CyberWire Daily Behind the lock lies a flaw.
22 snips
Aug 21, 2025 Ron Zayas, CEO of Ironwall by Incogni, dives into the hidden data sharing and privacy risks associated with Buy Now Pay Later apps. He discusses how these services, while enticing for consumers, can lead to significant privacy concerns due to extensive data collection practices. Zayas highlights the impulsive buying behavior particularly among younger users and the implications of such trends. He also touches on the need for transparency and ethical practices in the evolving landscape of financial technology.
AI Snips
Chapters
Transcript
Episode notes
Password Managers Vulnerable To Clickjacking
- DEF CON revealed clickjacking zero-days in major password managers that can leak credentials and 2FA codes.
- Vendors remain inconsistently patched, exposing users to stealthy UI-overlay attacks.
Old Cisco Flaw Still Critical
- FBI warns Russian state-backed Berserk Bear exploit a long-known Cisco iOS Smart Install flaw to target critical infrastructure.
- Attackers collected configs, implanted backdoors, and reconnoitered industrial control systems across sectors.
Apple Emergency Patch For Image I/O
- Apple shipped emergency patches for an Image I/O zero-day causing memory corruption and potential remote code execution.
- Users should update immediately because the flaw was exploited in targeted attacks.