Cybersecurity News

Daily Briefing

2 hours ago

US states sue Meta over claims that it deliberately addicts young users.

Researchers reverse-engineer French malware used to hack EncroChat. An unprecedented number of Apple users received spyware alerts last week.

SpyCast

7 hours ago

What It Takes to Run the CIA's Southeast Asia Department

You might find Meredith Cavan playing music in an Irish pub. But long before her first album dropped, she clocked more than 20 years at the CIA. One of her jobs there was Southeast Asia Department chief, where she oversaw covert action, intelligence operations, and analysis across 30 countries. We're talking about the years 2021 to 2023, when terrorism was taking a back seat to strategic competition, and her priority was trying to thwart China's influence and infrastructure in its most consequential playground.

CyberWire Daily

22 hours ago

Please hold while we decide.

Internal policy conflicts hamper U.S. military AI leadership. Clop claims GE, Philips and Shell. Attackers actively probe internet-facing GeoServer instances. “The Hatman” offers millions of alleged employee records for sale. ETSI begins the approval process for European cyber standards. Microsoft is still working on a patch for the ShieldBreak vulnerability. Autonomous AI systems create CPU bottlenecks. Monday business briefing. Our guest is Nick Warner, CEO at Neo.ai, on the shifting landscape around AI and agentic security. AI agents kneecap each other with self-replicating malware.

Story

22 hours ago

When AI Sprawl Becomes a Security Problem with Nick Warner from Neo

Nick Warner, CEO of Neo, joins Dave Bittner on the CyberWire Daily podcast for a sponsored Industry Voices recorded at Black Hat USA 2026. He discusses how the rapid adoption of AI tools and agentic software is reshaping enterprise security, why CISOs need greater visibility and control over the software operating across their environments, and how organizations can put guardrails around AI without creating unnecessary friction.

Daily Briefing

Aug 17, 2026

General Electric, Philips, and Shell investigate alleged breaches.

ShinyHunters leaks alleged RingCentral data. Police arrest seven suspects in connection with 2023 bank hack.

Special Editions

Aug 16, 2026

Frontier models and the future of cyber defense.

In this special edition from Black Hat, Dave Bittner sits down with ⁠Clint Gibler⁠, Cyber Lead at ⁠OpenAI⁠, and ⁠Robby Winchester⁠, Chief Global Professional Services Officer at ⁠SpecterOps⁠, to explore how frontier AI models are changing the way defenders approach cybersecurity. The conversation moves beyond the hype to examine responsible AI deployment, AI red teaming, reducing noise in security workflows, and the balance between advanced models and human expertise. They also discuss OpenAI’s Trusted Access for Cyber program and what it takes to give security practitioners access to powerful AI capabilities while managing the risks of misuse.

T-Minus

Aug 16, 2026

AI, misinformation, and the future of cybersecurity.

As AI products proliferate, they continue to introduce new concerns, which have subtly eroded trust in imagery and content created by space-based infrastructure. In this week's episode, host Maria Varmazis sits down with ⁠⁠⁠Dave Bittner and Brandon Karpf to look at Google's troubled implementation of Nano Banana 2 in Google Earth. The incident raises larger concerns regarding how AI systems are becoming deeper ingrained into everyday life despite their ability to be misused and spread misinformation.

Signals and Space

Aug 16, 2026

Attacking trust in space.

This week on T-Minus: Space-Cyber Briefing: we look at how AI systems are being used to abuse the trust people have in space-based imagery. This abuse has caused people to believe that fake images and videos are genuine and dismiss real content as misinformation.

Research Saturday

Aug 15, 2026

The botnet that scouts before it strikes.

Today we are joined by ⁠Ian Goldin⁠, Senior Lead Information Security Engineer, and ⁠Mike Horka⁠, Principal Information Security Engineer, from ⁠Lumen's Black Lotus Labs⁠, discussing their research entitled "Expanded JDY IoT and SOHO botnet enables rapid vulnerability exploitation." Black Lotus Labs has uncovered a major resurgence of the JDY botnet, a China-nexus reconnaissance network now comprising more than 1,500 compromised SOHO and IoT devices. The botnet uses these devices to conduct targeted scanning and fingerprinting, helping threat actors rapidly identify vulnerable infrastructure—sometimes within hours of a new vulnerability disclosure—and appears to have a particular focus on U.S. military-related networks. The research highlights how compromised routers and IoT devices can be turned into distributed reconnaissance infrastructure that evades traditional IP-based defenses and supports follow-on exploitation.

Week that Was

Aug 15, 2026

President Trump authorizes private-sector companies to hack cybercriminals.

Trivy, not LiteLLM, was the original source of the 2,500-organization supply chain attack. Patch Tuesday notes: Microsoft fixes three zero-days.

CyberWire Daily

Aug 14, 2026

Apple has a message for you.

Apple sends out threat notifications to users targeted by spyware. Trivy, not LiteLLM, was the original source of the 2,500-organization supply chain attack. French tax authority confirms data breach. Chinese hack-for-hire group conducts espionage and cybercrime simultaneously. Ukrainian police shut down 94 scam call centers. Former data analyst jailed for insider extortion plot. New macOS malware spreads via ClickFix. Today we are joined by Tom Kellermann, VP of AI Security at TrendAI, discussing the machine-speed war for financial control. And the glitch in the surveillance matrix.

Daily Briefing

Aug 14, 2026

Apple sends out threat notifications to users targeted by spyware.

Trivy, not LiteLLM, was the original source of the 2,500-organization supply chain attack. Chinese hack-for-hire group conducts espionage and cybercrime simultaneously.

Load More