CyberWire Daily Podcast

Interpols Operation Secure dismantles a major cybercrime network, and Singapore takes down scam centers. GitLab patches multiple vulnerabilities in its DevSecOps platform. Researchers unveil a covert method for exfiltrating data using smartwatches. EchoLeak allows for data exfiltration from Microsoft Copilot. Journalists are confirmed targets of Paragons Graphite spyware. France calls for comments on tracking pixels. Fog ransomware operators deploy an unusual mix of tools. Skeleton Spider targets recruiters by posing as job seekers on LinkedIn and Indeed. Erie Insurance suffers ongoing outages following a cyberattack. Our N2K Lead Analyst Ethan Cook shares insights on Trumps antitrust policies. DNS neglect leads to AI subdomain exploits.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and youll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today, we share a selection from todays Caveat podcast where Dave Bittner and Ben Yelin are joined by N2Ks Lead Analyst, Ethan Cook, to take a Policy Deep Dive into The art of the breakup: Trumps antitrust surge. You can listen to the full episode here and find new episodes of Caveat in your favorite podcast app each Thursday.

Selected Reading

Interpol takes down 20,000 malicious IPs and domains (Cybernews)

Singapore leads multinational operation to shutter scam centers tied to $225 million in thefts (The Record)

GitLab patches high severity account takeover, missing auth issues (Bleeping Computer)

SmartAttack uses smartwatches to steal data from air-gapped systems (Bleeping Computer)

Critical vulnerability in Microsoft 365 Copilot AI called EchoLeak enabled data exfiltration (Beyond Machines)

Researchers confirm two journalists were hacked with Paragon spyware (TechCrunch)

Tracking pixels: CNIL launches public consultation on its draft recommendation (CNIL)

Fog ransomware attack uses unusual mix of legitimate and open-source tools (Bleeping Computer)

FIN6 cybercriminals pose as job seekers on LinkedIn to hack recruiters (The Record)

Erie Insurance confirms cyberattack behind business disruptions (Bleeping Computer)

Why Was Nvidia Hosting Blogs About 'Brazilian Facesitting Fart Games'? (404 Media)

Secure your public DNS presence from subdomain takeovers and dangling DNS exploits (Silent Push)



Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Heres our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Patch Tuesday. Mozilla patches two critical FireFox security flaws. A critical flaw in Salesforce OmniStudio exposes sensitive customer data stored in plain text. The Badbox botnet continues to evolve. AI-powered ghost students enrolling in online college courses to steal government funds. Hackers steal nearly 300,000 vehicle crash reports from the Texas Department of Transportation. ConnectWise rotates its digital code signing certificates. The chair of the House Homeland Security Committee announces his upcoming retirement. Our guest is Matt Radolec, VP of Incident Response, Cloud Operations & SE EU from Varonis, wondering if AI may be the Cerberus of our time. Friendly skiesor friendly spies?

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and youll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.



CyberWire Guest

On our Industry Voices segment, we have Matt Radolec, VP of Incident Response, Cloud Operations & SE EU from Varonis, sharing insights on AI: The Cerberus of our time. You can hear Matts full interview here. The State of Data Security: Quantifying AIs Impact on Data Risk report from Varonis reveals how much sensitive data is exposed and at risk in the AI era. Learn more and get State of Data Security Report.

Selected Reading

Microsoft warns of 66 flaws to fix for this Patch Tuesday, and two are under active attack (The Register)

Microsoft slows Windows 11 24H2 Patch Tuesday due to a 'compatibility issue' (The Register)

ICS Patch Tuesday: Vulnerabilities Addressed by Siemens, Schneider, Aveva, CISA (SecurityWeek)

Firefox Patches Multiple Vulnerabilities That Could Lead to Browser Crash (Cyber Security News)

Salesforce OmniStudio Vulnerabilities Exposes Sensitive Customer Data in Plain Text (Cyber Security News)

CISO who helped unmask Badbox warns: Version 3 is coming (The Register)

How Scammers Are Using AI to Steal College Financial Aid (SecurityWeek)

300K Crash Reports Stolen in Texas DOT Hack (BankInfoSecurity)

ConnectWise rotating code signing certificates over security concerns (Bleeping Computer)

House Homeland Chairman Mark Greens departure could leave congressional cyber agenda in limbo (CyberScoop)

Airlines Don't Want You to Know They Sold Your Flight Data to DHS (404 Media)

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Heres our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

