Cybersecurity News

SpyCast

4 hours ago

Peter Ortiz: The WWII Marine Who Foreshadowed Modern-Day Special Forces

In 2017, journalist Katie Sanders discovered an episode of a radio program called This Is Your Life. It was a scratchy recording from 1949, and she heard the voice of 2nd Lt. Murray Simon, her grandfather, for the first time. In the episode, Murray was reunited with a man named Peter Ortiz, who had rescued him after his plane crashed over Nazi-occupied France in 1944. Ortiz became one of the most decorated Marine officers of World War II, undertaking missions now handled by units like the Navy SEALs and Green Berets. Katie and Nicholas Reynolds, a former CIA historian, went on to write Ortiz's War.

CyberWire Daily

17 hours ago

The odds were classified.

Polymarket traders win big on U.S. military insider information. Slovakia deactivates speed cameras with Russian backdoors. TikTok pays $400 million to settle kids' privacy allegations. Hackers infect Android-based car systems with botnet malware. CISA orders quick patching of an actively exploited Zimbra Collaboration Suite vulnerability. SynkLoader malware is built for stealthy access to corporate networks. Dutch authorities fine Uber over $900 million over automated hiring practices. An ATM jackpotter gets a record prison sentence. Monday business briefing. A privacy promise loses face.

Story

17 hours ago

When AI Makes Everyone a Target with Mark Beare from Malwarebytes

Mark Beare, General Manager of Malwarebytes Consumer Business, joins Dave Bittner on the CyberWire Daily podcast for a sponsored Industry Voices recorded at Black Hat USA 2026. He discusses how AI is helping scammers create highly personalized attacks at scale, why everyday consumers are increasingly attractive targets, and how AI could also help defenders make cybersecurity easier and more accessible for the people they protect.

Daily Briefing

23 hours ago

Slovakia finds Russian backdoors on traffic speed cameras.

Canada's Hospital for Sick Children discloses breach. TikTok will pay $400 million to settle children's privacy case.

Signals and Space

Aug 23, 2026

Space’s trust problem.

This week on T-Minus: Space-Cyber Briefing: we look at how the current space infrastructure creates inherent security problems and how moving the root of trust into the hardware itself. By changing this approach and by preparing for the next generations of new technologies, the space sector will be able to better secure itself for years to come.

T-Minus

Aug 23, 2026

Building a secure space internet.

As space infrastructure has continued to expand, developing secure space systems has become just as important as launching the spacecraft themselves. In this week's episode, host Maria Varmazis sits down with ⁠Filip Rezabek⁠, co-founder and CTO of ⁠Space Computer⁠, to talk about some of the technologies being created to secure space infrastructure in orbit. The two discuss the importance of establishing a chain of trust in space and the challenges of securing hardware against supply chain attacks.

Research Saturday

Aug 22, 2026

A RAT in the spreadsheet.

Today we are joined by ⁠Aaron Beardslee⁠, Manager of Threat Research at ⁠Securonix⁠, discussing "Analyzing SHEET#CREEP: SHEETCREEP is up again with different config obfuscation." Securonix researchers have identified an evolved version of the SHEETCREEP espionage campaign, using a diplomatic-themed ISO phishing lure to deliver a C# remote access trojan targeting Indian diplomatic interests. The malware abuses the Google Sheets API as a stealthy command-and-control channel, with researchers identifying 91 active victim tabs, including a high-confidence target in Pakistan. The campaign, assessed with moderate confidence as linked to Pakistan-aligned APT36, has added XOR-obfuscated configurations and other anti-analysis techniques to evade detection and maintain persistent access.

Week that Was

Aug 22, 2026

Citrix urges immediate patching of two newly disclosed vulnerabilities.

Supply chain attack compromises popular Rust library. US states sue Meta over claims that it deliberately addicts young users.

CyberWire Daily

Aug 21, 2026

The guest nobody invited.

CISA orders patching of TrueConf Server vulnerabilities. LockBit threatens release of stolen banking data. Researchers disclose a critical type confusion vulnerability in a Node.js library. A new Agent Tesla v4 campaign introduces enhanced evasion techniques. A novel malware delivery technique abuses FTP server banners to hide commands. Apple patches a critical image-processing flaw. A North Korean software supply chain attack targets the Rust ecosystem. Latvian officials resign following a major data breach. Defense contractors are confident in compliance, less so in their ability to prove it. Our guest is Patrick Coughlin, Co-Founder and CEO of Savi Security. discussing the free utility he’s developed to protect the sandwich generation from AI-driven scams. When it comes to cyber extortion, who you gonna call?

Daily Briefing

Aug 21, 2026

CISA warns of actively exploited TrueConf vulnerabilities.

Supply chain attack compromises popular Rust library. Data giant Alation discloses a cyberattack.

CyberWire Daily

Aug 20, 2026

The robots have gone bananas.

Federal agencies warn of an active campaign targeting critical infrastructure. Citrix races to patch critical NetScaler flaws. More than 50,000 exposed Stripe API keys raise fraud concerns. Black Hat and DEF CON attendees are targeted in a new social engineering campaign. Atlassian, Splunk, and Cisco fix hundreds of vulnerabilities. A new Android banking trojan adds an unusual twist. A healthcare breach impacts 3.8 million people. SilkParasite expands cyberespionage in Central Asia. And CISA eyes a major overhaul of federal cyber software procurement. Our guest is Chris Wallis, founder and CEO of Intruder, on how AI agents killed the annual pentest and are reshaping exposure management. AI powered robots find bananas quite appealing.

Story

Aug 20, 2026

Why the Annual Pentest Can’t Keep Up with Chris Wallis from Intruder

Chris Wallis, Founder and CEO of Intruder, joins Dave Bittner on the CyberWire Daily podcast for a sponsored Industry Voices recorded at Black Hat USA 2026. He discusses why point-in-time pentesting is struggling to keep pace as teams ship software and attackers exploit vulnerabilities faster, how AI agents could make continuous investigation more practical, and why compliance standards need to evolve alongside the changing threat landscape.

Load More