CyberWire Daily Pentagon hits fast-forward on software certs.
Apr 25, 2025
The Pentagon is speeding up its software approval process, sparking debates on risk management. A major employee monitoring tool has leaked millions of screenshots, raising privacy concerns. The U.S. is investigating TP-Link for antitrust violations, while significant health data breaches affect millions. A critical zero-day vulnerability threatens numerous SAP applications. Researchers warn about AI agents executing unauthorized tasks, and new insights reveal the high costs associated with data breaches. Experts preview the upcoming Innovation Sandbox contest, celebrating 20 years of cybersecurity innovation.
AI Snips
Chapters
Transcript
Episode notes
Pentagon's AI-Driven Software Approval
- The Pentagon's new software approval system, Swift, uses AI to speed up certification processes significantly.
- It replaces the outdated risk management framework with automated reviews and requires third-party certification.
Massive Employee Screenshot Leak
- Work Composer exposed over 21 million real-time employee screenshots due to unsecured cloud storage.
- This highlights many companies' misunderstanding of shared responsibility in cloud security.
TP-Link Under Criminal Probe
- The U.S. is investigating TP-Link for alleged predatory pricing and national security risks.
- This probe continues a bipartisan scrutiny involving antitrust and commerce departments.