An unsecured Chroma database exposes personal information of Canva Creators. A researcher brute-forces Google phone numbers. Five zero-day vulnerabilities in Salesforce Industry Cloud are uncovered. Librarian Ghouls target Russian organizations with stealthy malware. SAP releases multiple security patches including a critical fix for a NetWeaver bug. Sensata Technologies confirms the theft of sensitive personal data during an April ransomware attack.SentinelOne warns of targeted cyber-espionage attempts by China-linked threat actors. Skitnet gains traction amongst ransomware gangs. The UKs NHS issues an urgent appeal for blood donors. On todays Threat Vector, host David Moulton talks with Arjun Bhatnagar, CEO of Cloaked, about why protecting your digital privacy is more urgent than ever. The FBIs Cyber Division welcomes a new leader.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and youll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

Threat Vector Segment

In this segment of Threat Vector, host David Moulton talks with Arjun Bhatnagar, CEO of Cloaked, about why protecting your digital privacy is more urgent than ever. From building better cybersecurity habits to understanding the hidden risks in everyday apps, Arjun shares practical advice that listeners can use immediately. You can hear David and Arjun's full discussion on Threat Vector here and catch new episodes every Thursday on your favorite podcast app.

Selected Reading

Canva Creators' Data Exposed Via AI Chatbot Company Database (Cyber Security News)

Google brute-force attack exposes phone numbers in minutes (The Register)

Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud (SecurityWeek)

'Librarian Ghouls' APT Group Actively Attacking Organizations To Deploy Malware (Cyber Security News)

Critical Vulnerability Patched in SAP NetWeaver (SecurityWeek)

Sensitive Information Stolen in Sensata Ransomware Attack (SecurityWeek)

SentinelOne Warns Cybersecurity Vendors of Chinese Attacks (Infosecurity Magazine)

Skitnet Malware Actively Adopted by Ransomware Gangs to Enhance Operational Efficiency (GB Hackers)

NHS calls for 1 million blood donors as UK stocks remain low following cyberattack (The Record) mentioning this in the Briefing

Brett Leatherman to follow Bryan Vorndran as head of FBI Cyber Division (The Record)

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Heres our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

A new White House executive Order overhauls U.S. cybersecurity policy. The EU updates its cybersecurity blueprint. The Pentagons inspector general investigates Defense Secretary Hegseths Signal messages. Chinese hackers target U.S. smartphones. A new Mirai botnet variant drops malware on vulnerable DVRs. 17 popular Gluestack packages on NPM have been compromised. Attackers exploit vulnerabilities in Fortigate security appliances to deploy Qilin ransomware. A Nigerian man gets five years in prison for a hacking and fraud scheme. Our guest is Tim Starks from CyberScoop, discussing Sean Cairncross journey toward confirmation as the next National Cyber Director. Fire Stick flicks spark a full-on legal blitz.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and youll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Tim Starks from CyberScoop, to discuss Sean Cairncross, whos bringing a focus on policy coordination if confirmed as the next National Cyber Director.

Selected Reading

Trump Administration Revises Cybersecurity Rules, Replaces Biden Order (Infosecurity Magazine)

Europe arms itself against cyber catastrophe (Politico)

Pentagon watchdog investigates if staffers were asked to delete Hegseths Signal messages (Associated Press)

Chinese hackers and user lapses turn smartphones into a 'mobile security crisis' (Associated Press)

iMessage Zero-Click Attacks Suspected in Targeting of High-Value EU, US Individuals (SecurityWeek)

New Mirai botnet infect TBK DVR devices via command injection flaw (Bleeping Computer)

Malware found in NPM packages with 1 million weekly downloads (Bleeping Computer)

Hackers Actively Exploiting Fortigate Vulnerabilities to Deploy Qilin Ransomware (Cyber Security News)

Nigerian Involved in Hacking US Tax Preparation Firms Sentenced to Prison (SecurityWeek)

Hacked Fire Sticks now come with more than just malware a possible jail sentence (Cybernews)

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Heres our media kit. Contact us at [email protected] to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Please enjoy this encore of Career Notes.

Linux and Security Advocate at Intezer Ell Marquez shares her journey from the family ranch to security. Needing a life change due to a bunch of circumstances that had occurred that left her almost homeless, Ell found out about a six week Linux boot camp that took her down the path toward technology. She fell in love with security at at BSides Conference and hasn't looked back. Ell says she recently started a campaign called "it's okay to be new" noting that no matter how long you've been in the industry, you need to be new because technology changes so quickly. She concludes by offering one final piece of advice to everybody is just "be unapologetically yourself." We thank Ell for sharing her story with us. Learn more about your ad choices. Visit megaphone.fm/adchoices