Cybersecurity News

Daily Briefing

3 hours ago

Citrix urges immediate patching of two newly disclosed vulnerabilities.

Federal agencies warn of an active cyber campaign targeting Siemens PLCs. Latvian road traffic agency data breach affects two-thirds of the country's population.

Caveat

14 hours ago

When companies can hack back.

This week, Dave and Ben discuss how the Trump administration has dramatically changed the cybersecurity landscape after signing a new memorandum, which allows private companies to hack malicious threat actors. Additionally, the two look at the concept of "AI constitutions," and what these policies entail.

Hacking Humans

14 hours ago

Objection! That's a scam.

This week, while Dave is out, hosts ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. Maria and Joe are joined by friend of the show ⁠⁠Michele Kellerman⁠⁠. We start with some follow-up from Michele on efforts in the Philippines to crack down on online fraud centers and the ongoing fight against scam operations. Joe explores WhatsApp's new on-device scam detection feature and whether it can actually spot suspicious conversations without compromising privacy. Michele covers an elaborate jury-duty scam that kept a Florida woman on the phone for more than 10 hours, using fake law enforcement, cryptocurrency payments, and stolen personal information to steal more than $25,000. Maria looks at a new wave of back-to-school scams using fake websites, phishing attempts, and AI-generated content to target parents and students. Our Catch of the Day comes from Ami, who discovered that even paying by check isn't foolproof after a mailed check was intercepted, altered, and cashed by someone else.

Story

23 hours ago

AI Is Calling Your Security Bluff with Brian Vecci from Varonis

Brian Vecci, Field CTO at Varonis, joins Dave Bittner on the CyberWire Daily podcast for a sponsored Industry Voices recorded at Black Hat USA 2026. He discusses how AI assistants and agents are magnifying existing data security risks, what recent research reveals about emerging AI-enabled threats, and why organizations need to rethink how they protect enterprise data as both employees and attackers gain access to more powerful AI tools.

Business

23 hours ago

Fortinet has acquired San Francisco-based AI security company Virtue AI.

Dynatrace has agreed to acquire San Francisco-based AI observability platform Arize for $915 million. Cribl has acquired technology assets from Radiant Security's AI SOC product.

CyberWire Daily

Aug 19, 2026

Hackers hiding in plain sight.

Medusa’s reach grows. Cl0p expands its victim list. The DOJ charges 17 alleged Iranian hackers. CISA sounds the alarm on four exploited vulnerabilities. TWINLOOT hides in plain sight inside Microsoft 365. Maria Varmazis shares the latest from the space-cyber realm as Ukraine strikes Russia’s satellite nerve center. The FDA considers guardrails for AI medical devices. Expired credit cards get an unexpected second life. A disgruntled contractor heads to prison. Dave Bittner sits down with Brian Vecci, Field CTO at Varonis, at Black Hat USA to discuss how AI is calling your security bluff. Highway hijinks meet high-tech hardware.

Daily Briefing

Aug 19, 2026

Medusa ransomware affiliates have breached hundreds of critical infrastructure entities.

US accuses 17 Iranians of hacking for Iran's IRGC. Business news: Fortinet acquires AI security firm Virtue AI.

Marketing

Aug 19, 2026

Behind the Cyber Creator: An AMA with Infosec Pat (Patrick Gorman)

Patrick Gorman started making YouTube videos during COVID to study for a certification with friends. He now has over 100,000 subscribers and runs a pentesting firm called ISP Security. This is a replay of our Behind the Cyber Creator AMA series. Patrick and Gianna talk about how he built his audience, why having followers doesn’t automatically mean having clients, and what he learned the hard way about being a public figure in cybersecurity.

CyberWire Daily

Aug 18, 2026

Fake it till you exfiltrate it.

A fake consultancy fronts an alleged Chinese spy campaign. Meta heads to court over claims it hooked young users. Researchers crack the mystery behind the French EncroChat hack. CISA warns ransomware gangs are exploiting a Windows flaw. Meet C2Looper, a new Rust-based backdoor. A critical WordPress plugin bug threatens hundreds of thousands of sites. MessiahGPT brings generative AI to cybercrime. A lender discloses a breach affecting 1.2 million people. A Ukrainian developer stands trial in Switzerland over alleged ransomware ties. Our guest is Ev Kontsevoy, CEO at Teleport, discussing how AI agents have nondeterministic behavior. The psychology of the endless scroll.

Story

Aug 18, 2026

Zero Trust Wasn't Built for AI Agents with Ev Kontsevoy from Teleport

Ev Kontsevoy, CEO of Teleport, joins Dave Bittner on the CyberWire Daily podcast for a sponsored Industry Voices recorded at Black Hat USA 2026. He discusses why traditional Zero Trust principles need to evolve for autonomous AI agents, how agents can operate within their permissions while still behaving in unintended ways, and why organizations need security controls that protect the business without creating friction that drives users toward workarounds.

Daily Briefing

Aug 18, 2026

US states sue Meta over claims that it deliberately addicts young users.

Researchers reverse-engineer French malware used to hack EncroChat. An unprecedented number of Apple users received spyware alerts last week.

SpyCast

Aug 18, 2026

What It Takes to Run the CIA's Southeast Asia Department

You might find Meredith Cavan playing music in an Irish pub. But long before her first album dropped, she clocked more than 20 years at the CIA. One of her jobs there was Southeast Asia Department chief, where she oversaw covert action, intelligence operations, and analysis across 30 countries. We're talking about the years 2021 to 2023, when terrorism was taking a back seat to strategic competition, and her priority was trying to thwart China's influence and infrastructure in its most consequential playground.

Load More