Cybersecurity News

Daily Briefing

Just Now

Cisco confirms exploitation of critical Unified CM flaw.

DHS investigates hack of information-sharing network. Suspected Scattered Spider member extradited to the US.

Caveat

11 hours ago

Drawing a digital line for geofencing.

This week, Dave and Ben take a look at the Supreme Court's recent ruling that has significantly changed how the law enforcement must approach collecting user location data. Alongside this conversation, Ben also sits down with former Congressman and current President of Americans for Responsible Innovation (ARI) Brad Carson to talk about how US/China trade relations could shape the future of AI development.

AI Security Brief

11 hours ago

Is the next frontier model your biggest threat or your best defender?

If you think the recent wave of AI-discovered vulnerabilities is a problem, Rob Bair of Anthropic has a reframe for you. Discovery is the easy part. Closing the remediation gap is now the defining security challenge. Drawing on his experience in the Navy, in national security, and now frontier AI, Rob shares with host Johnny Hand what frontier models like Mythos actually mean for security leaders, and how defenders can keep pace when nation-state actors are already running autonomous attacks.

CyberWire Daily

20 hours ago

The AI lock comes off.

The US restores exports of Anthropic’s most advanced AI models. Adobe and Citrix rush out critical patches. RustDuck emerges as a fast-evolving DDoS threat. The Gentlemen raise the stakes with a new EDR-killing exploit. Rocket lab bets big on Iridium. Researchers unveil browser-only ransomware. New Zealand faces questions about its cyber readiness. Iran’s long-running cyber espionage campaign is back in the spotlight. Our guest is Donald Codling, CISO and senior advisor to REGO on cybersecurity and data privacy matters, to discuss the importance of tying security by design to psychological safety and digital trust. VIP backstage access, courtesy of Claude.

Business

20 hours ago

Quantifind has secured $200 million in a funding round led by Summit Partners.

Straiker has raised $64 million in a Series A round. F5 has acquired Denver-based AI governance firm SurePath AI.

Daily Briefing

Jul 1, 2026

US lifts export restrictions on Anthropic’s most advanced AI models.

Adobe patches seven maximum-severity flaws. Business news: Quantifind lands $200 million.

Microsoft Threat Intelligence

Jul 1, 2026

Casey Ellis on How AI Is Reshaping Vulnerability Research and Patching

In this episode of the Microsoft Threat Intelligence Podcast, host⁠ ⁠⁠⁠Sherrod DeGrippo⁠ sits down with Casey Ellis, founder of Bugcrowd and co-founder of disclose.io, to explore how AI is reshaping vulnerability research, bug bounty programs, and the future of cyber defense. They discuss the growing volume of vulnerabilities, the challenges of responsible disclosure, the rise of AI-assisted hacking, and what happens when increasingly powerful tools are placed in the hands of both defenders and attackers. The conversation also dives into the human side of cybersecurity, from community and creativity to maintaining optimism and connection in an AI-driven world.

Marketing

Jul 1, 2026

How Madalina Petrea Runs Marketing for 27+ Cybersecurity Franchise Owners Across 4 Continents

CyberGlobal is the world's first cybersecurity franchise, with Madalina Petrea heading up marketing there. What does it mean to run marketing at a cyber franchise? Supporting 27+ franchise owners across the US, Europe, Africa, and Asia who sell cybersecurity services to small businesses in their local markets. She joins Gianna to talk about what it takes to build that from the ground up. Her team handles everything for new franchisees in the first 90 days, including websites, LinkedIn profiles, content, and templates, so they can focus on learning the business. Her biggest challenge right now? Designing a system at 27 locations that still works at 200. They also get into why paid ads worked in Dubai and Italy but not in Boston, and why SEO has become one of their most important growth channels, including showing up in AI search tools like ChatGPT and Perplexity.

CyberWire Daily

Jun 30, 2026

The court draws a privacy line.

The Supreme Court limits geofence warrants. DHS moves to expand CISA. The State Department offers $10 million for Russian hackers. A legal theory could reshape EU-U.S. data sharing. Plus, cyberattacks hit D.C. housing, Oracle and SimpleHelp flaws face active exploitation, malware lingers on Japanese military networks, and stolen Apple supplier data surfaces online. John Cannava, CIO at Ping Identity, discusses how identity threats don't go on holiday. The Secret Service dial down the risk on BYOD.

Daily Briefing

Jun 30, 2026

US Supreme Court rules that geofence searches generally require warrants.

Maximum-severity SimpleHelp flaw is now actively exploited. US government offers $10 million reward for info on Russian state-backed hackers.

SpyCast

Jun 30, 2026

Closer than Cuba: the Able Archer Nuclear Crisis of 1983

It's November of 1983, the closest the world came to nuclear war, some may argue even closer than the Cuban Missile Crisis of 1962. Yet the Able Archer 1983 exercise incident is relatively unknown by comparison. A series of events that started with the Soviet shootdown of a Korean Air Lines plane, ended with not one but two almosts, when it came to accidental nuclear war. This included a simulated nuclear release authority request that may have been seen in Moscow as the prelude to a first strike. How these events unfolded was a result of heightened Cold War tension, antagonism, and miscommunication. Brian Morra was a US Air Force intelligence officer who had a front row seat to this, and sits down with guest host Dr. Mark Jacobson to discuss how the world came to the brink of nuclear war.

Data Security Decoded

Jun 30, 2026

Defending the Authentication Flow: Device Code Phishing with Selena Larson

Host Caleb Tolin sits down with Selena Larson, Staff Threat Researcher and Lead, Intelligence Analysis and Strategy at Proofpoint and Host of the DISCARDED podcast, to discuss the mechanics of device code phishing and the widespread abuse of Microsoft OAuth authentication flows. The conversation explores the historical evolution of credential fishing from early red team testing to modern phishing as a service kits distributed across cyber criminal forums. Selena breaks down how financially motivated adversaries execute account takeovers and navigate enterprise infrastructure once initial access is achieved.

Load More