CyberWire Daily Deadlines in the cloud.
29 snips
Aug 11, 2025 Steve Deitz, President of MANTECH's Federal Civilian Sector, delves into the innovative concept of cell-based Security Operations Centers (SOC). He highlights the urgent need for quick compliance, especially in light of the recent Microsoft Exchange vulnerabilities. The conversation also touches on the shift from espionage to financial crime by hackers, and how community efforts like the Franklin Project are bolstering cybersecurity. A humorous cautionary tale reveals the pitfalls of AI dietary advice—reminding listeners of the potential quirks of technology.
AI Snips
Chapters
Transcript
Episode notes
Urgent Patch Mandate For Exchange Hybrid
- Federal agencies must urgently patch a critical Exchange hybrid vulnerability and report compliance to CISA.
- The directive requires on-prem checks, disconnecting unsupported systems, and EntraID hotfixes before EWS deprecation.
SoupDealer's Sandbox Evasion
- SoupDealer uses multi-stage loaders, heavy obfuscation, and Tor C2 to evade sandboxes and EDR.
- Researchers warn to add on-premises dynamic analysis to detect region-targeted threats.
Calendar Invites Can Hijack Gemini
- Malicious calendar titles used prompt injection to make Gemini leak data and take actions.
- Google fixed the bug after safe breach researchers responsibly disclosed the exploit.