Malicious NPM Packages Deliver Multi-Platform Infostealer

A Texas telecom confirms a nation-state attack. A global outage disrupts Azure and Microsoft 365 services.  Malicious npm packages steal sensitive data from Windows, Linux, and macOS systems.  Hacktivists have breached multiple critical infrastructure systems across Canada. Major chipmakers spill the TEE. TP-Link home routers fall under federal scrutiny. Cloud Atlas targets Russia’s agricultural sector. Israel’s cloud computing deal with Google and Amazon allegedly includes a secret “winking mechanism.”The FCC tamps down on overseas robocalls. Mike Anderson, from Netskope, discusses why CIOs should think like HR leaders when considering Agentic AI. Danes Draw the line at digital doppelgängers. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Mike Anderson, Netskope’s Chief Digital and Information Officer, to discuss why CIOs must think like HR leaders when considering Agentic AI.

Selected Reading

US company with access to biggest telecom firms uncovers breach by nation-state hackers (Reuters)

Huge Microsoft outage hit 365, Xbox, and beyond — deployment of fix for Azure breakdown rolled out (Tom's Hardware)

Malicious NPM packages fetch infostealer for Windows, Linux, macOS (Bleeping Computer)

Canada says hacktivists breached water and energy facilities (Bleeping Computer)

New physical attacks are quickly diluting secure enclave defenses from Nvidia, AMD, and Intel (Ars Technica)

U.S. agencies back banning top-selling home routers on security grounds (The Washington Post)

Cloud Atlas hackers target Russian agriculture sector ahead of industry forum (The Record)

Revealed: Israel demanded Google and Amazon use secret ‘wink’ to sidestep legal orders (The Guardian)

FCC adopts new rule targeting robocalls (The Record)

Denmark to tackle deepfakes by giving people copyright to their own features (The Guardian)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices