Critical Dolby Android Vulnerability Patched

Grok’s non-consensual imagery draws scrutiny from the European Commission.  Researchers link several major data breaches to a single threat actor. The UK unveils a new Cyber Action Plan. A stealthy ClickFix campaign targets the hospitality sector. VVS Stealer malware targets Discord users. Covenant Health and AFLAC report data leaks. Google silences a critical Dolby flaw. Ilona Cohen, Chief Legal and Policy Officer at HackerOne discusses “What the SolarWinds Dismissal Really Means for CISOs: Less Personal Risk, More Scrutiny on Disclosures.” UK students enjoy a digital snow day. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Ilona Cohen, Chief Legal and Policy Officer at HackerOne and former senior lawyer to President Obama, as she is discussing “What the SolarWinds Dismissal Really Means for CISOs: Less Personal Risk, More Scrutiny on Disclosures.”

Selected Reading

EU looking ‘very seriously’ at taking action against X over Grok (The Record)

Grok's AI CSAM Shitshow (404 Media)

Dozens of Major Data Breaches Linked to Single Threat Actor (SecurityWeek)

UK Launches New Cyber Unit to Bolster Defences Against Cyber Threats (Infosecurity Magazine)

Sophisticated ClickFix Campaign Targeting Hospitality Sector (SecurityWeek)

New VVS Stealer Malware Targets Discord Users via Fake System Errors (Hackread)

Covenant Health Notifying 480K Patients of 2025 Data Theft (Infosecurity)

Aflac Notifies 22.6 Million People of June Data Theft Attack (Infosecurity)

Critical Dolby leak in Android patched by Google (Techzine Global)

Students bag extended Christmas break after cyber hit on school IT (The Register)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices