CyberWire Daily
A nightmare on Windows street.
· Summarized
Key takeaways
- Zero-day exploits like Legacy Hive demonstrate the ongoing sophistication of threats targeting Windows systems.
- The ransomware economy is evolving, with aggressive groups employing AI and accessible tools to expand their reach.
- Public safety agencies face significant hurdles in achieving CJIS compliance, including funding, training, and process improvements.
- International privacy laws and surveillance legislation can have cross-border security implications, necessitating careful policy considerations.
- AI’s influence is pervasive across industries, and its biases and vulnerabilities pose risks to fair and secure applications.
- Leaked source code from AI platforms can reveal unethical or legally questionable data scraping practices, leading to increased scrutiny and legal action.
Summary
Main Cybersecurity Threats and Incidents
This section discusses recent cybersecurity threats and events, including the release of a zero-day exploit called Legacy Hive targeting Windows systems, which could allow privilege escalation. The ransomware landscape has shifted, with the group 'The Gentlemen' surpassing Qilin in activity, employing AI-assisted malware and ransomware as a service to lower barriers for new operators. Additionally, an active espionage campaign against Bangladesh's military, attributed to the threat actor 'Doforn,' involves spear-phishing and malware stages. The episode also notes the leak of source code from Suno, an AI music platform, exposing potential copyright violations from scraping copyrighted content for training their models.
Cybersecurity Policy and Legal Issues
This segment covers efforts to improve public safety agencies' cybersecurity postures, focusing on CJIS compliance and the challenges faced, such as cost, training, and the importance of collaboration. It highlights the FBI's CJIS standards and a new proposal from the Department of Homeland Security to provide a framework and funding opportunities. Additionally, Canadian surveillance legislation is scrutinized by U.S. officials due to privacy and national security concerns. The episode also touches on recent legal actions like the dismantling of a money laundering network and allegations of piracy and copyright infringement by the Suno AI platform.
AI and Industry Impacts
The discussion explores the influence of AI on various sectors, emphasizing how cybercriminals are exploiting AI for fraud, attacks, and automation. Meta’s oversight board reports that AI models tend to be less critical of oppressive governments, raising concerns about bias and transparency. Akamai's report states that AI-powered shopping tools are now the most targeted, with increased DDoS and API attacks aimed at retail. The episode also examines the leaked source code from Suno, revealing how AI training datasets are scraped from copyrighted material, fueling ongoing legal battles over copyright infringement and AI training practices.
Sponsors
- Accenture · When your advertising operations fall out of sync, everything else follows. Spotify and Accenture are working together to reinvent the rhythm of ad sales, using automation, analytics and smarter workflows to simplify campaign delivery and access better data across the business. The result? Less time spent on operations, more time connecting brands with the moments and fandoms that matter most. Learn more at Accenture.com slash Spotify.
- Black Hat USA · This episode is supported by Black Hat USA. If you follow the research, you know a lot of it breaks on Black Hat stages. Hundreds of peer-reviewed briefings, more than 100 hands-on trainings, and the largest business hall in Black Hat's history. Six days to learn the skills you'll need tomorrow, August 1st to the 6th. Prices increased July 17th, so book before then. Use code CyberWire for $200 off your briefing pass at blackhat.com. We'll see you in Vegas.
- Google Chrome · Google Chrome now offers Gemini, which can help you with practically anything on the web—from restoring a vintage motorcycle to breaking down long articles.
- Indeed Sponsored Jobs · When you need to build up your team to handle the growing chaos at work, use Indeed Sponsored Jobs. It helps reach the right candidates faster, so you can spend less time searching and more time interviewing. Listeners of this show will get a $75 sponsor job credit at nd.com slash podcast.
- Vanta · The Vanta agent works like a 24-7 GRC engineer in the background, finding issues, drafting fixes, and helping you stay audit-ready. It can cut vendor assessment time by up to 50%. Suitable for startups and global enterprises alike, Vanta automates security and compliance to help you build trust.
- Mint Mobile · Ryan Reynolds here for Mint Mobile. Every plan $15 a month, even unlimited, with no hidden fees—happy ending, zero tears. Try MintMobile.com-switch.
- Princeton University (mentioned indirectly as part of sponsorship messages about research opportunities, not explicitly in the transcript)
Show notes
Nightmare Eclipse drops another Windows zero-day. The Gentlemen take the ransomware crown. CISA orders emergency Fortinet patching. Canada’s surveillance bill faces U.S. scrutiny. Meta’s Oversight Board flags AI censorship bias. Commerce tops the cyber target list. An active espionage campaign hits Bangladesh’s military. The Hewlett Foundation commits $100 million to emerging tech security. And U.S. prosecutors dismantle an alleged cyber-enabled money laundering network. Our guest is Nick Stohlman, Vice President of CJIS Strategy at Imprivata, talking about CJIS readiness and the identity security challenges facing public safety agencies. Leaked source code reveals an AI mixtape.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Nick Stohlman, Vice President of CJIS Strategy at Imprivata, talking about CJIS, Criminal Justice Information Services, readiness and the identity security challenges facing public safety agencies.
Selected Reading
New Windows LegacyHive zero-day gives hackers admin privileges (Bleeping Computer)
The Gentlemen Overtakes Qilin as Most Prolific Ransomware Threat (Infosecurity Magazine)
CISA urges immediate action on actively exploited Fortinet flaws (Bleeping Computer)
Senator calls on Rubio, Blanche to push back against Canadian surveillance legislation (The Record)
Meta Oversight Board finds top AI models less likely to criticize repressive regimes (Reuters)
Commerce faces rising AI bot activity, escalating DDoS attacks, and new fraud tactics (Akamai)
From Biography to Backdoor: Tracking a DoNot (APT-C-35) Intrusion Targeting Bangladesh Military Personnel (Cyderes)
Hewlett Foundation Announces New $100 Million Emerging Technology and Security Initiative (Hewlett Foundation)
US charges two over laundering $43 million from investment fraud (Bleeping Computer)
Hack Reveals Suno AI Music Generator Scraped YouTube, Deezer, and Genius (404 Media)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account