CyberWire Daily

A classified memo ties Nvidia’s chief executive to Chinese espionage. AI coding agents crack under peer pressure, coughing up private keys. Big breaches hit seven million Japanese shoppers and three million students here in the States, while a French bank takes a multi-million-dollar hit through a vendor compromise. Adversaries weaponize a fresh OpenSSH bypass in the wild, pro-Russian hacktivists put dark web bounties on senior European officials, and Google drafts digital IDs to solve the passkey recovery puzzle. Monday business briefing. Our guest is Chris Grove, Director of Cybersecurity Strategy at Nozomi Networks, discussing the critical infrastructure implications of the European refrigeration attacks. Beijing goes all-in on domestic silicon.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today, we are joined by Chris Grove, Director of Cybersecurity Strategy at Nozomi Networks, to discuss the critical infrastructure implications of the European refrigeration attack part 2.

Selected Reading

Rubio Warned Officials About Nvidia Chief’s Entanglement With Chinese Spy (The New York Times)

Agents reveal secrets when offered to team up with each other (The Register)

Japanese homeware giant pulls online store after cloud breach puts 7.7M records at risk (The Register)

Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH (SecurityWeek)

Crédit Mutuel Arkéa Targeted in Reported $133m Heist (Infosecurity Magazine)

Over 3 Million People Hit by Frontline Education Data Breach (SecurityWeek)

Google proposes using digital credentials for secure account recovery (Biometric Update)

Pro-Russian hackers target European officials, offer rewards for personal information (The Record)

CrowdStrike acquires Fiddler AI and Dreadnode. (N2K Pro Business Briefing)

Huawei says it’s made a 100 percent Chinese PC (The Register)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Though many look to ensure that they meet mission readiness requirements, overreliance on these practices can allow hidden risks to go unchecked.

Host Maria Varmazis sits down with Vito Askins, founder of Green Until Integration Consulting, to discuss risk accumulation and operational readiness. The two look at how these integration risk can often go overlooking during systems integration monitoring efforts.

Key Sources:

⁠Everything Was Green Until Integration.⁠

Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://thecyberwire.com/newsletters/signals-and-space⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠space@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.surveymonkey.com/r/NJYCN2P ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠N2K⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠.
Learn more about your ad choices. Visit megaphone.fm/adchoices

This week, we are joined by Matt Poto, Associate Triage Analyst at Huntress, discussing their work on "Grand Theft Auto VI Hype Leads to Malware." Threat actors are exploiting the hype surrounding the upcoming release of Grand Theft Auto VI (GTA6) by distributing fake leaked game downloads designed to infect unsuspecting gamers.

Huntress identified malicious ISOs promoted through search engine poisoning, gaming forums, torrent sites, and social media that contain multiple types of malware, including remote access trojans (RATs), an infostealer, and ransomware. The malware can steal credentials and personal information, give attackers control of compromised systems, and encrypt or destroy files, with evidence suggesting the campaign may be targeting Russian-speaking gamers.

The research and executive brief can be found here:

⁠⁠⁠⁠⁠⁠⁠Grand Theft Auto VI Hype Leads to Malware

Learn more about your ad choices. Visit megaphone.fm/adchoices

Federal agencies warn of cyberattacks on industrial refrigeration systems. Healthcare cybersecurity could get a post-midterm boost. Chainalysis exposes customer credentials, and DigiCert discloses a breach. OpenAI's latest model learns to respect boundaries. D-Link warns of unpatched switch vulnerabilities. The EU accuses TikTok of leading users down harmful rabbit holes, while tech giants challenge California's child safety law. Federal prosecutors charge three suspects in a $129 million AI-powered impersonation scheme. Our guest is Greg Notch, CTO of Expel, sharing thoughts on how pacing AI won't stop the bad actors. Meta's AI feeding frenzy gets put on a diet.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Greg Notch, CTO of Expel, sharing thoughts on how pacing AI won't stop the bad actors.

Selected Reading

US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems (IC3)

How Democrats' Win Could Reshape Healthcare Cyber Policy (GovInfo Security)

Chainalysis says breach exposed credentials for all customers (Bleeping Computer)

DigiCert Data Breach Impacts Business Customer Information (SecurityWeek)

OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line (SecurityWeek)

D-Link warns of multiple zero-days in DGS-3130 Series switches (Bleeping Computer)

EU accuses TikTok of trapping users in harmful ‘rabbit holes’ (The Record)

Social media giants sue California to overturn law shielding kids 15 and under from compulsive use (The Record)

3 Charged in Scheme to Use AI to Impersonate CEOs and Attorneys to Steal $129 Million (SecurityWeek)

Everyone Everywhere Hated Meta’s New AI Training Terms. Now, They’re On Pause (404 Media)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Claude Dispatch opens the door to hijacking. Residential proxies turn up on White House networks. Asian airlines suffer a wave of data breaches. Cisco and WatchGuard roll out critical patches. GhostMap traps Android phones in endless reboot loops. Hackers exploit a Zyxel zero-day to compromise nearly a thousand devices. Ukraine's scam call center crackdown ensnares senior security officials. AI-powered scammers prey on owners of missing pets. A former U.S. government IT worker admits to spying for Ethiopia. Our guest is Rebecca Krauthamer, CEO and co-founder of QuSecure, with insights on the NIST PQC roadmap. Voters pull the plug on data centers.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Rebecca Krauthamer, CEO and co-founder of QuSecure, sharing insights on the NIST PQC roadmap.

Selected Reading

Want to Rent an Internet Address at the White House? (Krebs On Security)

Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries (The Register)

More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus (The Record)

Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws (SecurityWeek)

GhostMap: The Android flaw that crashes your phone before you open the app (Bitdefender)

Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day (SecurityWeek)

Ukraine fires two senior security officials amid corruption probe into scam call centers (The Record)

Scammers using AI-generated images of missing pets to demand rewards (BBC News)

US gov IT worker pleads guilty to sending Top Secret files to Ethiopia (The Register)

The Results Are In: Voters Hate Data Centers (WIRED)

Midterm Data Center Backlash Puts AI Expansion Plans at Risk (BankInfo Security)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our ⁠brief listener survey⁠. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at ⁠sponsor.thecyberwire.com⁠.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices