CyberWire Daily

Anjali Hansen: Cross team collaboration works best. [Privacy Counsel] [Career Notes]

Please enjoy this encore of Career Notes. Anjali Hansen, a Senior Privacy Counselor from Noname Security shares her story as she climbed through the ranks to get to where she …

Apr 05, 2026 · 1m

ΤρανσένταCity name (optional, probably does not need a translation)

Startup surge sparks spy interest. [Research Saturday]

This week, we are joined by Santiago Pontiroli, Threat Intelligence Research Lead from Acronis TRU team, discussing their work on "New year, new sector: Transparent Tribe targets India’s startup ecosystem." …

Apr 04, 2026 · 19m

ΤρανσένταCity name (optional, probably does not need a translation)

War comes for the cloud.

Cloud data centers come under fire in wartime. A massive dark web intelligence database is exposed. Chinese hackers exploit a video conferencing zero-day. The intelligence community rolls out cyber modernization …

Apr 03, 2026 · 30m

ΤρανσένταCity name (optional, probably does not need a translation)

The WhatsApp impostor.

A fake WhatsApp spreads spyware. The State Department pushes embassies to counter influence ops. Cisco patches critical bugs. CrystalRAT hits Telegram. A Texas hospital breach affects 250,000. HHS reshuffles IT …

Apr 02, 2026 · 30m

ΤρανσένταCity name (optional, probably does not need a translation)

A war of missiles and messages.

Iran’s cyber campaign continues. North Korea targets the axios NPM package. Cisco suffers a Trivy-related breach. Claude’s code leak unveils broad capabilities. The DOD’s zero-trust efforts are slow-going. A proposed …

Apr 01, 2026 · 30m

ΤρανσένταCity name (optional, probably does not need a translation)

Water sector feels the pressure.

Iranian-linked hackers warn of possible “irreparable” attacks on U.S. water systems. CISA pushes urgent fixes for a critical Citrix flaw. The Dutch Finance Ministry takes systems offline after a breach. …

Mar 31, 2026 · 26m

ΤρανσένταCity name (optional, probably does not need a translation)

Bringing it all together. [CISOP]

Please enjoy this encore of CISO Perspectives. In the season finale of CISOP, Kim Jones is joined by N2K’s own Ethan Cook to reflect on the conversations that shaped this …

Mar 31, 2026 · 54m

ΤρανσένταCity name (optional, probably does not need a translation)

Inbox intrusion hits FBI chief.

Iran-linked hackers claim a breach of the FBI director’s personal email. ShinyHunters hit the European Commission. F5 and Citrix warn of actively exploited flaws. A WordPress plugin exposes hundreds of …

Mar 30, 2026 · 26m

ΤρανσένταCity name (optional, probably does not need a translation)

David Nosibor: Taking calculated risks. [Product Lead] [Career Notes]

Please enjoy this encore of Career Notes. David Nosibor, Product Lead for SafeCyber at UL Solutions, started his career in a unique way by not letting himself be pigeonholed. Within …

Mar 29, 2026 · 26m

ΤρανσένταCity name (optional, probably does not need a translation)

CyberWire Daily at 10: The breaches we still talk about. [Special Edition]

In this special edition of CyberWire Daily’s 10th anniversary series, N2K CyberWire's Maria Varmazis and Dave Bittner discuss the biggest breaches over the past 10 years. The foundational 2014 Sony …

Mar 29, 2026 · 28m

ΤρανσένταCity name (optional, probably does not need a translation)

When “safe” documents aren’t. [Research Saturday]

Omer Ninburg, CTO of Novee Security, joins us on this episode of Research Saturday to discuss their work on "From PDF to Pwn: Scalable 0day Discovery in PDF Engines and …

Mar 28, 2026 · 21m

ΤρανσένταCity name (optional, probably does not need a translation)

Langflow locked and loaded.

CISA warns of actively exploited Langflow vulnerability. CISA flags critical PTC Windchill vulnerability. Phishing activity surges amid war in Iran. Google moves up their post-quantum timeline. Alleged RedLine infostealer developer …

Mar 27, 2026 · 28m

ΤρανσένταCity name (optional, probably does not need a translation)

Why is the vendor role so contentious in the cyber ecosystem? [CISOP]

As the emphasis on improving cybersecurity has continued to grow, so has the number of vendors offering a range of cybersecurity services. However, despite the value many of these vendors …

Mar 27, 2026 · 14m

ΤρανσένταCity name (optional, probably does not need a translation)

Wrapping RSAC 2026 up with a bow.

RSAC wraps. CISA warns shutdown furloughs are weakening cyber defenses. China-linked actors burrow into global telecom infrastructure. Iran’s Pay2Key resurfaces. India probes suspected Pakistan-linked CCTV spying. Florida suspends a firm …

Mar 26, 2026 · 26m

ΤρανσένταCity name (optional, probably does not need a translation)

Your private call isn’t so private.

The UK’s cyber security chief urges a “full court press” against threats. RSAC highlights. The U.S. State Department has launched a Bureau of Emerging Threats. The TeamPCP cybercriminal group targets …

Mar 25, 2026 · 24m

ΤρανσένταCity name (optional, probably does not need a translation)

Reports from RSAC and beyond.

