The spy who sold out.
CyberWire Daily
Shadow Escape: Zero‑Click AI Data Exfiltration
Dave outlines Operant AI's discovery of a zero‑click attack abusing MCP to make LLM assistants exfiltrate sensitive records.
A former defense contractor is charged with attempting to sell trade secrets to Russia. Researchers uncover critical vulnerabilities in TP-Link routers. Microsoft patches a critical Windows Server Update Service flaw. CISA issues eight new ICS advisories. “Shadow Escape” targets LLMs database connections. Halloween-themed scams spike. Our guest is Chris Inglis, first National Cyber Director, speaking on cybercrime and the upcoming documentary on cyber war, "Midnight in the War Room". WhatsApp’s missing million-dollar exploit.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we are joined by Chris Inglis, first National Cyber Director, speaking on cybercrime and the upcoming documentary on cyber war, "Midnight in the War Room" presented by Semperis. Learn more and check out the trailer.
Selected Reading
Hacking Lab Boss Charged with Seeking to Sell Secrets (Bloomberg)
Dark Covenant 3.0: Controlled Impunity and Russia’s Cybercriminals (Recorded Future)
New TP-Link Router Vulnerabilities: A Primer on Rooting Routers (Forescout)
Windows Server emergency patches fix WSUS bug with PoC exploit (Bleeping Computer)
CISA Releases Eight Industrial Control Systems Advisories (CISA)
Cyberattack on Russia’s food safety agency reportedly disrupts product shipments (The Record)
Shadow Escape 0-Click Attack in AI Assistants Puts Trillions of Records at Risk (Hackread)
Trick or Treat: Bitdefender Labs Uncovers Halloween Scams Flooding Inboxes and Feeds (Bitdefender)
Pwn2Own WhatsApp Hacker Says Exploit Privately Disclosed to Meta (SecurityWeek)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
The AI-powered Podcast Player
