Cybersecurity News

Daily Briefing

3 hours ago

OpenAI models escaped containment to hack Hugging Face.

SolarWinds patches fifteen critical flaws. Business news: Neo emerges from stealth with $100 million.

Marketing

14 hours ago

Building a Security Company for a Market That Changes Every Four Months with Shahar Bahat of Pluto Security

Shahar Bahat is the CEO and co-founder of Pluto Security. With every employee now building things using tools like Cursor, Claude Code, Lovable, and n8n, security teams have no visibility into any of those layers. That is the problem Pluto is solving. She sat down with Gianna to talk about what she saw at RSAC 2026, the shift from shadow AI to mandated AI, and how to build a security product when the tools your customers use change every four months.

CyberWire Daily

21 hours ago

The defense against the AI arts.

Trump's latest AI leader resigns. The Army burns through its AI tokens. Scammers impersonate IC3 personnel.HollowGraph malware uses a compromised Microsoft 365 calendar for C2. Qilin ransomware targets a critical Palo Alto Networks flaw. A North Korean campaign targets Web3 and cryptocurrency professionals through fake job recruitment scams. Zimbra patches multiple critical bugs. Shadow AI creates regulatory headaches. Hackers wipe Romania’s land registry database. Our guest is Errol Weiss, Chief Security Officer at Health-ISAC, setting the record straight on ransomware trends. Patching the automotive security system you didn’t know you had.

Daily Briefing

Jul 21, 2026

The Trump administration's AI czar resigns.

Extortion group wipes Romania's land registry database. FBI warns of impersonators targeting scam victims.

SpyCast

Jul 21, 2026

The Triumphs and Failures of France's Foreign Intel Service

The DGSE, or Directorate General for External Security, is France's foreign intelligence service. It's found inside the Ministry of Defense but reports to the president. It was established under that name in 1982, learning the hard way, through a string of high-profile blunders, how to conduct espionage. The service is responsible for all sources of intelligence and has benefited from a popular TV show about its inner workings. Drawing on documents never before available, Damien Van Puyvelde, the author of the book The DGSE: A Concise History of France's Foreign Intelligence Service, traces the agency's history from its early failures to its sweeping reforms and modern-day successes.

Data Security Decoded

Jul 21, 2026

Securing Research Infrastructure and Managing Shadow AI with Kevin Mortimer

Host Caleb Tolin sits down with Kevin Mortimer to discuss securing higher education infrastructure and managing the shift toward autonomous AI deployment. Kevin details his experience supporting research environments, expanding multi factor authentication controls, and defending valuable academic data against supply chain compromises. The conversation examines the balance between enabling citizen developers through vibe coding and enforcing rigid data governance baselines.

CyberWire Daily

Jul 20, 2026

Behind the friendly face.

Hugging Face reports an autonomous AI-powered breach. Ernst & Young discloses a client data breach. Attackers are actively exploiting a critical ServiceNow flaw. Ransomware gangs sharpen their tactics against law firms. Capital One open-sources an AI security tool. Text salting fools AI email filters. Hidden gambling apps slip into Apple’s App Store. And federal agents arrest a Florida man accused of spreading malware through video games. Monday business briefing. Tim Starks from CyberScoop discusses election integrity. Fake feathers lead to faulty findings.

Daily Briefing

Jul 20, 2026

Hugging Face discloses an autonomous agentic breach.

Abbott Laboratories investigates another alleged breach. FBI arrests a Florida man accused of spreading malware through video games.

Signals and Space

Jul 19, 2026

Reimagining European space sovereignty.

This week on T-Minus: Space-Cyber Briefing: we look at the recent evolution of the European space program. Whereas the region had previously relied on the US to support its space goals, both the UK and the EU have begun to make significant changes to reduce this reliance.

T-Minus

Jul 19, 2026

Europe's push for space sovereignty.

As space becomes an increasingly critical part of modern infrastructure, governments are reevaluating decades of policy to ensure reliable, secure, and independent access to the systems they are increasingly relying on. In this week’s episode, host Maria Varmazis sits down with producer Ethan Cook⁠⁠⁠ to explore Europe's evolving space strategy and how it is increasingly prioritizing space sovereignty. During the conversation, they examine the EU's proposed Space Act and how it aims to improve the region's space security, sustainability, and reliability for years to come.

Research Saturday

Jul 18, 2026

When trusted sites turn.

Lauren Fievisohn⁠, Ph.D, Senior Threat Researcher from ⁠Silent Push⁠, is sharing their work on "Meet DriveSurge: A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites." Silent Push researchers have identified a newly named threat actor, DriveSurge, which has compromised thousands of legitimate websites and uses ClickFix and fake browser update lures to distribute malware at scale through a pay-per-install operation. The group leverages a traffic distribution system called zTDS to silently redirect visitors from trusted websites to malicious payloads, while employing sophisticated infrastructure, obfuscation, and fingerprinting techniques to evade detection. The report also details how DriveSurge targets both Windows and macOS users and provides defenders with eight infrastructure fingerprints to help identify and disrupt the campaign.

CyberWire Daily

Jul 17, 2026

A nightmare on Windows street.

Nightmare Eclipse drops another Windows zero-day. The Gentlemen take the ransomware crown. CISA orders emergency Fortinet patching. Canada’s surveillance bill faces U.S. scrutiny. Meta’s Oversight Board flags AI censorship bias. Commerce tops the cyber target list. An active espionage campaign hits Bangladesh’s military. The Hewlett Foundation commits $100 million to emerging tech security. And U.S. prosecutors dismantle an alleged cyber-enabled money laundering network. Our guest is Nick Stohlman, Vice President of CJIS Strategy at Imprivata, talking about CJIS readiness and the identity security challenges facing public safety agencies. Leaked source code reveals an AI mixtape.

Load More