No such thing as a free parking spot.

15 hours ago

No such thing as a free parking spot.

This week, hosts of N2K CyberWire ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ alongside ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow up from Maria on ACATS fraud, including a reminder that protecting your accounts starts with the basics: strong passwords and multifactor authentication. Joe also has a follow-up inspired by 2001: A Space Odyssey and an experiment with AI. Joe covers a New York parking scam involving fake QR codes placed on parking kiosks, then takes a strange detour into Pennsylvania’s spotted lanternfly quarantine and an alleged scheme involving fake lanternfly permits. Dave looks at a fake iPhone Duo preorder scam that uses an Apple-style site and a supposed $500 voucher to deliver a DarkSword exploit to vulnerable iPhones. Maria explores new Consumer Reports research showing that 91% of Americans have encountered a digital scam or cyberattack attempt, while confidence in the privacy of personal data continues to fall. Our Catch of the Day comes from Reddit, where a spam caller appears to be on the hunt for someone named Juan.

Hacking Humans

No such thing as a free parking spot.

15 hours ago

No such thing as a free parking spot.

This week, hosts of N2K CyberWire ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ alongside ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow up from Maria on ACATS fraud, including a reminder that protecting your accounts starts with the basics: strong passwords and multifactor authentication. Joe also has a follow-up inspired by 2001: A Space Odyssey and an experiment with AI. Joe covers a New York parking scam involving fake QR codes placed on parking kiosks, then takes a strange detour into Pennsylvania’s spotted lanternfly quarantine and an alleged scheme involving fake lanternfly permits. Dave looks at a fake iPhone Duo preorder scam that uses an Apple-style site and a supposed $500 voucher to deliver a DarkSword exploit to vulnerable iPhones. Maria explores new Consumer Reports research showing that 91% of Americans have encountered a digital scam or cyberattack attempt, while confidence in the privacy of personal data continues to fall. Our Catch of the Day comes from Reddit, where a spam caller appears to be on the hunt for someone named Juan.

Hacking Humans

Cybersecurity News

CyberWire Daily

Just Now

You can’t secure what you can’t see.

An OT cyber coalition urges CISA to establish baseline security requirements. Another OpenAI safety worker resigns. Maryland lawmakers seek funding for Cyber Command’s mental health initiatives. Hackers compromised country-code domain registries for TLS certs. The FBI and French authorities shut down alleged CSAM AI deepfake websites. Ransomware recovery firm CEO indicted for secretly paying attackers. MATCHBOIL keeps simmering. Apollo software pioneer Margaret Hamilton dies. On today’s Industry Voices Sanjay Jeyakumar, Co-Founder of Abnormal AI, discusses why AI agents are challenging traditional security models. And how do I hack thee? Let me count the ways.

Story

Just Now

Why AI Agents Are Challenging Traditional Security Models with Sanjay Jeyakumar from Abnormal AI

Sanjay Jeyakumar, Co-Founder and CTO at Abnormal AI, joins Dave Bittner on the CyberWire Daily podcast for a sponsored Industry Voices conversation about why AI agents are challenging traditional security models. Using a recent OpenAI and Hugging Face incident as an example, Sanjay explains how agents can combine legitimate permissions, stale credentials, and over-privileged identities in unexpected ways. He discusses why securing agentic AI requires organizations to look beyond known threats and focus on whether identities are behaving as expected.

Caveat

Just Now

Alleged ShinyHunter member detained in Jordan.

The UK looks to establish itself as a global AI leader.

Daily Briefing

4 hours ago

Russian APT continues improving its MATCHBOIL downloader.

OT security coalition asks CISA to set mandatory safety requirements. Ransomware recovery firm CEO indicted for secretly paying attackers.

AI Security Brief

15 hours ago

Is trust holding back automated remediation?

The “AI trust paradox” in cybersecurity goes like this: organizations invest in AI automation, then hold back from fully implementing it. Yet as attackers continue to use AI to move faster, defenders need to leverage AI to fix things as fast as it finds them. In this episode, Tyler Shields, Chief Marketing Officer at Allstacks and a cybersecurity industry analyst with more than 25 years advising security vendors and teams, shares the steps needed to build trust in autonomous remediation without sacrificing human judgment and control.

Caveat

15 hours ago

Expanding the digital evidence trail.

This week, Dave and Ben look at two court cases where one involves a judge ruling that law enforcement's use of Flock cameras was unconstitutional and another where the AI chat logs were used as evidence to levy felony charges. Additionally, Dave sits down with ⁠Meredith Burkart⁠, Senior Director of Government Affairs and Public Policy at ⁠Halcyon⁠, to discuss how ransomware attacks could be considered as acts of terrorism.

CyberWire Daily

Oct 7, 2026

The door into SonicWall.

SonicWall issues emergency patches. European wind and solar sites are exposed online. South Korea warns of AI-powered attacks on banks. Maria Varmazis unpacks the EU’s new Space Threat Response Architecture. Google patches dozens of high-severity Chrome flaws. Researchers uncover an SSRF vulnerability in Harbor. AI reshapes vulnerability management. Wikimedia says OpenAI agents repeatedly broke its rules. Pwn2Own kicks off in Ireland. Our guest is Derek Holt, CEO of Digital.ai, who says AI has killed the cybersecurity response window. VIN there, done that.

Business

Oct 7, 2026

Armadin has raised $255.5 million in a Series B round led by Andreessen Horowitz and Accel

Quantum eMotion has agreed to acquire British Columbia-based cybersecurity provider Plurilock.

Daily Briefing

Oct 7, 2026

SonicWall patches a maximum-severity vulnerability.

Dutch researchers flag vulnerable wind and solar sites. Business news: Armadin raises $255 million in Series B funding.

Microsoft Threat Intelligence

Oct 7, 2026

Inside this year’s Microsoft Digital Defense Report

In this episode, host Elliot Volkman is joined by Chloe Messdaghi and Karen Frost for a behind-the-scenes look at Microsoft’s annual Digital Defense Report (MDDR). They explore how AI is reshaping the cybersecurity landscape by increasing the speed, scale, and automation of attacks while also giving defenders new tools to detect and respond to threats. The conversation covers AI agents, phishing and identity-based attacks, vulnerability management, security resilience, and the growing need for organizations to connect signals across their environments. Chloe and Karen also share practical priorities for CISOs and discuss what the rise of increasingly autonomous AI agents could mean for the future of cyber defense.

Marketing

Oct 7, 2026

Maria & Gianna Dish: CyberMarketingCon 2026, Chompers the Sloth, and a Secret Discount Code

Gianna and Maria are together on the pod to talk about CyberMarketingCon 2026, happening November 15th through 18th in Austin, Texas. The theme this year is Create Your Own Adventure. They talk about sessions, tracks, career stories from past conferences, the buddy program, the WhatsApp group, and why Maria is starting a petition to rename customer marketing to community building. She will have a clipboard. There is also a sloth named Chompers. And Maria has a co-founder discount code for anyone who DMs her.

CyberWire Daily

Oct 6, 2026

The pay system needs a patch.

Military cyber personnel face pay cuts. A critical RCE threatens banking and government authentication systems. Dell patches a critical update flaw. A missed patch costs Accenture an FBI contract. Hackers hijack a fashion retailer’s push notifications. Insurers brace for rogue AI claims. Hackers breach a supertanker’s propulsion system. Denmark suffers a massive population data breach. And Japan extradites a suspected Qilin ransomware operator. Our guest is Steve Ryan, Founder and CEO of Trinity Cyber, on surviving first contact from a Frontier AI-enabled cyber threat. There’s no honor among Gentlemen.

Load More