CyberWire Daily
The defense against the AI arts.
· Summarized
Key takeaways
- AI risks are spreading rapidly and security programs are struggling to keep pace, making platforms like Vanta essential for automating compliance and trust management.
- Leadership instability in AI governance at the federal level underscores the need for clearer standards and evaluation methods, especially for Chinese AI models.
- AI adoption in the military and private sectors is high but needs to be balanced with resource management and reliability checks, as seen in the Army's token exhaustion.
- Cybercriminals are leveraging AI and social engineering—such as deepfake videos and fake job scams—to deceive victims and infiltrate organizations.
- Malware like HollowGraph demonstrates sophisticated use of legitimate services like Microsoft 365 for covert communications, highlighting evolving malware platforms.
- Patches and updates remain critical, especially for vulnerabilities in widely-used platforms like Zimbra and Palo Alto Networks, as attackers continue to exploit unpatched systems.
- Shadow AI introduces significant legal and regulatory risks for organizations, highlighting the importance of oversight, governance, and employee training.
- The automotive industry faces security challenges from aftermarket systems with widespread vulnerabilities, underlining the need for better security standards and user awareness.
- Despite some reports of declining ransomware victim payments, attack frequencies are rising, with the healthcare sector still being a prime target due to critical dependencies and resource constraints.
Summary
The Rapid Growth of AI Risks and Security Challenges
The episode echoes concerns about how the proliferation of AI tools and integrations is creating new vulnerabilities across the business landscape. Most existing security programs are ill-equipped to handle AI's fast-paced growth, leading companies to seek platforms like Vanta that automate compliance and security tasks to keep pace and maintain trust.
AI Leadership Instability and Developmental Challenges in Government
The departure of Dr. Cassie from the Center for AI Standards and Innovation highlights ongoing instability in AI leadership within government agencies. The episode discusses the broader context of how AI standards, testing, and assessment are evolving amidst shifting strategies, with some federal agencies and industry leaders calling for independent AI standards bodies and better evaluation methods.
Military and Industry AI Utilization Limits
The U.S. Army’s AI utilization pool has been exhausted, prompting restrictions after initially encouraging widespread use. This reflects broader trends of organizations experiencing high AI adoption rates that sometimes lead to reliability issues. Similar pullbacks have been observed in private sector companies like Meta and Uber, emphasizing the need for deliberate deployment.
Emerging Threats: Scams, Malware, and Vulnerabilities
The FBI warns of scammers impersonating IC3 personnel through AI-generated videos and spoofed websites, targeting victims for additional data or payments. Meanwhile, malware like HollowGraph uses compromised Microsoft 365 calendars for command and control. Vulnerabilities in Palo Alto Networks' Global Protect and other critical updates, such as Zimbra patches, demonstrate ongoing exploitation risks. North Korean cyber campaigns target Web3 professionals with fake job scams, and Romania’s land registry database was wiped by hackers, illustrating the persistent risk landscape.
The Regulatory and Legal Risks of Shadow AI and Automotive Security Flaws
Unauthorized AI use—shadow AI—poses increasing legal and regulatory risks, exemplified by a bank incident that triggered SEC reporting requirements. Additionally, vulnerabilities in aftermarket automotive security devices, like Bluetooth-based car locks, pose widespread risks to millions of vehicles, emphasizing the importance of firmware updates and security awareness.
Ransomware Trends and Healthcare Sector Insights
Errol Weiss from Health-ISAC provides insights into ransomware trends, revealing that attacks continue to escalate despite some reports of decline. The healthcare sector remains a significant target, partly due to its importance and the sector’s ongoing resource and talent shortages. Weiss discusses how increased awareness and investments are making healthcare organizations more resilient, but challenges remain in workforce recruitment and retention.
Sponsors
- Vanta · Vanta is the number one agentic trust platform, trusted by more than 16,000 companies to help them stay audit-ready and manage risks across vendors, AI tools, and environments. It works like a 24/7 GRC engineer, automating security and compliance processes and cutting vendor assessment time by up to 50%. Start today at vanta.com/cyber.
Show notes
Trump's latest AI leader resigns. The Army burns through its AI tokens. Scammers impersonate IC3 personnel.HollowGraph malware uses a compromised Microsoft 365 calendar for C2. Qilin ransomware targets a critical Palo Alto Networks flaw. A North Korean campaign targets Web3 and cryptocurrency professionals through fake job recruitment scams. Zimbra patches multiple critical bugs. Shadow AI creates regulatory headaches. Hackers wipe Romania’s land registry database. Our guest is Errol Weiss, Chief Security Officer at Health-ISAC, setting the record straight on ransomware trends. Patching the automotive security system you didn’t know you had.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we have Errol Weiss, Chief Security Officer at Health-ISAC, joining us to discuss ransomware trends in the healthcare industry. We also discuss findings from the Health-ISAC 2026 CISO Benchmarking Report and Health-ISAC's 2nd Quarter Heartbeat Report, which examine the current threat landscape facing the health sector.
Selected Reading
Trump's latest AI czar has already resigned (TechCrunch)
The Army Is Burning Through Its AI Tokens (WIRED)
Fake FBI Agents Use IC3 Complaints to Target Scam Victims (Hackread)
New HollowGraph Malware Abuses Microsoft 365 Calendar for C&C Communication (SecurityWeek)
Critical Palo Alto VPN bug now exploited by Qilin ransomware gang (Bleeping Computer)
Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros (Infosecurity Magazine)
Zimbra Update Patches Critical Vulnerabilities (SecurityWeek)
Shadow AI Is Rewriting Cyber Disclosure Risk (BankInfoSecurity)
Risky Bulletin: Hacker wipes Romania's entire land registry database (Risky.Biz)
A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and Paralysis. Patch It Now (WIRED)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account