CyberWire Daily

Patch Tuesday. Maersk investigates a legacy system breach. A chip-smuggling probe stalls after Nvidia reaches out to Commerce. A US Army officer is arrested in the UK for alleged Russian espionage. Kazakhstan-linked hackers deploy AI agents across Central Asia. Opsec blunders unmask an alleged Qilin ransomware boss. Researchers hijack connected cars via Android apps. Our guest is Tim Starks from CyberScoop to discuss what Democratic control of Congress means for cybersecurity. A New Jersey township holds the news until after the votes.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Tim Starks from CyberScoop is back today to discuss what Democratic control of Congress means for cybersecurity. You can check out Tim’s coverage here.

Selected Reading

Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft (SecurityWeek)

Asus, Zoom Release Security Patches (SecurityWeek)

Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities (SecurityWeek)

Fortinet Patches Nearly 100 Vulnerabilities (SecurityWeek)

Shipping giant Maersk probes 'IT security incident,' data theft (The Register)

U.S. Commerce Dept. Inquiry Into Megaspeed Was Halted After Nvidia Intervention (The New York Times)

Nvidia Intervened in US Probe of Megaspeed Chip Smuggling (Bloomberg)

U.S. Army officer arrested in U.K. on suspicion of trying to steal secrets for Russia (The Washington Post)

Kazakhstan-linked hackers used AI agent to spy on Central Asian governments (The Record)

Who Runs the Ransomware Group Qilin? (Krebs on Security)

Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns (The Register)

The $26 Million Cyber Heist Rocking a Small New Jersey Town (Wall Street Journal)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

In this episode, Dave Bittner joins Maria Varmazis to explore how AI in cybersecurity has changed over the past decade, from opaque, marketed machine-learning features to widely accessible generative AI. They examine defensive automation, attacker enablement, workforce consequences, and why human oversight remains essential, before looking ahead and recalling the early chatbot ELIZA.

Join Maria and Dave as they discuss:

Cybersecurity AI development from anomaly detection, Watson, and the DARPA Cyber Grand Challenge to today’s generative AI and autonomous agents.

How AI has changed phishing, deepfakes, vulnerability discovery, sensitive-data exposure, and the speed of attacker operations.

TheAutomation’s impact on security teams, including entry-level roles and the balance between machine-speed analysis and human judgment.

Keeping humans in the loop while remaining optimistic that AI could ultimately give defenders an advantage.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Palantir’s CISO gets the nod for CISA. Tehran takes the rap for sabotaging European grocery freezers. Russia’s Turla turns victim Exchange servers into passive spy hubs. Barracuda battles actively chained gateway zero-days. Vanderbilt grapples with a BYOD ransomware outbreak. CISA rushes patches for critical IBM and SignalWire flaws, while revamping its national incident portal. ENISA tracks the EU’s cyber maturity gap. Cryptographers debate whether AI will crack modern encryption. Our guest is Duncan Greatwood, CEO at Xage Security, discussing the cybersecurity problem you can’t patch away. Chinese AI labs set up shop in Silicon Valley's backyard.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

On today’s Industry Voices segment, we are joined by Duncan Greatwood, CEO at Xage Security, discussing the cybersecurity problem you can’t patch away. If you enjoyed this conversation be sure to check out the full interview here.

Selected Reading

White House Nominates Palantir Security Chief Michael LoSapio to Lead CISA (HSToday)

CISA updates Cyber Incident Reporting form to improve threat intelligence analysis, national cyber defense (Industrial Cyber)

ENISA reveals the State of Cybersecurity in the Union (ENISA)

France, U.S. Suspect Iran Was Behind Cyberattack on European Fridges (Wall Street Journal)

Quantum Computers Are Poised to Crack Encryption. AI Could Beat Them to It. (Wall Street Journal)

Hackers now exploit critical Barracuda ESG flaws to gain root access (Bleeping Computer)

Exchange for breakfast: Turla’s Cereal tricks are not for kids (ESET)

Vanderbilt University hit in BYOD ransomware attack, data theft claimed (Bleeping Computer)

IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks (SecurityWeek)

Chinese AI labs hire Silicon Valley engineers to rival OpenAI, Anthropic (Rest of World)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

A classified memo ties Nvidia’s chief executive to Chinese espionage. AI coding agents crack under peer pressure, coughing up private keys. Big breaches hit seven million Japanese shoppers and three million students here in the States, while a French bank takes a multi-million-dollar hit through a vendor compromise. Adversaries weaponize a fresh OpenSSH bypass in the wild, pro-Russian hacktivists put dark web bounties on senior European officials, and Google drafts digital IDs to solve the passkey recovery puzzle. Monday business briefing. Our guest is Chris Grove, Director of Cybersecurity Strategy at Nozomi Networks, discussing the critical infrastructure implications of the European refrigeration attacks. Beijing goes all-in on domestic silicon.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today, we are joined by Chris Grove, Director of Cybersecurity Strategy at Nozomi Networks, to discuss the critical infrastructure implications of the European refrigeration attack part 2.

Selected Reading

Rubio Warned Officials About Nvidia Chief’s Entanglement With Chinese Spy (The New York Times)

Agents reveal secrets when offered to team up with each other (The Register)

Japanese homeware giant pulls online store after cloud breach puts 7.7M records at risk (The Register)

Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH (SecurityWeek)

Crédit Mutuel Arkéa Targeted in Reported $133m Heist (Infosecurity Magazine)

Over 3 Million People Hit by Frontline Education Data Breach (SecurityWeek)

Google proposes using digital credentials for secure account recovery (Biometric Update)

Pro-Russian hackers target European officials, offer rewards for personal information (The Record)

CrowdStrike acquires Fiddler AI and Dreadnode. (N2K Pro Business Briefing)

Huawei says it’s made a 100 percent Chinese PC (The Register)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Though many look to ensure that they meet mission readiness requirements, overreliance on these practices can allow hidden risks to go unchecked.

Host Maria Varmazis sits down with Vito Askins, founder of Green Until Integration Consulting, to discuss risk accumulation and operational readiness. The two look at how these integration risk can often go overlooking during systems integration monitoring efforts.

Key Sources:

⁠Everything Was Green Until Integration.⁠

Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://thecyberwire.com/newsletters/signals-and-space⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠space@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.surveymonkey.com/r/NJYCN2P ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠N2K⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠.
Learn more about your ad choices. Visit megaphone.fm/adchoices