Episodes
-
Clear your calendar, it’s Patch Tuesday.
Microsoft’s September Patch Tuesday set a new record with 966 fixes, including multiple zero-day vulnerabilities actively exploited in the wild.
-
Worming its way through WeChat.
AI is dramatically accelerating the discovery and exploitation of software vulnerabilities, enabling rapid development of complex cyberattacks.
-
This call may be monitored. [Special Edition]
Chinese state-owned telecom companies like China Mobile, China Unicom, and China Telecom remain embedded in U.S. networks despite regulatory restrictions.
-
When hackers control the clock. [T-Minus: Space-Cyber Briefing]
Time is a highly trusted but vulnerable input in modern systems, making its security crucial.
-
RMM-ber this ransomware. [Research Saturday]
The most critical intelligence in cybersecurity is recognizing attack patterns and behaviors across incidents to identify commonalities.
-
What the Flock?
The threat of quantum computing to current encryption standards necessitates proactive migration to quantum-resistant cryptography, with global efforts aiming for significant progress by 2035.
-
Who’s watching the AI watchers?
AI model evaluation and oversight remain shrouded in secrecy, raising concerns about accountability.
-
Drive-by data theft.
AI is transforming cybersecurity, offering powerful defensive tools like Astra but also enabling new attack vectors such as slop squatting and AI-enhanced malware.
-
Nightmare on Windows 11.
AI-driven security tools are becoming more sophisticated and require rigorous governance, including visibility, guardrails, and monitoring, to prevent misuse or unintended harm.
-
Let’s kill the kill switch.
The proposed AI Kill Switch Act faces strong debate over potential vulnerabilities and the risk of undermining system resilience, emphasizing the need for thorough security standards.
-
CyberWire Daily at 10: A decade of emerging threat actors and APTs. [Special Edition]
Public attribution of cyber threats has dramatically increased over the last decade, with many governments and organizations now openly naming threat groups.
-
Who let the AI hack? [Research Saturday]
Attackers are evolving from simple resource theft to developing autonomous offensive tools using stolen AI compute.
-
The blacklist boomerang.
The rapid expansion of AI in business environments significantly elevates cybersecurity risks, demanding more agile and proactive security strategies.
-
Meta gets a Meta-sized bill.
AI proliferation presents increasing risks to security, privacy, and organizational resilience.
-
The feds flip the script.
Comprehensive asset inventory and proactive vulnerability management are essential for securing modern infrastructure.
-
CISA is running on empty.
Cybersecurity workforce reductions at CISA threaten the agency’s ability to respond effectively to evolving threats, underscoring the need for strategic staffing and funding.
-
The odds were classified.
AI is rapidly transforming cybersecurity, both as a tool for defense and a vector for sophisticated attacks.
-
Building a secure space internet. [T-Minus: Space-Cyber Briefing]
Securing space infrastructure is as critical as launching spacecraft, especially with the increasing reliance on orbital assets.
-
A RAT in the spreadsheet. [Research Saturday]
Shell Creep is an advanced malware campaign exploiting Google Sheets as a stealthy command-and-control channel, posing detection challenges.
-
The guest nobody invited.
Cyber vulnerabilities are rapidly evolving, with high-impact flaws in widely used platforms like TrueConf, Node.js, and Apple devices requiring urgent patches.
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account