Cybersecurity Vulnerabilities and Implications

Two Chinese nationals are arrested for allegedly exporting sensitive Nvidia AI chips. A critical security flaw has been discovered in Microsoft’s new NLWeb protocol. Vulnerabilities in Dell laptop firmware could let attackers bypass Windows logins and install malware. Trend Micro warns of an actively exploited remote code execution flaw in its endpoint security platform. Google confirms a data breach involving one of its Salesforce databases. A lack of MFA leaves a Canadian city on the hook for ransomware recovery costs. Nvidia’s CSO denies the need for backdoors or kill switches in the company’s GPUs. CISA flags multiple critical vulnerabilities in Tigo Energy’s Cloud Connect Advanced (CCA) platform. DHS grants funding cuts off the MS-ISAC. Helicopter parenting officially hits the footwear aisle.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Sarah Powazek from UC Berkeley's Center for Long-Term Cybersecurity (CLTC) discussing her proposed nationwide roadmap to scale cyber defense for community organizations.

Black Hat Women on the street

Live from Black Hat USA 2025, it’s a special “Women on the Street” segment with Halcyon’s Cynthia Kaiser, SVP Ransomware Research Center, and CISO Stacey Cameron. Hear what’s happening on the ground and what’s top of mind in cybersecurity this year.

Selected Reading

Two Arrested in the US for Illegally Exporting Microchips Used in AI Applications to China (TechNadu)

Microsoft’s plan to fix the web with AI has already hit an embarrassing security flaw  (The Verge)

ReVault flaws let hackers bypass Windows login on Dell laptops (Bleeping Computer)

Trend Micro warns of Apex One zero-day exploited in attacks (Bleeping Computer)

Google says hackers stole its customers' data in a breach of its Salesforce database (TechCrunch)

Hamilton taxpayers on the hook for full $18.3M cyberattack repair bill after insurance claim denied (CP24)

Nvidia rejects US demand for backdoors in AI chips (The Verge)

Critical vulnerabilities reported in Tigo Energy Cloud connect advanced solar management platform (Beyond Machines)

New state, local cyber grant rules prohibit spending on MS-ISAC (StateScoop)

Skechers skewered for adding secret Apple AirTag compartment to kids’ sneakers — have we reached peak obsessive parenting? (NY Post)

Audience Survey

Complete our annual audience survey before August 31.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices