CyberWire Daily WhatsApp worm spreads.
39 snips
Oct 3, 2025 Brian Vecci, Field CTO at Varonis and data security expert, joins the discussion on rapid innovation amidst security risks. He highlights the challenges organizations face with unknown threats as they adopt AI technologies. Vecci exposes how innocent queries can lead to significant data leaks via collaboration tools. He also warns about data sprawl and emphasizes the need for robust controls in a landscape full of vulnerabilities. A fascinating exploration of how to innovate quickly without compromising sensitive data!
AI Snips
Chapters
Transcript
Episode notes
WhatsApp Is Being Used To Self-Propagate Malware
- Malware campaign abuses WhatsApp to lure users and hijack active web sessions to self-propagate.
- Attackers also distribute similar zipped payloads via phishing emails posing as trusted institutions.
Phishing Became A Point-And-Click Service
- A new phishing kit, Impact Solutions, commoditizes convincing lures with templates and evasions.
- Abnormal AI warns these kits broaden social-engineering risks and favor behavior-based detection.
FEMA Breach Traced To Unpatched Systems
- FEMA breach exploited compromised credentials and unpatched Citrix Bleed 2.0, exposing regional data.
- DHS cited lack of MFA and patching, prompting leadership changes and stronger controls.