RSAC spotlights public-private partnership gaps. DarkSword leaks to GitHub. The FCC blocks new foreign-made routers. Citrix patches a critical NetScaler flaw. DOE rolls out an energy-sector cyber strategy. CanisterWorm spreads …

Mar 24, 2026 · 33m

ΤρανσένταCity name (optional, probably does not need a translation)

But what do you really want? [CISOP]

Despite being adopted and prioritized by many organizations, cybersecurity still faces a significant challenge where leaders still cannot articulate their needs, and find and develop talent. Rather, organizations oftentimes follow …

Mar 24, 2026 · 42m

ΤρανσένταCity name (optional, probably does not need a translation)

Policy drops and phishing pops.

The White House rolls out its AI legislative framework. The FBI warns Iranian actors are using Telegram for command and control, while Russian operators phish Signal users. Authorities dismantle a …

Mar 23, 2026 · 32m

ΤρανσένταCity name (optional, probably does not need a translation)

Roya Gordon: Becoming a trailblazer. [Research] [Career Notes]

Please enjoy this encore of Career Notes. Roya Gordon, a Security Research Evangelist at ICS cybersecurity firm Nozomi Networks, started her career as an intelligence specialist in the U.S. Navy. …

Mar 22, 2026 · 11m

ΤρανσένταCity name (optional, probably does not need a translation)

CyberWire Daily at 10: From an idea to the airwaves. [Special Edition]

In this special edition of CyberWire Daily’s 10th anniversary series, Maria Varmazis hosts a thoughtful and engaging conversation with N2K CyberWire CEO Peter Kilpe and CyberWire Daily host Dave Bittner, …

Mar 22, 2026 · 39m

ΤρανσένταCity name (optional, probably does not need a translation)

A subtle flaw, a massive blast radius. [Research Saturday]

Yuval Avrahami from Wiz joins to share their work on "CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild." Wiz Research uncovered “CodeBreach,” a critical …

Mar 21, 2026 · 17m

ΤρανσένταCity name (optional, probably does not need a translation)

Millions of devices still up for grabs.

Feds take down major IoT botnets. The FBI seizes hacktivist infrastructure. A data breach hits Kaplan, while a hacker claims access to millions of law enforcement tips. Fake Zoom calls …

Mar 20, 2026 · 34m

ΤρανσένταCity name (optional, probably does not need a translation)

Strategic approaches to talent: A practical guide. [CISOP]

Even as cybersecurity has grown and become universially accepted, the field has continued to struggle when attempting to assess and aquire talent. Oftentimes, there is a disconnect between what organizations …

Mar 20, 2026 · 42m

ΤρανσένταCity name (optional, probably does not need a translation)

iPhone exploits go mainstream.

DarkSword targets iPhones for indiscriminate exploitation. Cybercrime and the Iran war. The FBI confirms purchasing commercially available location data. The DHS secretary nominee gets grilled on CISA funding. A Zimbra …

Mar 19, 2026 · 23m

ΤρανσένταCity name (optional, probably does not need a translation)

Persistent threats in a shifting battlefield.

Iran’s cyber ops stay resilient. U.S. lawmakers press Big Tech on EU rules. Researchers expose a Fancy Bear server. Japan moves toward offensive cyber. CISA calls for cross-agency teamwork. New …

Mar 18, 2026 · 31m

ΤρανσένταCity name (optional, probably does not need a translation)

Europe clamps down on global hackers.

The EU imposes sanctions after cyberattacks. DHS boosts surveillance spending. AI firms recruit weapons-risk experts. Stryker disruption, no patient impact. LeakNet leans on ClickFix. Sears chatbot data spills. A Chinese …

Mar 17, 2026 · 27m

ΤρανσένταCity name (optional, probably does not need a translation)

Mid season reflection with Kim Jones. [CISOP]

In this mid-season episode, Kim takes a step back to reflect on the journey so far—revisiting key conversations, standout moments, and recurring themes that have shaped the season. During the …

Mar 17, 2026 · 41m

ΤρανσένταCity name (optional, probably does not need a translation)

Watch out for cybercrime frequent flyers.

Drone strikes hit a key chip supply chain. China-linked hackers target Southeast Asian militaries. Attackers race ahead with AI. ShinyHunters claim a massive Telus breach. Microsoft issues a hotpatch. Malware …

Mar 16, 2026 · 25m

ΤρανσένταCity name (optional, probably does not need a translation)

Christian Lees: It's not always textbook. [CTO] [Career Notes]

Please enjoy this encore of Career Notes. Christian Lees, CTO at Resecurity, shares his story and insight on coming into the cybersecurity world. He considers himself a late bloomer because …

Mar 15, 2026 · 9m

ΤρανσένταCity name (optional, probably does not need a translation)

Your AI sidekick might be a spy. [Research Saturday]

This week, we are joined by Or Eshed, Co-Founder and CEO from LayerX Security, discussing their work on "How We Discovered A Campaign of 16 Malicious Extensions Built to Steal …

Mar 14, 2026 · 22m

ΤρανσένταCity name (optional, probably does not need a translation)

Socks pulled, patches pushed.

Europol dismantles the SocksEscort proxy service. Cyber operations highlight imbalance in the war in Iran. Google rushes Chrome zero-day patches. Veeam fixes critical backup flaws. A former incident responder faces …

Mar 13, 2026 · 30m

ΤρανσένταCity name (optional, probably does not need a translation)

Is the role of the CISO adding to the confusion? [CISOP]

Show Notes: As cybersecurity has matured, the field has become more formalized within businesses with CISOs leading the way. However, despite the value of the CISO and its widespread adoption, …

Mar 13, 2026 · 44m

ΤρανσένταCity name (optional, probably does not need a translation)