Cybersecurity News

Threat Vector

3 hours ago

When Security Friction Becomes the Backdoor

Security that slows people down is security that gets bypassed. ⁠Birat Niraula⁠ leads security for Google Enterprise Network, where he oversees protection across on-premise, network infrastructure, enterprise, and cloud environments. In this episode of Threat Vector, host ⁠David Moulton⁠ explores a critical truth that most security leaders miss: the difference between friction that protects and friction that creates risk.

Hacking Humans

4 hours ago

Love was the hook.

This week, hosts ⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ (also host of the ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠T-Minus⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Space Daily show),⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. Dave sits down with ⁠Simon Horswell⁠, a Senior Fraud Specialist at ⁠Entrust⁠ discussing evolving romance scams for Valentine's Day. We have some follow up on chickens and a listener write-in, with a quick note on the backyard chicken trend and a closer look at a Bank of America fraud text that looked like a phish. Maria’s story follows an alleged “Dubai Crown Prince” scam that drained nearly €3 million from a Romanian businesswoman using fake banks and humanitarian appeals. Joe’s story tells of a handyman-turned-boyfriend who ran multiple dating scams and stole from his partner and her family, now featured on Amazon Prime. Dave’s story features Simon Horswell from Entrust explaining why romance scams hit $4.5 billion in 2024 and how scammers use psychological tricks, AI tools, and celebrity impersonation to manipulate victims. We have two catches of the day this week, one a physical letter from the DOJ and the other is an email from Microsoft.

Caveat

4 hours ago

Another week, another AI story.

This week, Ben has a story on the legal implications of Moltbook. Dave's got examples of AI providing headaches for the legal system.

CyberWire Daily

13 hours ago

When Windows breaks and chips crack.

Patch Tuesday. Preliminary findings from the European Commission come down on TikTok. Switzerland’s military cancels its contract with Palantir. Social engineering leads to payroll fraud. Google hands over extensive personal data on a British student activist. Researchers unearth a global espionage operation called “The Shadow Campaigns.” Notepad’s newest features could lead to remote code execution. Our guest is Hazel Cerra, Resident Agent in Charge of the Atlantic City Office for the United States Secret Service. Ring says it’s all about dogs, but critics hear the whistle.

Business

13 hours ago

Vega raises $120 million in a Series B round led by existing investor Accel

Sophos acquires cybersecurity assurance provider Arco Cyber. Zscaler has acquired browser security company SquareX.

Daily Briefing

17 hours ago

Patch Tuesday notes: Microsoft addresses six actively exploited zero-days.

LummaStealer activity surges alongside CastleLoader. North Korean hackers use social engineering and malware to target the crypto sector.

Microsoft Threat Intelligence

Feb 11, 2026

Unpacking the Latest Threats Targeting the Financial Services Industry

In this episode of the Microsoft Threat Intelligence Podcast, host⁠ ⁠⁠⁠Sherrod DeGrippo⁠ is joined by Microsoft security researchers Megan Stalling and Anna Seitz to examine how financially motivated threat actors are using familiar, low-complexity techniques to drive real-world impact across the financial services sector. They examine Storm-0727, a financially motivated threat actor targeting cryptocurrency, financial services, and government entities, highlighting how simple techniques like financial-themed lures, macro-enabled documents, and credential theft allow attackers to quietly establish and maintain access. The conversation then expands to broader financial-services threat trends, including business email compromise, ransomware with data extortion, phishing-as-a-service, and why social engineering and unpatched vulnerabilities continue to succeed even in mature security environments.

Marketing

Feb 11, 2026

From Slack Groups to Super-Users: Community-Led Growth in Cybersecurity

Community gets talked about a lot in cybersecurity; what’s less clear is what it’s supposed to actually look like. In this conversation, Avital Knoller, Head of Ecosystem, Community, and CXO Relationships at Orchid Security, walks through how she thinks about community when it’s tied directly to product and growth. She breaks down the difference between practitioner-led product communities and broader communities of interest, and why that distinction matters so much in security. Drawing on her experience building communities across nonprofit, startup, and cybersecurity environments, Avital shares how investing in community can create super-users, surface real product feedback, and support go-to-market efforts without feeling salesy or forced. Tune in to hear about practical realities, platform choices, launch timing, engagement expectations, and how to think about ROI while keeping the focus on trust, peer learning, and long-term value.

CyberWire Daily

Feb 10, 2026

A spyware swiss army knife.

ZeroDayRAT delivers full mobile compromise on Android and iOS. The UK warns infrastructure operators to act now as severe cyber threats mount. Russia moves to block Telegram. The FTC draws a line on data sales to foreign adversaries. Researchers unpack DeadVax, a stealthy new malware campaign, while an old-school Linux botnet resurfaces. BeyondTrust fixes a critical flaw. And in AI, are we moving too fast? One mild training prompt may be enough to knock down safety guardrails. Our guest is Omer Akgul, Researcher at RSA Conference, discussing his work on "The Case for LLM Consistency Metrics in Cybersecurity (and Beyond)." A pair of penned pentesters provoke a pricey payout.

Daily Briefing

Feb 10, 2026

New commodity mobile spyware targets iOS and Android devices.

Threat actors are exploiting SolarWinds Web Help Desk flaws. US sentences fugitive foreign national to twenty years for role in crypto scams.

Inside the Media Minds

Feb 10, 2026

Inside the Media Mind of Kelly Jackson Higgins: Dark Reading

In the latest episode of ⁠#IMM⁠, Christine and Madison speak with Kelly Jackson Higgins, Editor-in-Chief of Dark Reading and Vice President of Cybersecurity Editorial at Informa TechTarget.

SpyCast

Feb 10, 2026

Hezbollah’s Long Game in Latin America

A 1994 bombing of a Jewish community center in Argentina opened the world’s eyes to Hezbollah’s presence in Latin America. But the Iranian proxy, a US-designated terrorist group, has operated in the region since the 1980s. This started in the Tri-Border Area of Argentina, Brazil, and Paraguay, earning the nickname "the United Nations of crime." The Drug Enforcement Administration (DEA) has said Hezbollah’s revenues in Central and South America fund its External Security Organization, which plans their terrorist plots overseas. Wes Tabor, a former DEA agent, knows all about it. He was part of a landmark case that exposed their ties to drug cartels and financial institutions. Wes takes us into the present, describing how the US’s removal of Nicolás Maduro in Venezuela impacts Hezbollah’s presence in the Western Hemisphere.

Load More