CyberWire Daily

Senators accuse the White House of illegally withholding a secret surveillance court ruling. A suspected surveillance operation targets Starlink users. Attackers probe vulnerable Oracle E-Business Suite systems. The FBI shuts down a bulletproof hosting provider. Tailworm targets Tailscale. Ohio’s Auditor of State investigates a cyberattack. A suspected ransomware attack disrupts Israel’s largest vehicle importer. Norway raises their cyber risk level to high. Our guest is Amy Blackshaw, Senior Vice President of Product Marketing for Identity at Palo Alto Networks, discussing AI exploits and identity containment. AI science needs a spam filter.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today on our Industry Voices segment, we are joined by Amy Blackshaw, Senior Vice President of Product Marketing for Identity at Palo Alto Networks, discussing "The three-month clock: Neutralizing frontier AI exploits through identity containment." If you enjoyed this conversation, check out the full interview here.

Selected Reading

The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans (WIRED)

EXCLUSIVE: Alleged Israeli spy company heavily targeted Starlink users, sources say (Reuters)

How Cosmos 2612 Ran Down ICEYE-X36 in October 2026 (KeepTrack)

Hackers now scanning systems for recently-patched Oracle flaw (Bleeping Computer)

FBI seizes ‘bulletproof’ hosting site accused of facilitating child abuse, money laundering (The Record)

Tailscale Rushes Patches After Uncoordinated Disclosure of 'Tailworm' Flaws (SecurityWeek)

State official: Auditor of State's Office targeted in overseas cyberattack (News 5 Cleveland)

Colmobil cyberattack exposes vulnerabilities in Israel’s connected-car ecosystem (Ctech)

NSM hever det nasjonale cyberrisikonivået til HØYT (NSM)

The maths bust-up fuelling fears that AI is undermining science (BBC News)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

CyberWire GuestSelected ReadingWant to hear your company in the show?
Learn more about your ad choices. Visit megaphone.fm/adchoices

CISA unveils its 2030 cyber strategy. PHP2Shell exploits are in the wild. HHS preserves healthcare security requirements. Microsoft offers buyouts amid its AI spending spree. A cyberattack disrupts New Mexico hospitals. Google’s Finnish data center plans hit an environmental roadblock. Blue Initiative tracks maritime vulnerabilities. A Chinese national faces charges in a $37 million cryptocurrency scam. Our guest is Cal Al-Dhubaib, host of the new Authorized Intelligence podcast. Anthropic’s prospectus includes an existential disclaimer.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Cal Al-Dhubaib, host of Authorized Intelligence, sharing his vision and some highlights of the new show joining the N2K CyberWire network. If you want to learn more, listen to the trailer here.

Selected Reading

CISA lays out plan to push cyber adversaries out of US critical infrastructure (Help Net Security)

CISA confirms PHP2Shell vulnerabilities now exploited in attacks (Bleeping Computer)

HHS Retreats on Plan to Scrap EHR Security, Privacy Regs (BankInfo Security)

Microsoft offers voluntary buyouts as AI leads to efficiency push (CNBC)

Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics (SecurityWeek)

‘Pure arrogance’: anger in Finland as Google illegally fells 250,000 trees for datacentre (The Guardian)

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems (SecurityWeek)

Authorities extradite Chinese national for alleged $37M investment scam (CyberScoop)

Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI (SecurityWeek)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

A cybersecurity startup claims to have accessed sensitive internal documents at Anthropic. The Pentagon spins up covert technology programs. AI developers get a crash course in key management. A ransomware recovery executive faces federal fraud charges. Two men are accused of using AI generated phone calls to scam bank customers. Stadia RAT rises from the StealC ashes. Researchers extract sensitive information using USB power-management signals. Patching what matters…matters. Monday business briefing. Tim Starks from CyberScoop is discussing targeted ads as a security risk. Championship rings come with a catch.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Tim Starks from CyberScoop discussing targeted ads as a security risk.

Selected Reading

It took just 12 hours for an AI start-up founded by ex-DOGE staffers to break into Anthropic (Washington Post)

The Pentagon is quietly building an elite new tech sabotage agency (POLITICO)

Popular AI tool LiteLLM says unrevoked key allowed hackers to target users (The Record)

Cybersecurity CEO Indicted for Allegedly Scamming Millions From Ransomware Victims (ProPublica)

Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts (SecurityWeek)

StealC Malware Returns as Stadia RAT After Operation Endgame Takedown (Hackread)

SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs (Hackread)

The Real Jump Scare Isn’t the Attacker; It’s The Vulnerabilities You’re Focusing On (Qualys)

Proofpoint to acquire Varonis for $6.3 billion. (N2K Pro Business Briefing)

Knicks sent employees fake offer of championship rings in phishing test: Report (Ars Technica)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices

The Ukraine has experienced a second major outage of its Starshield services reigniting questions about relying on a single private provider for critical national security services.

Host Maria Varmazis sits down Dave Bittner and Brandon Karpf to discuss the recent incident where Ukraine lost Starshield coverage. They explore how the growing role of private satellite companies in warfare creates challenges for establishing operational accountability and impacts US alliances.

Key Sources:

⁠Musk ordered Starlink slowdown that blindsided Ukraine.

Starlink access in Ukraine a decision for Musk, not White House, Rubio says.

Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://thecyberwire.com/newsletters/signals-and-space⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠space@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.surveymonkey.com/r/NJYCN2P ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠N2K⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Today we have Damon Rouse, Threat Intelligence from Lumen's Black Lotus Labs, discussing their work on "The infrastructure quartermaster: inside a China-nexus state enablement model." Black Lotus Labs identified a China-nexus cyber infrastructure provider, dubbed a “quartermaster,” that supplies reconnaissance, proxy routing, and obfuscation services to Chinese cyber espionage actors.

Its interconnected systems, including QScan and Fast Labyrinth, help identify high-value targets, conceal malicious traffic, and support potential exploitation of government, military, research, and critical infrastructure networks. Researchers warn that this shared infrastructure makes traditional IP-based defenses less effective and recommend following CISA and NCSC guidance, reducing external attack surfaces, and keeping routers, firewalls, and IoT devices updated.

The research and executive brief can be found here:

The infrastructure quartermaster: inside a China-nexus state enablement model

Learn more about your ad choices. Visit megaphone.fm/adchoices