Cybersecurity News

Daily Briefing

2 hours ago

CISA warns of cyberattacks targeting PLCs in the water sector.

Russian espionage group tied to hotel WiFi hijacking campaign. INC ransomware gang claims credit for Australian healthcare provider hack.

Signals and Space

Aug 2, 2026

The weakest link in space.

This week on T-Minus: Space-Cyber Briefing: we look at the space supply chain and how the sector's manufacturing revolution is changing not only how spacecraft are built but also how they must be secured.

Special Editions

Aug 2, 2026

Black Hat preview: "Vulnerability Research in the Agentic Age."

In this special edition, guest ⁠Yan Shoshitaishvili⁠, Associate Professor, ⁠University of Arizona⁠, joins host ⁠⁠Dave Bittner⁠⁠ to share a preview of his ⁠Black Hat USA 2026⁠ keynote "⁠Vulnerability Research in the Agentic Age⁠." Join Yan and Dave to hear insights on the evolution of vulnerability research, the impact of AI and LLMs on cybersecurity, and the future of human expertise in the field.

T-Minus

Aug 1, 2026

The hidden risks in space supply chains.

As the space ecosystem continues to expand, the sector has become increasingly filled with new suppliers, manufacturers, and operators. However, while this development has led to the introduction of new technologies, it has also greatly expanded space's cyberattack surface. In this week's episode, host Maria Varmazis sits down with Jen Sovada, General Manager of Public Sector at Claroty. During the conversation, the two explore how vulnerabilities within the space supply chain can impact mission assurance. They discuss how the expanding space supply chain ecosystem has expanded the attack surface.

Research Saturday

Aug 1, 2026

The driver's seat to ransomware.

This week, we are joined by ⁠Marcus Hutchins⁠, Principal Threat Researcher at ⁠Expel⁠, sharing their work on "Not very gentlemanly: Analyzing a zero-day exploit used by The Gentlemen ransomware to disable targets’ EDRs." Researchers examine how the Gentlemen ransomware group used a previously unknown zero-day vulnerability in a legacy Windows driver to disable endpoint detection and response (EDR) tools before deploying ransomware. The report details the group's advanced bring-your-own-vulnerable-driver (BYOVD) techniques, which bypass multiple Windows security protections to gain kernel-level access and terminate protected security software. It also outlines defensive measures organizations can take, including enabling Windows Defender Application Control (WDAC), virtualization-based security (VBS), and vulnerable driver blocklists to reduce the risk of similar attacks.

Week that Was

Aug 1, 2026

Claude escaped the testing sandbox three times.

Minnesota cyberattack scale is more extensive than anticipated. OpenAI's agent breached more than Hugging Face. Senator Wyden looks to eliminate legacy VPNs from federal networks. Thailand's Ministry of Finance targeted by autonomous AI agent.

CyberWire Daily

Jul 31, 2026

Claude outside the lines.

Anthropic says Claude escaped the sandbox three times, while a judge questions the Pentagon’s blacklist. The EU launches an AI enforcement team, the FTC targets a telehealth firm’s tracking pixels, and a WordPress backdoor is stopped just in time. CareCloud discloses a major data breach, a stealthy cryptominer hides in plain sight, AiTM phishing surges against law firms, and Finland severs one more digital link to Russia. Our guest is Yan Shoshitaishvili, Associate Professor, Arizona State University, previewing his Black Hat 2026 keynote "Vulnerability Research in the Agentic Age." AI scammers may deserve a promotion.

Daily Briefing

Jul 31, 2026

Claude escaped the testing sandbox three times.

EU launches new team to monitor AI compliance.

CyberWire Daily

Jul 30, 2026

Building a great firewall around AI.

China embraces open AI models, then worries it’s become a national security risk. The cyberattack on Minnesota water systems proves larger than first reported. CISA updates its SBOM guidance. AI supercharges dangling DNS attacks. Researchers uncover a self-propagating Copilot worm. A critical Rails flaw demands urgent patching. Mac users are lured into installing malware through fake Claude guides. Amazon links a string of NPM compromises to North Korea. And Russia charges Telegram founder Pavel Durov with aiding terrorism. Ben Yelin joins us with a border search case that’s breaking new ground. Don’t bite the North Korean hand that feeds you.

Caveat

Jul 30, 2026

OpenAI model was hacking targets for days before being discovered.

FTC launches probe into Shein.

Daily Briefing

Jul 30, 2026

China lists open AI models as national security concern.

Cyberattack on Minnesota water systems more extensive than original estimates.

Caveat

Jul 30, 2026

AI’s latest security wake-up call.

This week, Dave and Ben discuss two major stories. The first story assess the recent incident where a rogue OpenAI agent escaped its environment and successfully targeted Hugging Face. Additionally, the two also look at an incident where a man was targeted after he reportedly wiped his phone using GrapheneOS. Afterwards, Dave sits down with ⁠Asha Palmer⁠, SVP of Compliance Solutions at ⁠Skillsoft⁠, to look at the lack of any federal AI law in the US.

Load More