The CyberWire Daily Podcast 7.22.25
Ep 2354 | 7.22.25

The SharePoint siege goes strategic.

Show Notes

Confusion persists over the Microsoft Sharepoint zero-days. CrushFTP confirms a zero-day under active exploitation. The UK government proposes a public sector ban on ransomware payments. A new ransomware group is using an AI chatbot to handle victim negotiations. Australia’s financial regulator accuses a wealth management firm of failing to manage cybersecurity risks. Researchers uncover a WordPress attack that abuses Google Tag Manager. Arizona election officials question CISA following a state portal cyberattack. Hungarian police arrest a man accused of launching DDoS attacks on independent media outlets. On our Threat Vector segment guest host ⁠Michael Sikorski⁠ ⁠and Michael Daniel⁠ of the Cyber Threat Alliance (CTA) explore cybersecurity collaboration. A Spyware kingpin wants back in.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, ⁠Daily Briefing⁠, and you’ll never miss a beat. And be sure to follow CyberWire Daily on ⁠LinkedIn⁠.

Threat Vector Segment

On our Threat Vector segment, host David Moulton turns the mic over to guest host ⁠⁠Michael Sikorski⁠⁠ and his guest ⁠⁠Michael Daniel⁠⁠ of the Cyber Threat Alliance (CTA) for a deep dive into cybersecurity collaboration. You can hear Michael and Michael's full discussion on Threat Vector ⁠⁠⁠⁠here⁠⁠⁠⁠ and catch new episodes every Thursday on your favorite podcast app.

Selected Reading

⁠ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets⁠ (SecurityWeek)

⁠Microsoft: Windows Server KB5062557 causes cluster, VM issues⁠ (Bleeping Computer) 

⁠File transfer company CrushFTP warns of zero-day exploit seen in the wild⁠ (The Record)

⁠UK to lead crackdown on cyber criminals with ransomware measures⁠ (GOV.UK)

⁠Ransomware Group Uses AI Chatbot to Intensify Pressure on Victims⁠ (Infosecurity Magazine)

⁠Australian Regulator Alleges Financial Firm Exposed Clients to Unacceptable Cyber Risks⁠ (Infosecurity Magazine)

⁠WordPress spam campaign abuses Google Tag Manager scripts⁠ (SC Media)

⁠After website hack, Arizona election officials unload on Trump’s CISA⁠ (CyberScoop)

⁠Hungarian police arrest suspect in cyberattacks on independent media⁠ (The Record)

⁠Serial spyware founder Scott Zuckerman wants the FTC to unban him from the surveillance industry⁠ (TechCrunch)

Audience Survey

Complete our ⁠annual audience survey⁠ before August 31.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our ⁠media kit⁠. Contact us at ⁠cyberwire@n2k.com⁠ to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.