Ni8mare Flaw in n8n Workflow Automation

The US withdraws from global cybersecurity institutions. A maximum-severity vulnerability called Ni8mare allows full compromise of a workflow automation platform. Cisco patches ISE. Researchers uncover a sophisticated multi-stage malware campaign targeting manufacturing and government organizations in Italy, Finland, and Saudi Arabia. The growing rift of defining AI risk. Microsoft gives 365 admins a one-month deadline to enable MFA. The Illinois Department of Human Services inadvertently exposed personal and protected health information of more than 700,000 residents. An Illinois man is charged with hacking Snapchat accounts to steal nudes. Our guest is Caitlin Clarke, Senior Director for Cybersecurity Services at Venable, with insights on CISA 2015. Facial recognition that’s bear-ly controversial. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Caitlin Clarke, Senior Director for Cybersecurity Services at Venable, for a conversation on CISA 2015 and its role in today’s cybersecurity and policy landscape. If you enjoyed this conversation, be sure to tune into the full interview on the next Caveat.

Selected Reading

US announces withdrawal from dozens of international treaties (The Record)

US To Leave Global Forum on Cyber Expertise (Infosecurity Magazine)

Max severity Ni8mare flaw lets hackers hijack n8n servers (Bleeping Computer)

Cisco warns of Identity Service Engine flaw with exploit code (Bleeping Computer)

CISA tags max severity HPE OneView flaw as actively exploited (Bleeping Computer)

Threat Actors Exploit Commodity Loader in Targeted Email Campaigns Against Organizations (GB Hackers)

Are Copilot prompt injection flaws vulnerabilities or AI limits? (Bleeping Computer)

Microsoft to enforce MFA for Microsoft 365 admin center sign-ins (Bleeping Computer)

Illinois state agency exposed personal data of 700,000 people (The Record)

Oswego man Kyle Svara, 26, allegedly hired by college coach Steve Waithe to get Snapchat access codes from nearly 600 women: FBI (ABC7 Chicago)

How facial recognition for bears can help ecologists manage wildlife (The Conversation)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices