The wearable wiretap.

Oct 22, 2026

The wearable wiretap.

This week, Dave and Ben look at a story that discusses the potential conflict between the next-generation of wearable technology and current state wiretapping laws. The two also look at a recent legal victory for AI coders. Additionally, Dave meets with ⁠Danny Manimbo⁠, the ISO and AI Practice Leader at ⁠Schellman⁠, to discuss why companies waiting for AI regulatory clarity are already falling behind.

Caveat

The wearable wiretap.

Oct 22, 2026

The wearable wiretap.

This week, Dave and Ben look at a story that discusses the potential conflict between the next-generation of wearable technology and current state wiretapping laws. The two also look at a recent legal victory for AI coders. Additionally, Dave meets with ⁠Danny Manimbo⁠, the ISO and AI Practice Leader at ⁠Schellman⁠, to discuss why companies waiting for AI regulatory clarity are already falling behind.

Caveat

Cybersecurity News

Daily Briefing

4 hours ago

Mirai botnet operators target PHP2Shell.

HPE patches eight maximum-severity flaws in ArubaOS. Quest Diagnostics discloses a breach.

CyberWire Daily

23 hours ago

The early bird gets the exploit.

Amazon spots PHP exploits before disclosure. GitLab patches a critical flaw. Meta faces a $25 billion penalty. Autonomous AI agents power new cyberattacks. Hackers breach a Japanese cloud provider. CyberCartel unleashes AI against Latin American banks. Tor exit nodes are hijacked. OpenAI coding agents disable security monitoring. Interpol dismantles thousands of cybercrime networks across Africa. Our guest is Danny Manimbo, ISO and AI Practice Leader at Schellman, explaining why companies waiting for AI regulatory clarity may already be behind. Spotify hits the skip button on AI slop.

Caveat

Oct 22, 2026

Anthropic pitches AI safety bill.

Critical vulnerabilities take sites offline across the globe.

Daily Briefing

Oct 22, 2026

GitLab patches a maximum-severity vulnerability.

Threat actors compromise LiteLLM. Amazon detected PHP2Shell exploitation days before disclosure.

AI Security Brief

Oct 22, 2026

How do you plan for AI system failure?

Your AI initiative gets the green light. But now all the parameters and guardrails you built into your plan need to be executed. Who owns AI once it goes live? Who’s watching as AI use expands? And if the AI workflow fails, can anyone still run the process it replaced? In this episode, Maria Haight, Global Information Security Officer at Joyson Safety Systems, joins Dustin Childs to unpack the operational realities of AI security. She advocates for preserving human know-how, assigning business ownership, and backing up critical data to keep the business running should an AI system fail or dare we say it, go rogue.

Hacking Humans

Oct 22, 2026

To octopi, or not to octopi.

This week, hosts of N2K CyberWire ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ alongside ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow up, including a chicken update and a little Greek vocabulary. Dave explores new tools from FINRA designed to help investors research the markets, assess their vulnerability to financial fraud, and practice recognizing common scam tactics before real money is at stake. Joe looks at Apate, an Australian startup using AI agents to pose as potential scam victims, waste fraudsters’ time, and gather intelligence that can help researchers and security teams better understand and disrupt scams. Maria covers new approaches to cybersecurity awareness and personal cyber readiness, exploring how we can move beyond traditional awareness campaigns and help people better protect themselves online. Our Catch of the Day comes from Anthony, who received a convincing-looking scam email about his trademark application that uses publicly available information and a fake mandatory verification appointment to pressure him into calling a fraudulent number.

CyberWire Daily

Oct 21, 2026

No time to PHP around.

Critical PHP flaws threaten millions of websites. Weak certificates from an Indian authority spark a global security scramble. Investigators probe a U.S. consulting executive’s alleged ties to ShinyHunters. SafePay ransomware hits at least 600 critical infrastructure organizations. Researchers find troubling security biases in Chinese AI-generated code. A $10 million initiative bolsters cybersecurity for small U.S. utilities. An American pleads guilty to stealing from thousands of servicemembers and veterans. Leo Scott, Managing Director of DataTribe, is talking about their upcoming Cyber Innovation Conference and the 9th annual DataTribe Challenge. Two pallets of GPUs never make it to baggage claim.

Business

Oct 21, 2026

Proofpoint to acquire Varonis for $6.3 billion.

Reach Security has raised $50 million in a Series B round.

Daily Briefing

Oct 21, 2026

Critical PHP vulnerabilities put millions of sites at risk.

Indian certificate authority exposes private keys. FBI suspects a second ransomware negotiator in ShinyHunters investigation. Business news: Proofpoint to acquire Varonis for $6.3 billion.

Marketing

Oct 21, 2026

The Startup Signal: What DataTribe’s Challenge Reveals About Cyber’s Next Wave with Leo Scott

Every year, DataTribe reviews hundreds of early-stage cybersecurity startup submissions for the DataTribe Challenge. Leo Scott, Managing Director and Chief Innovation Officer, sees the market shift before most people do. He joins Gianna ahead of the Cyber Innovation Conference October 26th and 27th in Washington, DC, to talk through this year’s five finalists. The submissions are full of AI. Leo finds the companies one level down more interesting, solving what AI is changing about how attacks happen, how humans get tricked, and how agents get out of control. That is where the 2026 class points. If you want to see them pitch live, the conference is October 26th and 27th in Washington, DC, at ⁠cyberinnovationconference.com⁠.

CyberWire Daily

Oct 20, 2026

Cloudy with a chance of outages.

A Google Cloud outage disrupts UK banks. DHS bans DeepSeek. Shape-shifting ransomware targets Macs. Bank of America hires an army to patch AI-discovered flaws. Canada looks to bypass the U.S. with a transatlantic cable. A contractor breach exposes California student data. Cybersecurity hiring slumps, but AI skills are booming. Researchers expose the Silent Ransom Group’s playbook. A suspected Qilin ransomware operator takes a vacation straight into custody. Our guest is Roman Arutyunov, Co-Founder of Xage Security, discussing the next era of Zero Trust. A hotel phishing scheme gets a chilly reception.

Story

Oct 20, 2026

The next era of Zero Trust: Actions, not just access with Roman Arutyunov from Xage Security

Roman Arutyunov, Co-Founder and Chief Product Officer at Xage Security, joins Dave Bittner on the CyberWire Daily podcast for a sponsored Industry Voices. Roman discusses why Zero Trust must evolve beyond controlling access to governing what identities, workloads, and AI agents can actually do once connected. He explores how real-time authorization, least-privilege enforcement, and just-in-time permissions can help organizations secure increasingly autonomous environments.

Load More