A little too OpenAI.

An OpenAI engineer faces charges over an alleged covert recording device. Attackers exploit a PAN-OS firewall flaw and an Ivanti zero-day. Aoki infostealer hunts AI credentials. Researchers uncover critical weaknesses in an AI gateway. CikaBika Bot turns Discord into a command center. Online ads deliver mercenary spyware without a click. Microsoft disrupts a massive Chinese-language phishing operation. And INTERPOL leads an international crackdown on child sexual abuse material. Character.ai runs out of tokens. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today, we are featuring Kieran Human, Lead Cybersecurity Engineer at ThreatLocker, who guested on Hacking Humans with Maria Varmazis and Joe Carrigan this week. Tune in to listen to their full conversation here and join the crew including Dave Bittner every Thursday on your favorite podcast app.

Selected Reading

Office of Public Affairs | Saudi National Arrested for Installing Surreptitious Audio Recording Device at OpenAI (US Department of Justice)

Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix (CSO Online)

CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials (Cyber Security News)

New Aoki Infostealer Targets AI Coding Assistant Credentials (Infosecurity Magazine)

Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool (Infosecurity Magazine)

CikaBika Bot RAT Uses Discord for C&C (SecurityWeek)

AdFection: How mercenary spyware invades victims’ devices through targeted advertising (CyberScoop)

Police arrests 95 suspects in international CSAM crackdown action (Bleeping Computer)

Character.ai Bankruptcy Is First AI Bubble Domino to Fall (404 Media)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices