CyberWire Daily

The White House lays out its AI strategy at Black Hat. Researchers spotlight rogue AI behavior. CISA warns of an actively exploited N-able flaw. TP-Link patches 15 Omada vulnerabilities. Apple fights the UK’s iCloud access order. The AI gray market expands. A Massachusetts healthcare breach hits more than 300,000 people. Lawmakers push to extend protections for OPM breach victims. Our guest is Cal Al-Dhubaib, Principal Technologist at Rubrik, who wonders if your security team is solving the wrong problem. With elections, don’t trust AI to tell you the whole story.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

On today’s Industry Voices segment, we are joined by Cal Al-Dhubaib, Principal Technologist at Rubrik, talking about how your security team is solving the wrong problem. If you enjoyed the conversation, check out the full interview here. You can also find more information below:

Rubrik Agent Cloud landing page

Rubrik AI landing page

News: Rubrik Launches Rubrik Agent Cloud for Anthropic's Claude Code

Selected Reading

National cyber director lays out White House plans to secure AI without writing new rules (CyberScoop)

Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data (SecurityWeek)

AI researchers let models off the leash – then watched as they tried to add malware to a FOSS project (The Register)

MSPs urged to patch immediately after N-able issues hotfix for N-central ‘god mode’ flaw (IT Pro)

TP-Link patches Omada ZTP flaws allowing hackers to breach networks (BleepingComputer)

Apple launches new legal challenge against UK over iCloud access (The Record)

Free tokens for sale: How fake signups drive AI fraud (Threat Intelligence)

311,000 Impacted by Brown Health Medical Group-MA Data Breach (SecurityWeek)

Lawmakers spring to save ID theft services for OPM breach victims, with expiration looming (CyberScoop)

AI is getting better at election facts, but voters shouldn’t rely on it (CyberScoop)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

New Shai-Hulud campaign compromises popular npm packages. Easterly says small municipalities shouldn’t have to fend for themselves. Chinese threat groups accelerate exploits. Samsung bans smart TV apps with residential proxies. Hackers breach a Liechtenstein banking database. Swiss government IT agency hit in suspected SharePoint Attack. Microsoft’s bug bounty program awards record payouts. Researchers expose privilege boundary flaw in AI-driven CI/CD workflows. Roberta Anderson, Air Force veteran and CISO at Onterris is sharing her "Breaking the Firewall" book. And, bug hunting turns into bug sorting.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Roberta Anderson, Air Force veteran and CISO at Onterris, sharing her "Breaking the Firewall" book.

Selected Reading

Keyv and friends compromised in npm supply chain attack (Aikido)

Small Towns Shouldn’t Have to Defend America’s Water Supply From Iran (The New York Times)

China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day (Infosecurity Magazine)

Samsung bans smart TV apps that share users' internet connections with strangers (TechCrunch)

Liechtenstein says hackers access information on 31,000 legal entities (Reuters)

Swiss IT agency hacked, 200 accounts compromised, SharePoint vulns suspected (The Record)

Microsoft Bounty Program year in review More than $20 million awarded in our biggest year yet (Microsoft Security Response Center)

I'll Just Call You: Agent-to-Agent Privilege Boundary Failures in CI/CD on Google's ADK Repository (Pillar Security)

Apple struggles to keep pace with AI ‘bug’ hunters (Financial Times)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Cyberattacks hit U.S. water systems. CISA tackles open source security. China’s surveillance machine is exposed. Hotel Wi-Fi gets riskier. Healthcare and police data spill online. Fake SQLite vulnerabilities fool security databases. Monday business briefing. Our guest is Tim Starks from CyberScoop discussing the White House's quantum aspirations. AI is the hottest thing on campus.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Tim Starks, Senior Reporter from CyberScoop, discussing the White House's quantum aspirations.

Selected Reading

Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran (The New York Times)

CISA lays out new guidance for using open-source software (Help Net Security)

How China Keeps Tabs on Foreigners (The New York Times)

Microsoft Issues Hotel Wi-Fi Warning For Windows PC Users (Forbes)

Exclusive: Partnered Health responds to Inc Ransom data breach claims (Cyber Daily)

Security Flaw Placed 30 Years of DNA Evidence at Risk of Hacking (Wall Street Journal)

SQLite Critical CVEs or LLM Slop? (JFrog Security Research)

Details of 100,000 police staff leaked on the dark web after hack (The Times)

ThreatLocker secures $190 million in a Series F round led by Elephant (N2K Pro Business Briefing)

At colleges, the AI boom means everyone wants to dabble in computer science (AP News)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

In this special edition, guest Yan Shoshitaishvili, Associate Professor, University of Arizona, joins host ⁠Dave Bittner⁠ to share a preview of his Black Hat USA 2026 keynote "Vulnerability Research in the Agentic Age."

Join Yan and Dave to hear insights on the evolution of vulnerability research, the impact of AI and LLMs on cybersecurity, and the future of human expertise in the field.

If you are heading to Black Hat, check out Yan's session on Thursday, August 6 at 9:15 AM.

As the space ecosystem continues to expand, the sector has become increasingly filled with new suppliers, manufacturers, and operators. However, while this development has led to the introduction of new technologies, it has also greatly expanded space's cyberattack surface.

In this week's episode, host Maria Varmazis sits down with Jen Sovada, General Manager of Public Sector at Claroty. During the conversation, the two explore how vulnerabilities within the space supply chain can impact mission assurance. They discuss how the expanding space supply chain ecosystem has expanded the attack surface.

Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: https://thecyberwire.com/newsletters/signals-and-space

Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to space@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: https://www.surveymonkey.com/r/NJYCN2P

T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. N2K is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at n2k.com.