Bizarre Bazar LLM Endpoint Campaign

CISA’s interim director uploaded sensitive government material into the public version of ChatGPT. The cyberattack on Poland’s power grid compromised roughly 30 energy facilities. The EU and India sign a new partnership that includes expanded cyber cooperation. Meta rolls out enhanced WhatsApp security features. Researchers uncover a campaign targeting LLM service endpoints. Fortinet and OpenSSL patch multiple vulnerabilities. A high-severity WinRAR vulnerability continues to see widespread exploitation six months after it was patched. The SoundCloud data breach affected nearly 30 million users. Ben Yelin explains the California lawsuit accusing social media platforms of harming kids. A Spanish resort town gets hit with low-rent ransomware.  

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today, Dave is joined by his Caveat co-host Ben Yelin, Program Director for Public Policy & External Affairs at the University of Maryland Center for Cyber Health and Hazard Strategies, to discuss the upcoming trial where Meta and YouTube will make their case against accusations of social media being harmful to children. You can learn more here. 

T-Minus Guest Host

Our T-Minus Space Daily podcast team is in Orlando, FL this week covering Commercial Space Week. Yesterday while the crew was on travel making their way to the event, Dave Bittner took his first spin behind the mic on T-Minus. Tune in and let us know how Dave did!

You can follow along with host Maria Varmazis and producers Alice Carruth and Liz Stokes for event coverage via our LinkedIn profile.

Selected Reading

Trump’s acting cyber chief uploaded sensitive files into a public version of ChatGPT (POLITICO)

Cyberattack on Poland’s power grid hit around 30 energy facilities, new report says (The Record)

Europe/India • Indian 'hackers for hire' to continue to thrive under Brussels-New Dehli trade deal (Intelligence Online)

New WhatsApp lockdown feature protects high-risk users from hackers (Bleeping Computer)

Hackers hijack exposed LLM endpoints in Bizarre Bazaar operation (Bleeping Computer)

Fortinet Patches Exploited FortiCloud SSO Authentication Bypass (SecurityWeek)

High-Severity Remote Code Execution Vulnerability Patched in OpenSSL (SecurityWeek)

Cybercriminals and nation-state groups are exploiting a six-month old WinRAR defect (CyberScoop)

SoundCloud breach added to HIBP, 29.8 million accounts exposed (CyberInsider)

Spanish municipality Sanxenxo City Council calls hackers bluff as malware takes over network (Cryptopolitan)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. 

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices