New Android Info-Stealer Using Termux and Telegram Exfiltration

CISA Layoffs threaten U.S. cyber coordination with states, businesses, and foreign partners. Google issues its second emergency Chrome update in a week, and puts Privacy Sandbox out of its misery. OpenAI’s new browser proves vulnerable to indirect prompt injection. SpaceX disables Starlink devices used by scam compounds. Reddit sues alleged data scrapers. Blue Cross Blue Shield of Montana suffers a data breach. A new Android infostealer abuses termux to exfiltrate data. Iran’s MuddyWater deploys a wide-ranging middle east espionage campaign. We’re joined by Lauren Zabierek and Camille Stewart Gloster discussing the next evolution of #ShareTheMicInCyber. When customer service fails, try human resources.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Lauren Zabierek and Camille Stewart Gloster, as they are discussing the next evolution of #ShareTheMicInCyber.

Selected Reading

CISA’s international, industry and academic partnerships slashed (Cybersecurity Dive)

Google releases emergency security update for Chrome V8 Engine flaw (Beyond Machines)

Google officially shuts down Privacy Sandbox (Search Engine Land)

OpenAI defends Atlas as prompt injection attacks surface (The Register)

SpaceX disables more than 2,000 Starlink devices used in Myanmar scam compounds (The Record)

Reddit Accuses ‘Data Scraper’ Companies of Theft (The New York Times)

Blue Cross Blue Shield of Montana under investigation for data breach (NBC Montana)

Infostealer Targeting Android Devices  (SANS ISC)

Iranian hackers targeted over 100 govt orgs with Phoenix backdoor (Bleeping Computer)

This Guy Noticed A Data Breach With A Company But Couldn’t Get Them To Respond, So He Infiltrated His Way Into An Interview To Drop The News (TwistedSifter)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices