The Other Side of the PR Pitch with Pulitzer Prize Winner Yael Grauer

15 hours ago

The Other Side of the PR Pitch with Pulitzer Prize Winner Yael Grauer

Yael Grauer won a Pulitzer and got laid off in the same year. She is a freelance investigative reporter covering cybersecurity, privacy, and surveillance. She sat down with Gianna to talk about what companies get wrong when journalists come knocking, why lying in that moment makes everything worse, and what it looks like from the other side of every pitch, every breach response, and every "no comment" that ends up in a story anyway.

Marketing

The Other Side of the PR Pitch with Pulitzer Prize Winner Yael Grauer

15 hours ago

The Other Side of the PR Pitch with Pulitzer Prize Winner Yael Grauer

Yael Grauer won a Pulitzer and got laid off in the same year. She is a freelance investigative reporter covering cybersecurity, privacy, and surveillance. She sat down with Gianna to talk about what companies get wrong when journalists come knocking, why lying in that moment makes everything worse, and what it looks like from the other side of every pitch, every breach response, and every "no comment" that ends up in a story anyway.

Marketing

Cybersecurity News

CyberWire Daily

Just Now

Clear your calendar, it’s Patch Tuesday.

Patch Tuesday is a doozy. The Feds warn China-based AI companies are distilling U.S. AI models. A new ClickFix campaign goes straight for the browser. Smart TVs get nosy. Hackers gift themselves a $47 million bug bounty. An Ohio man gets 15 years in federal prison for cyberstalking and sextortion. Andy Hornegold, Chief Security Technologist from Intruder, discusses what makes up a reliable AI pentests and the benefits and risks that come with AI-enabled security. Putting AI at the head of the class.

Business

Just Now

NVIDIA to acquire Hugging Face for $12.9 billion.

Upwind has raised $300 million in Series C funding led by Bessemer Venture Partners and TCV.

Daily Briefing

4 hours ago

Patch Tuesday notes: Microsoft sets another record.

New ClickFix technique targets browsers. Business news: NetSPI and Synack to merge.

Microsoft Threat Intelligence

13 hours ago

Why Threat Actors Love Your RMM

In this episode of the Microsoft Threat Intelligence Podcast, recorded live at Black Hat, Microsoft Threat Intelligence Director Elliot Volkman is joined by Andrew “Spike” Grant, Principal Threat Intelligence Incident Commander at Huntress. They explore how cybercriminals are increasingly abusing legitimate remote monitoring and management (RMM) tools, why trusted remote-access software has become an attractive alternative to traditional malware, and how AI is improving phishing and social engineering. Spike also breaks down a real-world attack that deployed multiple RMM tools to maintain access, shares stories from his years of interacting directly with threat actors and offers practical guidance for detecting suspicious RMM activity before it leads to ransomware or data theft.

CyberWire Daily

Sep 8, 2026

Worming its way through WeChat.

Researchers build a self-propagating attack against WeChat. Threat actors move toward multi-agent AI frameworks. N-able issues an emergency patch for a maximum-severity bug under active exploitation. MikroTik patches multiple RouterOS vulnerabilities. China accesses restricted American technology through subsidiaries and overseas partners. An active phishing campaign abuses legitimate Google services to make malicious links appear trustworthy. Australians may soon be able to disable the algorithm. Monday business briefing. Jason Lancaster, Chief Investigations Officer at SpyCloud, discusses how AI is affecting shifting cybercrime from traditional investigations to agentic AI at scale. Electromagnetic eavesdropping gets personal.

Daily Briefing

Sep 8, 2026

Threat actors move toward multi-agent AI frameworks.

N-able issues emergency fix for maximum-severity flaw. Stealthy DPRK toolkit targets South Korean organizations.

Inside the Media Minds

Sep 8, 2026

Inside the Media Mind of Ken Underhill: eSecurity Planet

On this episode of #IMM, Christine and Madison chat with Ken Underhill to learn more about his role and coverage at eSecurity Planet.

SpyCast

Sep 8, 2026

25 Years After 9/11: The CIA's First Moments Behind Enemy Lines in Afghanistan

Retired Colonel Justin Sapp was a Green Beret detailed to the CIA after the September 11th terrorist attacks. He was part of Team Alpha, the first eight Americans to drop behind enemy lines into the mountains of Afghanistan. At 29, Justin was its youngest member. There was no time to onboard him, and he was told he was leaving the next day, departing from the DC area to a base in Uzbekistan, then touching down in northern Afghanistan on a Black Hawk helicopter. Justin would go on to clear the way for follow-on forces to land, secure alliances with warlords to oust the Taliban, interrogate enemy fighters who had been captured. He would also tragically lose his colleague, Johnny “Mike” Spann. Justin takes us back into that historic mission 25 years later.

Malware

Sep 8, 2026

Hackers gonna hack back.

Welcome in! You’ve entered, Only Malware in the Building. Join us each month to sip tea and solve mysteries about today’s most interesting threats. Your host is ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Selena Larson⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Proofpoint⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ intelligence analyst and host of their podcast ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠DISCARDED⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. Inspired by the residents of a building in New York’s exclusive upper west side, Selena is joined by her co-hosts ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠N2K Networks⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Keith Mularski⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, former FBI cybercrime investigator and now Chief Global Ambassador at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Qintel⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. Being a security researcher is a bit like being a detective: you gather clues, analyze the evidence, and consult the experts to solve the cyber puzzle. This week, Dave, Selena, and Keith explore the pros and cons of allowing select U.S. companies to conduct offensive cyber operations under strict government guardrails. They discuss what the proposed framework could mean for private-sector security researchers, how researchers have already been operating in this space for years, and where the line between defense and offense gets blurry. They also look at how adversaries such as China and Russia use proxy companies and other private-sector entities to conduct cyber operations—and consider whether giving trusted U.S. companies similar capabilities could strengthen cyber defenses or create new risks.

Special Editions

Sep 7, 2026

This call may be monitored.

In this Special Episode, ⁠Maria Varmazis⁠ and ⁠Dave Bittner⁠ are joined by friend of the show, ⁠Brandon Karpf⁠, to unpack a new bipartisan congressional investigation into the lingering presence of Chinese state-owned telecommunications companies inside U.S. internet infrastructure. The House Select Committee on China says China Mobile, China Unicom, and China Telecom remain deeply embedded in American networks even after federal regulators denied or revoked their authority to provide certain telecommunications services over national security concerns. The investigation found that restrictions imposed by the FCC limited what the companies could sell, but did not necessarily remove their equipment, network connections, or commercial relationships from the U.S. internet ecosystem.

Signals and Space

Sep 6, 2026

The vulnerable clock in space.

This week on T-Minus: Space-Cyber Briefing: we explore the role of timing in space and how vital these systems are for everyday functionality. Given their importance, attackers have become increasingly aware of how to exploit these systems.

T-Minus

Sep 6, 2026

When hackers control the clock.

The accurate timing data from spacecraft has become an invaluable tool for nearly every critical infrastructure sector and a greater target for malicious actors. Host Maria Varmazis and ⁠⁠⁠⁠Andy Davis⁠⁠, Global Research Director at the ⁠NCC Group⁠, discuss the importance of timing in space. The two look at how timing systems have continued to grow more important in everyday life and why attackers have begun to increasingly exploit these critical services.

Load More