Episodes
-
Reboot, rinse, repeat.
Organizations using internet-facing BeyondTrust appliances should patch them and investigate for compromise, because attackers linked to Armory Castle demonstrated persistence that survived reboots and configuration resets.
-
A little too OpenAI.
Organizations responding to the PAN-OS and Ivanti incidents should do more than install patches: they should review administrative access, investigate configuration and log anomalies, rebuild compromised appliances where necessary, and rotate exposed credentials and certificates.
-
Patching up the pieces.
Microsoft's October 2026 Patch Tuesday contained a record 1,411 fixes, including 70 critical flaws, 677 privilege-escalation fixes, and an actively exploited Windows Shell vulnerability that bypasses Mark-of-the-Web protections.
-
Taking the cloud out of the sky.
Ukrainian strikes on three Yandex data centers disrupted cloud, payments, transportation, food delivery, and other digital services across Russia, while damage to the centers’ AI supercomputers remains unconfirmed.
-
CyberWire Daily at 10: Examining a decade of public-private partnerships. [Special Edition]
Public-private cybersecurity partnerships exist because government has authorities and intelligence that industry often lacks, while private companies operate much of the infrastructure and possess visibility the government does not.
-
Ordering a new space policy. [T-Minus: Space-Cyber Briefing]
An executive order directs executive-branch agencies and can carry the force of law, but it is not legislation, can be challenged, and can usually be revoked by a subsequent president.
-
Contents may be malicious. [Research Saturday]
Phantom Raven is a JavaScript information stealer distributed through malicious, typosquatted npm packages; its operator uses compromised systems to support claims submitted to bug-bounty programs.
-
The Flax Typhoon gets a cold front.
Integrity Technology Group tools called Microscan and Phishub were seized by an international coalition because U.S. officials say the Chinese company supports state-backed operations, including the long-running Flax Typhoon campaign.
-
You can’t secure what you can’t see.
A federal OT security baseline should cover inventories, segmentation, remote access, configuration management, incident preparation, and verified recovery; inventories alone cannot address unmanaged passwords, obsolete firmware, or patch backlogs.
-
The door into SonicWall.
Not summarized yet
-
The pay system needs a patch.
Not summarized yet
-
A new AI task force takes shape.
Not summarized yet
-
Earth’s expanding attack surface. [T-Minus: Space-Cyber Briefing]
Not summarized yet
-
Play to win, pay to lose. [Research Saturday]
Not summarized yet
-
A rough week for safety.
Not summarized yet
-
The Pentagon’s roll call.
Not summarized yet
-
The guardrails go to court.
Not summarized yet
-
Astra, la vista, baby.
Not summarized yet
-
The AI hotline.
Not summarized yet
-
The Insider You Built with author Camille Stewart Gloster. [Special Edition]
Not summarized yet
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account