AI Vulnerabilities and XPI Attack

Section 702 edges closer to a vote. CISA provides guidance on Sisense and Microsoft breaches. A major conservative think tank reports a breach. Obsolete D-Link devices are under active exploitation, and Palo Alto warns of a zero-day. Raspberry Robin grows more stealthy. A lastpass employee thwarts a deepfake phishing attempt. Are AI models growing more persuasive? Our guest Kevin Magee from Microsoft Canada joins us to talk about cross domain prompt injection and AI. Floppies keep the trains running on time. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Guest and podcast partner Kevin Magee from Microsoft Canada joins us to talk about cross domain prompt injection and AI. 

Selected Reading

Compromise of Sisense Customer Data (CISA)

ED 24-02: Mitigating the Significant Risk from Nation-State Compromise of Microsoft Corporate Email System (CISA)

US think tank Heritage Foundation hit by cyberattack (TechCrunch)

Exploitation of Unpatched D-Link NAS Device Vulnerabilities Soars (SecurityWeek)

Palo Alto Networks Warns About Critical Zero-Day in PAN-OS (Infosecurity Magazine)

Hackers are using Windows script files to spread malware and swerve antivirus software ( ITPro)

LastPass Employee Targeted With Deepfake Calls (SecurityWeek)

Anthropic says its AI models are as persuasive as humans (Axios)

5.25-inch floppy disks expected to help run San Francisco trains until 2030 (Ars Technica)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. 

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices