A rough week for safety.

OpenAI fires safety researchers for mishandling sensitive information. CISA looks to secure the next 250. Dell patches six critical flaws, while attackers exploit a FortiMail zero-day. Warlock ransomware expands its reach, and Star Blizzard scales up its phishing. Researchers map maritime GPS spoofing. An alleged Iranian hacker is extradited to the U.S., and law enforcement takes down KillSec. Our guests are John Kindervag and Dr. Chase Cunningham, discussing their new book "Cyber Resilience at Machine Speed: The Zero Trust Model for the AI Era". Clippy’s back, and this time he wants your wallet. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by John Kindervag, along with Dr. Chase Cunningham, discussing their book "Cyber Resilience at Machine Speed: The Zero Trust Model for the AI Era".

Selected Reading

Disinformation, Defense and Democracy: A Look as This Year’s Election Security (Security Magazine)

CISA launches ‘Securing the Next 250’ campaign to strengthen critical infrastructure cybersecurity and resilience (Industrial Cyber)

Dell asks admins to patch max severity CSM flaws as soon as possible (Bleeping Computer)

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks (Bleeping Computer)

Chinese ransomware group Warlock targets Spanish- and Portuguese-speaking countries (SC Media)

Russian FSB-linked hackers scale up phishing attacks against Ukraine supporters (The Record)

367,000-Ship Study Finds Global GPS Spoofing, Red Sea Activity Before Grounding (Hackread)

In Rare Move, Alleged Iranian State Hacker Extradited to US (SecurityWeek)

Police Target KillSec Ransomware Group with Arrests and Seizures (Infosecurity Magazine)

Crypto Scammers Hijack Microsoft's Official X Account  (SecurityWeek)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices