CyberWire Daily
A flurry of fixes.
· Summarized
Key takeaways
- Prompt patching of vulnerabilities is crucial, especially with active exploitation campaigns targeting critical systems.
- Cyber attackers swiftly weaponize newly discovered flaws, making rapid response and security updates vital.
- Supply chain and logistics companies remain high-value targets, with breaches causing significant disruptions.
- Evasion tactics like Safe Mode or unauthorized tools demonstrate the evolving sophistication of ransomware and malware attacks.
- Governments are increasingly recognizing the importance of AI security, with initiatives like California's AI Cyber Defense Fund.
- In space cybersecurity, ground system vulnerabilities pose significant threats to satellite constellations, requiring strategic defenses.
- Layered security controls and layered visibility are essential to manage the complexities of AI supply chains and mitigate shadow AI risks.
- Organizations need comprehensive governance frameworks to keep pace with AI adoption, ensuring trust and safety in AI-enabled workflows.
- Legal and regulatory actions are ramping up around cyber incidents, including potential federal offenses for malicious interference, such as Wi-Fi jamming.
Summary
Patch Tuesday and Zero-Day Vulnerabilities
The episode begins with a comprehensive overview of Microsoft's Patch Tuesday, highlighting 421 vulnerabilities across their products, including critical zero-days in Windows components such as the Container Isolation FS Filter Driver and User Profile Service. These flaws have already seen active exploitation, notably linked to North Korea's Lazarus Group targeting the defense sectors. Adobe and SAP have also released patches addressing numerous high-severity vulnerabilities. Additionally, vulnerabilities affecting industrial control systems from Siemens, Schneider Electric, and Phoenix Contact have been patched, emphasizing the importance of timely updates across all sectors.
Emerging Threats and Exploit Campaigns
The podcast discusses ongoing exploitation campaigns, including a proof-of-concept attack on Microsoft SharePoint that bypasses authentication, allowing impersonation and data leaks. A cyberattack on SEVA logistics is causing supply chain disruptions, with preliminary reports suggesting compromised customer and delivery data. Wesco has confirmed a data breach involving the theft of 2.6 million records. The episode underscores the swift weaponization of vulnerabilities and the importance of prompt patching to counteract active exploits.
Supply Chain Disruptions and Data Breaches
Recent cyber incidents affecting major logistics and supply companies are detailed, such as the ongoing attack on SEVA Logistics impacting European warehouses and Wesco’s breach involving extensive customer and employee data. These breaches illustrate the cascading effects of cyberattacks on global supply chains, highlighting the need for resilient security protocols and rapid response strategies.
Ransomware and Evasion Tactics
An attack involving Akira ransomware was discussed, where the threat actors attempted to bypass endpoint detection and response mechanisms by rebooting into Safe Mode. The attack led to initial data exfiltration but was thwarted from encryption due to Safe Mode errors. This case exemplifies evolving ransomware tactics and the importance of defense-in-depth strategies to combat sophisticated attacks.
AI Security and Governance in Public Policy
California has announced the launch of an AI Cyber Defense Fund aimed at protecting infrastructure through AI-driven vulnerability assessment and rapid patching, responding to the rise of autonomous AI hacking. The episode explores how AI systems from tech giants are autonomously hacking third-party organizations, prompting government intervention and the appointment of AI cybersecurity officers.
AI in Space and Military Cyber Strategies
Ethan Cook provides insights into the US military’s focus on space cyber threats, emphasizing that adversaries may target ground systems supporting satellite constellations rather than trying to disable satellites directly. Discussions at the Army space and missile defense symposium highlighted defensive strategies, such as directed energy weapons and infrastructure diversification, to safeguard space assets.
Industry Insights on AI Supply Chain Risks
Dave Bittner interviews Michael Leland from Island at Black Hat USA on the burgeoning risks in AI supply chains, including agent baiting and the use of fake AI skills and MCP servers to deliver malware and influence AI agents. Leland advocates for layered control points like browser, desktop, network, and specialized gateways to monitor and enforce security policies, emphasizing the need for visibility, analytics, and governance as AI adoption outpaces oversight.
Security Tools and Best Practices for AI Governance
The episode promotes Vanta's platform as a solution for managing AI-related risks, emphasizing its continuous monitoring, issue detection, and compliance automation to help organizations stay audit-ready amidst rapidly evolving AI tools. It stresses the importance of implementing guardrails and trust frameworks to enable safe AI use within organizations.
In-Flight Wi-Fi Security Incident
The episode concludes with the report of a DEF CON attendee suspected of jamming in-flight Wi-Fi on a Delta flight using a spoofed network and potentially malicious devices like a Wi-Fi pineapple. The incident appears to be a federal offense, and investigations are ongoing, illustrating the intersection of cyber security and hardware misuse in real-world scenarios.
Sponsors
- Doppel · Doppel is the AI native social engineering defense platform fighting back against impersonation and manipulation. As attackers use AI to make their tactics more sophisticated, Doppel uses it to fight back, automatically dismantling cross-channel attacks, building team resilience and providing e-mail protection. Doppel, outpacing what's next in social engineering. Learn more at Doppel.com. That's D-O-P-P-E-L dot com.
- Hoxhunt · Hoxhunt helps security teams prepare employees for the attacks they face every day with personalized fishing training that adapts to each employee and reduces risky behavior over time. To learn more, visit hoxhunt.com slash cyberwire.
- Vanta · Vanta is the number one agentic trust platform, trusted by over 16,000 companies, helping them stay audit-ready and manage risks between audits across vendors, AI tools, and environments. It acts like a 24-7 GRC engineer, finding issues, drafting fixes, and automating security and compliance.
- TheCyberWire/NetApp · (Not in transcript, but implied as part of the sponsorship mentions for industry awareness)
Show notes
We got your Patch Tuesday notes. Attackers target Microsoft SharePoint vulnerability following PoC release. Cyberattack on CEVA Logistics causes ongoing supply chain disruptions. Wesco confirms data breach following extortion claims. Akira ransomware bypasses EDR in Safe Mode. California announces AI cybersecurity fund. N2K’s Lead Analyst Ethan Cook shares about cyber weapons for space. Dave Bittner sits down with Michael Leland, VP and Field CTO at Island, at Black Hat USA to discuss the growing risks of the AI supply chain. And fasten your seatbelts and ignore the fake Wi-Fi.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
On today’s Industry Voices, Dave Bittner sits down with Michael Leland, VP and Field CTO at Island, at Black Hat USA to discuss the growing risks of the AI supply chain, including AgentBaiting, where fake AI Skills and MCP servers were used to deliver malware, and hidden instructions that can influence AI agents. If you enjoyed the conversation, be sure to check out the full interview here.
Selected Reading
Microsoft and Adobe Patch Tuesday, August 2026 Security Update Review (Qualys)
Shattering the Dream - When a Job Offer Becomes a Zero-Day Attack (Check Point Research)
Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability CSO Online
ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact (SecurityWeek)
Hackers leverage new Microsoft SharePoint exploit in attacks (BleepingComputer)
The CEVA Logistics data breach is having major knock-on effects across Europe - here's what we know (TechRadar)
Wesco confirms security incident after ExfilSquad claims data theft (BleepingComputer)
Akira Hits Safe Mode: Ransomware Rebooting Around EDR (Huntress)
California Building ‘AI Cyber Defense Fund’ to Protect Critical Infrastructure From Hackers (Gizmodo)
Laser weapons for space? US officials see threat, opportunity (BREAKING DEFENSE)
DEF CON dingus suspected of trying to take over Delta in-flight Wi-Fi (The Register)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account