CyberWire Daily Wheels left spinning after cyber incident.
39 snips
Sep 5, 2025 Aron Anderson, Enterprise Security Manager at Adobe, dives into the evolving landscape of cybersecurity, highlighting a recent cyberattack on Bridgestone and the importance of robust software bill of materials for security. He passionately discusses the transition to zero trust security, debunking myths that it's only for large organizations and demonstrating its relevance for all businesses. By integrating AI and addressing vendor risks, he emphasizes how organizations can adapt to modern threats while securing their operations effectively.
AI Snips
Chapters
Transcript
Episode notes
Bridgestone Faces Disruptive Manufacturing Attack
- Bridgestone Americas reported a cyberattack that disrupted manufacturing at US and Quebec facilities.
- The company contained the incident early and has not confirmed ransomware or data theft while investigations continue.
ICS Flaws Threaten Critical Systems
- CISA warned of critical ICS vulnerabilities across vendors that could enable remote code execution and even spoof rail brake signals.
- Immediate mitigations like access controls, segmentation, and patching are essential while vendors release fixes.
OAuth Misuse In Drift–Salesforce Campaign
- Threat group UNC6395 abused OAuth tokens in a Drift-Salesforce integration to harvest data from over 700 organizations.
- Exposed items included AWS keys, contact details, and CRM data; victims rotated credentials and removed the integration.