Disruption of ESXi Hypervisor Exploitation

The NSA reshuffles its cybersecurity leadership. A new report unmasks ICE’s latest surveillance system. CISA marks a milestone by retiring ten Emergency Directives. Trend Micro patches a critical vulnerability. Grok dials back the nudes, a bit. Cambodia extradites a cybercrime kingpin to China. Ghost Tap malware intercepts payment card data. Researchers disrupt a highly sophisticated VMware ESXi hypervisor exploit. European law enforcement arrest dozens of suspects linked to the international cybercriminal group Black Axe. Our guest is Sonali Shah, CEO of Cobalt, who says 2026 is the year AI stops being a concept and becomes the central battleground of cybersecurity. After firing the experts, DOGE hangs a help wanted sign.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today on our Industry Voices, we are joined by Sonali Shah, CEO of Cobalt, talking about 2026 is the year AI stops being a concept and becomes the central battleground of cybersecurity. Tune into the full conversation here.

Selected Reading

NSA cyber directorate gets new acting leadership (The Record)

Inside ICE’s Tool to Monitor Phones in Entire Neighborhoods (404 Media)

CISA Retires Ten Emergency Directives, Marking an Era in Federal Cybersecurity (CISA.gov)

Trend Micro warns of critical Apex Central RCE vulnerability (Bleeping Computer)

X pulls Grok images after UK ban threat over undress tool (The Register)

Alleged cyber scam kingpin arrested, extradited to China (The Record)

Chinese Hackers Use NFC-Enabled Android Malware to Steal Payment Information (GB Hackers)

The Great VM Escape: ESXi Exploitation in the Wild (Huntress)

Europol Leads Global Crackdown on Black Axe Cybercrime Gang, 34 Arrest (Infosecurity Magazine)

US DOGE Service is hiring following mass workforce losses across the government (Gov Exec)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices