HR1 and the future of U.S. tech security

Jun 25, 2026

HR1 and the future of U.S. tech security

We hope you enjoy this encore of Caveat. This week on Caveat, Dave and Ben welcome back N2K’s own ⁠⁠⁠⁠⁠⁠Ethan Cook⁠⁠⁠⁠⁠⁠ for our latest policy deep dive segment. As our lead analyst, Ethan shares his knowledge of law, privacy, and surveillance on the latest policy developments shaping the cybersecurity and legal landscape.

Caveat

HR1 and the future of U.S. tech security

Jun 25, 2026

HR1 and the future of U.S. tech security

We hope you enjoy this encore of Caveat. This week on Caveat, Dave and Ben welcome back N2K’s own ⁠⁠⁠⁠⁠⁠Ethan Cook⁠⁠⁠⁠⁠⁠ for our latest policy deep dive segment. As our lead analyst, Ethan shares his knowledge of law, privacy, and surveillance on the latest policy developments shaping the cybersecurity and legal landscape.

Caveat

Cybersecurity News

Daily Briefing

3 hours ago

Tata Electronics and Bajaj Auto continue recovery from cyberattacks.

Threat actors target critical infrastructure across Southeast Asia. CISA warns of actively exploited PTC vulnerability. Polish police disrupt SIM-swapping gang.

CyberWire Daily

23 hours ago

Gone with the command.

International operation disrupts Amadey and StealC malware infrastructure. Australian spy chief warns nation-state hackers are prepositioning for future sabotage. Stealthy new backdoor may be tied to initial access broker. Researchers uncover "Cordyceps" supply chain flaw. Iran-linked MuddyWater disguises espionage as ransomware attack. Cal Water says Handala's hacking claims were overstated. Report says Russia continued using Cellebrite phone-cracking tools after the ban. Chinese cybersecurity firm unveils AI tools to rival Anthropic's Mythos. DraftKings hacker is sentenced to eighteen months. Our guest is Erich Kron, CISO Advisor at KnowBe4, sharing the details of the CAPY program. And more Than Meets the Eye-P.

Caveat

23 hours ago

Court allows for Ohio to implement restrictions on social media use.

Five Eyes warns about the frontier AI model.

Daily Briefing

Jun 25, 2026

International operation disrupts Amadey and StealC malware infrastructure.

Cal Water says Handala's hacking claims were overstated. Stealthy new backdoor may be tied to initial access broker. DraftKings hacker is sentenced to eighteen months.

Hacking Humans

Jun 25, 2026

Fraud goes door-to-door.

This week, hosts of N2K CyberWire ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ alongside ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow-up on an editorial examining whether AI could signal the beginning of the end for traditional social engineering, as attackers increasingly target AI systems instead of people. Dave's got the story on an FBI warning that crypto scammers are using cash couriers to collect money from victims and bypass banking safeguards. Maria's got the story on AI-powered impersonators posing as members of the rock band Sons of Legion to scam fans through fake relationships and fraudulent requests for money. Joe's got two stories: one on HSBC Australia facing a proposed $246 million penalty over alleged scam protection failures, and another on two Michigan gold scam busts that prevented victims from losing hundreds of thousands of dollars. Our catch of the day is a reflection on a past interaction where the author initially held out hope someone might reappear, but ultimately accepts they’re gone and shares the story in hindsight, including their own strongly emotional reaction at the time.

CyberWire Daily

Jun 24, 2026

Klue me in on the breach.

LastPass says Klue breach affected customer information, but passwords remain secure. Attackers begin exploiting Cisco Unified CM vulnerability. CISA flags actively exploited Ubiquiti and Lantronix flaws, urges rapid patching. DifyTap flaws could expose private AI conversations across tenants. Researchers find AI plugin registry let unofficial tools masquerade as trusted software. xpl0itrs launches leak site, signaling shift toward full-service cyber extortion. Ransomware attack hits Indian auto giant Bajaj Auto. U.S. presses Meta to submit AI models for national security reviews. Alleged criminal marketplace administrator extradited to the US. U.S. expands sanctions against Cambodian scam network tied to cyber fraud operations. On today’s Industry Voices segment, we are joined by Mike Masciulli, Managing Director, Migration Products and Services at Semperis, discussing RC4 and AD Migration: The Break Scenarios Hiding in Your Source Domain. And a lesson in access control.

Story

Jun 24, 2026

The Break Scenarios Hiding in Your Source Domain with Mike Masciulli from Semperis

Mike Masciulli, Managing Director of Migration Products and Services at Semperis, joins Dave Bittner on the CyberWire Daily podcast for a sponsored Industry Voices. Mike discusses why Active Directory migrations are uniquely vulnerable to Microsoft's RC4 deprecation and upcoming July 2026 enforcement deadline. He explains how migration projects can encounter silent failures when accounts move across security boundaries, why traditional migration tools cannot transfer AES keys between domains, and what organizations should do now to identify hidden break scenarios before they surface during a critical cutover.

Business

Jun 24, 2026

Accenture acquires Dragos, runZero, and NetRise for more than $4 billion.

Dream has raised $260 million in funding led by Bicycle Capital and Group 11.

Daily Briefing

Jun 24, 2026

LastPass says Klue breach affected customer information, but passwords remain secure.

Attackers begin exploiting Cisco Unified CM vulnerability. Alleged criminal marketplace administrator extradited to the US. Business news: Accenture acquires Dragos, runZero, and NetRise for more than $4 billion.

Marketing

Jun 24, 2026

How to Run a Content Syndication Program That Works with Steve Piper of CyberEdge Group

Content syndication has earned a mixed reputation among cybersecurity marketers. Too often, programs generate large volumes of leads but little measurable pipeline. Sales teams question lead quality, marketing teams question whether the right buyers are being reached, and both sides wonder whether the investment was worth it. Steve Piper has been in cybersecurity marketing for over 30 years and has heard every version of "we tried content syndication and it didn't work." His response is always the same: you need to set clear expectations on what content syndication programs do, and make sure to On this episode, Steve sat down with Gianna to talk about what content syndication is, what a good program looks like, and what to get into your contract before signing to make sure that you have success!

CyberWire Daily

Jun 23, 2026

All eyes on AI.

Five Eyes warns AI could supercharge cyberattacks within months. Tata Electronics confirms breach as stolen data allegedly includes Apple and Tesla documents. Researchers publish new analysis of FortiBleed. Gizmodo breach exposes readers to ClickFix malware campaign. BootROM exploit can bypass Apple's SecureROM. Scattered Spider members plead guilty in the UK. Attackers exploit Gravity SMTP flaw to harvest secrets From WordPress sites. Executive Order accelerates federal shift to post-quantum cryptography. Dave Bittner sits down with Ellen Boehm, the Senior Vice President of IoT Strategy & Operations at Keyfactor, to discuss NIST's progress in its PQC efforts. Keeping tabs on the tab-keepers.

Daily Briefing

Jun 23, 2026

Five Eyes allies warn of dangers posed by frontier AI models.

Researchers publish a new analysis of FortiBleed. BootROM exploit can bypass Apple's SecureROM. Scattered Spider members plead guilty in the UK.

Load More