CISA Flags Zimbra Vulnerability

At long last, a TikTok deal. Officials urge lawmakers to keep an eye on the quantum ball. Fortinet confirms active exploitation of a critical authentication bypass flaw. Ireland plans to authorize spyware for law enforcement. Okta warns customers of sophisticated vishing kits. Under Armour investigates data breach claims. CISA adds a Zimbra Collaboration Suite flaw to the known exploited vulnerabilities list. Poor OpSec enables recovery of data stolen by the INC ransomware gang. The DOJ deports a pair of Venezuelans convicted of ATM jackpotting. Our guest is Chris Nyhuis, Founder and CEO of Vigilant, sharing practical steps to protect money, identity, and devices.  Curl pulls the plug on bug bounties after drowning in AI slop.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Chris Nyhuis, Founder and CEO of Vigilant, sharing "practical steps consumers can take in 2026 to protect their money, identity, and devices."

Selected Reading

TikTok Strikes Deal to Create New U.S. Entity and Loosen App’s Ties to China (New York Times)

US Officials Urge Congress to Reauthorize Key Quantum Law (BankInfo Security)

Fortinet confirms critical FortiCloud auth bypass not fully patched (Bleeping Computer)

Ireland plans law allowing law enforcement to use spyware (The Record)

Okta SSO accounts targeted in vishing-based data theft attacks (Bleeping Computer)

Under Armour Investigates Data Breach (Infosecurity Magazine)

Organizations Warned of Exploited Zimbra Collaboration Vulnerability  (SecurityWeek)

INC ransomware opsec fail allowed data recovery for 12 US orgs (Bleeping Computer)

2 Venezuelans Convicted in US for Using Malware to Hack ATMs (SecurityWeek)

Curl ending bug bounty program after flood of AI slop reports (Bleeping Computer)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices