Federal agencies warn of an active campaign targeting critical infrastructure. Citrix races to patch critical NetScaler flaws. More than 50,000 exposed Stripe API keys raise fraud concerns. Black Hat and DEF CON attendees are targeted in a new social engineering campaign. Atlassian, Splunk, and Cisco fix hundreds of vulnerabilities. A new Android banking trojan adds an unusual twist. A healthcare breach impacts 3.8 million people. SilkParasite expands cyberespionage in Central Asia. And CISA eyes a major overhaul of federal cyber software procurement. Our guest is Chris Wallis, founder and CEO of Intruder, on how AI agents killed the annual pentest and are reshaping exposure management. AI powered robots find bananas quite appealing.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
On our Industry Voices segment, Intruder’s Founder and CEO Chris Wallis joined Dave at Black Hat to discuss why the annual pentest Is dead and how AI agents are reshaping exposure management. If you enjoyed this conversation, be sure to check out the full interview here.
Selected Reading
NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology (The Record)
Citrix urges admins to patch new NetScaler flaws as soon as possible (Bleeping Computer)
50,000 Stripe Secrets Leaked in Public Code (SecurityAffairs)
Black Hat/DEF CON attendees targeted in malware scheme with Google Doc lure (SC World)
Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities (SecurityWeek)
Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities (SecurityWeek)
New Manic Android malware can exfiltrate data through nearby devices (Bleeping Computer)
EHR Vendor Notifying 3.8 Million Patients of Data Theft Hack (GovInfo Security)
SilkParasite: Tracking a China-Nexus APT Across Central Asia (Bitdefender)
CISA contemplates whether to hire security software buying help (Washington Technology)
I Saw the Future of AI in a Robot That Can Learn on the Spot (WIRED)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
