N2K | CyberWire

#CWDaily: A Paidwork breach affects over 23 million users. A recently patched SharePoint #vulnerability is under active exploitation. #Oracle patches over 1,400 vulnerabilities. Apps turn Smart TVs into residential proxies. The #FCC considers expanding direct to #satellite communications. German and U.S. authorities dismantle a major #phishing-as-a-service (PhaaS) platform. Our guest is Jimmy McNary, Deputy Federal CTO at Semperis, discussing comprehensive #identity security assessments for #Microsoft GCC. https://lnkd.in/gP5wCDyg

In our latest CyberWire Daily conversation, Jimmy McNary from Semperis joins Dave Bittner to explain why identity has become the centerpiece of modern cyber defense, pointing to CISA's Cyber Storm 9 exercise as evidence that attackers are increasingly targeting identity systems instead of traditional network boundaries. The conversation explores: - What this shift means for defenders - Why continuous identity security assessments are becoming essential - How organizations operating in Microsoft GCC High environments can strengthen their security posture. Listen to the full conversation: https://lnkd.in/ezCyVz5A #Cybersecurity #FederalCybersecurity #IdentitySecurity #GCCHigh #N2K

Space sovereignty is becoming more than a geopolitical discussion. It's increasingly a cybersecurity and infrastructure conversation. If you haven't listened yet, Maria Varmazis and Ethan Cook take a closer look at Europe's proposed Space Act and the broader shift toward securing the systems modern society depends on. Listen to the conversation: https://lnkd.in/eF2k4Ziw #SpaceCyber #SpaceSecurity #SpacePolicy #SpaceInfrastructure #N2K N2K | T-Minus Space-Cyber

#CWDaily: Qilin #ransomware targets a critical Palo Alto Networks flaw. A North Korean campaign targets #Web3 and cryptocurrency professionals through fake job recruitment scams. #Zimbra patches multiple critical bugs. Shadow #AI creates regulatory headaches. #Hackers wipe Romania’s land registry database. Our guest is Errol Weiss, Chief Security Officer at Health-ISAC, setting the record straight on #ransomware trends. https://lnkd.in/g2F_pMx2

"You want to be an AI creator, not an AI consumer." In the latest episode of Data Security Decoded, Kevin Mortimer explores what it takes to embrace AI without losing control of your data, infrastructure, or governance. From vibe coding and shadow AI to securing research environments, the conversation examines how organizations can encourage innovation while building the guardrails needed to manage risk. Check out the latest episode from Rubrik to hear the full conversation: https://lnkd.in/eB8iZTXZ. #Cybersecurity #AI #ShadowAI #DataSecurityDecoded #N2K

#CWDaily: #Attackers are actively exploiting a critical #ServiceNow flaw. #Ransomware gangs sharpen their tactics against law firms. Capital One open-sources an #AI security tool. Text salting fools AI email filters. Hidden #gambling apps slip into #Apple’s App Store. And federal agents arrest a Florida man accused of spreading #malware through video games. Monday #business briefing. Tim Starks from CyberScoop discusses #election integrity. https://lnkd.in/g4YEmkzB

As governments rely more heavily on space-based infrastructure, they're also rethinking how those systems are regulated, secured, and protected. In this week's episode of N2K | T-Minus Space-Cyber, Maria Varmazis and producer Ethan Cook explore Europe's proposed Space Act and what the region's push for greater space sovereignty could mean for the future of security, resilience, and critical infrastructure. Listen now: https://lnkd.in/eF2k4Ziw #SpaceCyber #Cybersecurity #SpacePolicy #CriticalInfrastructure #TMinus #N2K

Join us for an all new #ResearchSaturday, where Lauren Fievisohn⁠, Ph.D, Senior Threat Researcher from ⁠Silent Push⁠, shares their work on "Meet DriveSurge: A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks in Thousands of Compromised Sites." Silent Push researchers have identified a newly named #threatactor, DriveSurge, which has compromised thousands of legitimate #websites and uses #ClickFix and fake browser update lures to distribute #malware at scale through a pay-per-install operation. Check it out here! https://lnkd.in/gx-wKVdt

#CWDaily: #Meta’s Oversight Board flags #AI censorship bias. Commerce tops the #cyber target list. An active espionage campaign hits Bangladesh’s military. The Hewlett Foundation commits $100 million to emerging #tech security. And U.S. prosecutors dismantle an alleged cyber-enabled money laundering network. Our guest is Nick S., Vice President of CJIS Strategy at Imprivata, talking about #CJIS readiness and the #identity security challenges facing public #safety agencies. https://lnkd.in/gwYwKgBM

#CWdaily: ClickLock Stealer targets #macOS. Splunk and #Zoom patch critical flaws. Spirals ransomware strikes in under 24 hours. New #Windows evasion techniques emerge. #LabubaRAT poses as #NVIDIA software. #23andMe settles over its 2023 breach. Plus, a look back at one of the most audacious #data center heists ever pulled off. Our guest is Ryan Kalember, Chief Strategy Officer at Proofpoint, discussing why agentic #AI is creating a new insider threat. https://lnkd.in/gxznuDMA