CyberWire Daily
The ransomware toll road.
· Summarized
Key takeaways
- Journalists and influencers are increasingly targeted by sophisticated cyber threats, including surveillance, deepfakes, and malware, making cybersecurity hygiene essential.
- Basic cybersecurity practices, understanding of espionage tactics, and being aware of false assumptions about anonymity (like VPN and browser safety) are crucial for safeguarding media professionals.
- Significant cybersecurity policy updates include sanctions on ransomware-related VPN services, suspension of certain defense certification assessments, and critical vulnerability patches from major vendors like Google and SAP.
- The cost of deploying AI in the enterprise is rising sharply, prompting organizations to restrict or better manage usage to prevent runaway expenses.
- Continuous vigilance, updated knowledge, and proactive measures are needed to adapt to the rapidly evolving threat landscape and technological environment.
Summary
Cyber Threats to Journalists and Influencers
Bogdan Botezatu from Bitdefender discussed the increasing cyber threats faced by journalists and influencers. He emphasized that traditional skills are no longer enough in a landscape where adversaries, including governments and cybercriminal groups, use sophisticated and readily available tools such as spyware kits. Journalists are targeted because they often handle sensitive information and reveal corruption, making them prime targets for surveillance, harassment, and discrediting efforts. The conversation highlighted that many journalists lack current cybersecurity knowledge, often assuming their tools like browsers and VPNs provide full anonymity, which is not the case. Bogdan stressed the importance of basic cybersecurity hygiene, awareness of state-sponsored surveillance, and the dangers posed by deepfakes. He also noted that traveling journalists are at risk of device searches and confiscations, even domestically, and that understanding the evolving technological landscape is crucial for their safety.
Major Cybersecurity and Regulatory Updates
Various updates covered include the U.S. Treasury’s sanctions on the VPN provider First VPN, linked to supporting ransomware operations, and the Pentagon’s suspension of the CMMC Phase II assessments to ease burdens on contractors. Google fixed critical vulnerabilities in its Cloud Dialogflow CX platform, while Estée Lauder disclosed a data breach exposing personal and health information of customers. Reports also detailed cyber attacks targeting U.S. military personnel via mobile networks, likely linked to Iran, and Australia's concerns over Big Tech’s failure to adequately prevent child abuse and online extortion. SAP issued patches for serious bugs affecting multiple products, and Cisco IOS security flaws were formally added to the actively exploited vulnerabilities list. Additionally, the U.S. federal government is prioritizing AI investments amid rising costs, with agencies urged to submit proposals for AI projects before the funding deadline.
The Rising Cost of AI in Enterprises
There’s a growing concern among companies about the high costs associated with AI usage. Leaked communications show organizations like Atlassian, Amazon, and others are limiting or halting access due to ballooning expenses, with monthly bills soaring from about $5 million to over $15 million in some cases. Organizations are shifting towards less costly AI models or implementing spending caps, revealing that the promise of AI reducing labor costs might be offset by unexpectedly high operating costs. This shift underscores the transition from perception to practical management of AI investments, emphasizing that every prompt now has a tangible cost, and token economics is becoming as critical as the technology itself.
Sponsors
- Black Hat USA · This episode is supported by Black Hat USA. If you follow the research, you know a lot of it breaks on Black Hat stages, with hundreds of peer-reviewed briefings, over a hundred hands-on trainings, and the largest business hall in Black Hat’s history. Six days to learn the skills you'll need tomorrow. August 1st to the 6th. Use code CyberWire for $200 off your briefings pass at blackhat.com. We'll see you in Vegas.
- Vanta · Vanta is the number one agentic trust platform, trusted by more than 16,000 companies like RAM, Cursor, and Harvey to help stay audit-ready. It helps automate security and compliance, find issues, and cut vendor assessment time by up to 50%. Perfect for fast-growing startups or global enterprises. Get started at vanta.com/cyber.
- Google Chrome · Google Chrome’s Gemini feature helps you with tasks online, like restoring a vintage motorcycle or breaking down complex articles. It's designed to make anything online make sense.
- Home Depot · Offering up to 15% off select shelving and totes storage to organize every room—from garages to attics. Visit HomeDepot.com for more.
- State Farm · Listening to this podcast instead of doom-scrolling is a smart move. Getting help from a State Farm agent when you bundle home and auto can save you money. Prices vary by state; coverage options are selected by the customer.
- 404 Media · Leaked internal communications reveal companies like Atlassian, Adobe, Amazon, and City are reining in employee AI usage due to ballooning costs. Usage-based billing is making AI expensive, changing how companies approach AI-heavy workflows—AI running up the tab, not asking for vacation.
Show notes
Treasury sanctions a VPN provider tied to ransomware. The Pentagon hits pause on CMMC audits. Critical flaws surface in Google Cloud’s Dialogflow CX. Estée Lauder discloses a data breach. Mobile networks become a battlefield for tracking U.S. personnel. Australia calls out Big Tech over child safety. SAP patches critical bugs. CISA flags an actively exploited Cisco flaw. And the federal government accelerates AI investments. Our guest is Bogdan Botezatu, Senior Director, Threat Research and Reporting at Bitdefender, talking about Cyberthreats to Journalists and Influencers. AI costs savings come at a price.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Bogdan Botezatu, Senior Director, Threat Research and Reporting at Bitdefender, is talking about "Targeting the Messengers: Cyberthreats to Journalists and Influencers," their awareness campaign designed to address the escalating digital and reputational risks faced by media professionals in hostile environments.
Selected Reading
US sanctions VPN, malware providers for enabling ransomware attacks (Bleeping Computer)
Pentagon announces 'immediate suspension' of CMMC Phase II mandates (Breaking Defense)
Google Cloud Dialogflow CX vulnerability allowed AI agent hijacking | brief (SC Media)
Estée Lauder Companies Reports Data Breach Exposing Health Records and SSNs (Beyond Machines)
US military targeted in Iran war phone-tracking campaign (Financial Times)
Australia finds serious gaps in Big Tech response to online child sexual abuse (Reuters)
SAP warns of critical flaws in NetWeaver and Commerce Cloud (Bleeping Computer)
CISA adds Cisco IOS flaw to known exploited vulnerabilities catalog | brief (SC Media)
Federal AI Projects Get Priority in TMF Funding Dash (GovInfo Security)
Companies Are Throttling Employees’ AI Use Because It’s Too Expensive (404 Media)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account