED)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. 

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

A very real-world AI test.

Space infrastructure has become an increasingly important part of everyday life, which has also made it an increasingly attractive target for exploitation.

Host Maria Varmazis and Sean MacKirdy, Area Vice President for the National Security vertical at Elastic Government Solutions, sit down to discuss how space stakeholders need to reevaluate their approach to securing space systems. As space systems continue to grow more important, malicious actors are going to look to target them more often. By adopting a stronger universal framework and a consistent way to interpret data across all spacecraft, space cybersecurity practitioners will be able to standardize their practices and create more effective and timely responses.

Key Sources:

 SPARTA v4.0

 Maria Varmazis interviews Brandon Bailey about Space Attack Research and Tactic Analysis, or SPARTA matrix.

Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: ⁠⁠⁠⁠⁠⁠⁠https://thecyberwire.com/newsletters/signals-and-space⁠⁠⁠⁠⁠⁠⁠

Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to ⁠⁠⁠⁠⁠⁠⁠space@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: ⁠⁠⁠⁠⁠⁠⁠https://www.surveymonkey.com/r/NJYCN2P ⁠⁠⁠⁠⁠⁠⁠

T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. ⁠⁠⁠⁠⁠⁠⁠N2K⁠⁠⁠⁠⁠⁠⁠ is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at ⁠⁠⁠⁠⁠⁠⁠n2k.com⁠⁠⁠⁠⁠⁠⁠.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Defending Space as Critical Infrastructure. [T-Minus: Space-Cyber Briefing]

Today we are joined by Brian Hussey, SVP of Howler Cell Threat Services at Cyderes, discussing their work on "Bad Ads, Worse Binaries: Fake Claude Code Installer Drops Infostealer." Howler Cell identified an SEO poisoning campaign targeting people searching for Claude Code installation guides, using a fake Anthropic page and a ClickFix lure to trick victims into running a malicious MSHTA command. 

The attack uses a six-stage, largely fileless chain that employs an MP3/HTA polyglot, PowerShell obfuscation, AMSI bypasses, per-victim infrastructure, and in-memory execution to evade detection. The final payload is a .NET infostealer that steals credentials, while Anthropic and the legitimate Claude Code installation process were not compromised.

The research and executive brief can be found here:

 Bad Ads, Worse Binaries: Fake Claude Code Installer Drops Infostealer

Learn more about your ad choices. Visit megaphone.fm/adchoices

A little help from your search engine. [Research Saturday]

Lyt når som helst, hvor som helst

Other podcasts you might like ...