CyberWire Daily

Meta’s AI models join the sandbox escape club. China’s telecom footprint in the U.S. may be larger than expected. The White House keeps its AI safety playbook under wraps. AI coding tools introduce new GitHub risks. ENISA expands its CVE role. A critical Paperclip flaw enables code execution. Crypto wallet fears fuel phishing attacks. Researchers uncover a backdoor in Chinese-made routers. The Snowflake hacker pleads guilty. Our guest is Dustin Childs, Head of Threat Awareness of TrendAI’s Zero Day Initiative, discussing the new Patch Tuesday era. AI takes your word for it.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Dustin Childs, Head of Threat Awareness of TrendAI’s Zero Day Initiative, discussing the new Patch Tuesday era. Be sure to check Dustin out on the AI Security Briefing podcast.

Selected Reading

Meta AI Hacked External Systems During Cybersecurity Testing (SecurityWeek)

Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says (The Record)

Secret White House AI Safety Framework Draws Criticism (BankInfo Security)

Few Federal Agencies Trust Their Own AI Agent Security (BankInfo Security)

Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows (Hackread)

ENISA scales up its role in the CVE Program (enisa)

Critical Paperclip Flaw Allowed Admin Access, Code Execution (SecurityWeek)

COLDCARD security audit phishing attack installs remote access tool (Bleeping Computer)

Chinese-made Zbtlink routers have backdoor, researchers say (Reuters)

Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its Customers for Millions (US Department of Justice)

“I’m Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails (Hackread)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

The White House lays out its AI strategy at Black Hat. Researchers spotlight rogue AI behavior. CISA warns of an actively exploited N-able flaw. TP-Link patches 15 Omada vulnerabilities. Apple fights the UK’s iCloud access order. The AI gray market expands. A Massachusetts healthcare breach hits more than 300,000 people. Lawmakers push to extend protections for OPM breach victims. Our guest is Cal Al-Dhubaib, Principal Technologist at Rubrik, who wonders if your security team is solving the wrong problem. With elections, don’t trust AI to tell you the whole story.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

On today’s Industry Voices segment, we are joined by Cal Al-Dhubaib, Principal Technologist at Rubrik, talking about how your security team is solving the wrong problem. If you enjoyed the conversation, check out the full interview here. You can also find more information below:

Rubrik Agent Cloud landing page

Rubrik AI landing page

News: Rubrik Launches Rubrik Agent Cloud for Anthropic's Claude Code

Selected Reading

National cyber director lays out White House plans to secure AI without writing new rules (CyberScoop)

Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data (SecurityWeek)

AI researchers let models off the leash – then watched as they tried to add malware to a FOSS project (The Register)

MSPs urged to patch immediately after N-able issues hotfix for N-central ‘god mode’ flaw (IT Pro)

TP-Link patches Omada ZTP flaws allowing hackers to breach networks (BleepingComputer)

Apple launches new legal challenge against UK over iCloud access (The Record)

Free tokens for sale: How fake signups drive AI fraud (Threat Intelligence)

311,000 Impacted by Brown Health Medical Group-MA Data Breach (SecurityWeek)

Lawmakers spring to save ID theft services for OPM breach victims, with expiration looming (CyberScoop)

AI is getting better at election facts, but voters shouldn’t rely on it (CyberScoop)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

New Shai-Hulud campaign compromises popular npm packages. Easterly says small municipalities shouldn’t have to fend for themselves. Chinese threat groups accelerate exploits. Samsung bans smart TV apps with residential proxies. Hackers breach a Liechtenstein banking database. Swiss government IT agency hit in suspected SharePoint Attack. Microsoft’s bug bounty program awards record payouts. Researchers expose privilege boundary flaw in AI-driven CI/CD workflows. Roberta Anderson, Air Force veteran and CISO at Onterris is sharing her "Breaking the Firewall" book. And, bug hunting turns into bug sorting.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Roberta Anderson, Air Force veteran and CISO at Onterris, sharing her "Breaking the Firewall" book.

Selected Reading

Keyv and friends compromised in npm supply chain attack (Aikido)

Small Towns Shouldn’t Have to Defend America’s Water Supply From Iran (The New York Times)

China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day (Infosecurity Magazine)

Samsung bans smart TV apps that share users' internet connections with strangers (TechCrunch)

Liechtenstein says hackers access information on 31,000 legal entities (Reuters)

Swiss IT agency hacked, 200 accounts compromised, SharePoint vulns suspected (The Record)

Microsoft Bounty Program year in review More than $20 million awarded in our biggest year yet (Microsoft Security Response Center)

I'll Just Call You: Agent-to-Agent Privilege Boundary Failures in CI/CD on Google's ADK Repository (Pillar Security)

Apple struggles to keep pace with AI ‘bug’ hunters (Financial Times)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Cyberattacks hit U.S. water systems. CISA tackles open source security. China’s surveillance machine is exposed. Hotel Wi-Fi gets riskier. Healthcare and police data spill online. Fake SQLite vulnerabilities fool security databases. Monday business briefing. Our guest is Tim Starks from CyberScoop discussing the White House's quantum aspirations. AI is the hottest thing on campus.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Tim Starks, Senior Reporter from CyberScoop, discussing the White House's quantum aspirations.

Selected Reading

Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran (The New York Times)

CISA lays out new guidance for using open-source software (Help Net Security)

How China Keeps Tabs on Foreigners (The New York Times)

Microsoft Issues Hotel Wi-Fi Warning For Windows PC Users (Forbes)

Exclusive: Partnered Health responds to Inc Ransom data breach claims (Cyber Daily)

Security Flaw Placed 30 Years of DNA Evidence at Risk of Hacking (Wall Street Journal)

SQLite Critical CVEs or LLM Slop? (JFrog Security Research)

Details of 100,000 police staff leaked on the dark web after hack (The Times)

ThreatLocker secures $190 million in a Series F round led by Elephant (N2K Pro Business Briefing)

At colleges, the AI boom means everyone wants to dabble in computer science (AP News)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

In this special edition, guest Yan Shoshitaishvili, Associate Professor, University of Arizona, joins host ⁠Dave Bittner⁠ to share a preview of his Black Hat USA 2026 keynote "Vulnerability Research in the Agentic Age."

Join Yan and Dave to hear insights on the evolution of vulnerability research, the impact of AI and LLMs on cybersecurity, and the future of human expertise in the field.

If you are heading to Black Hat, check out Yan's session on Thursday, August 6 at 9:15 AM.