CISA issues urgent warning.

CyberWire Daily

CISA issues a warning about a critical security flaw in Palo Alto Networks’ Expedition tool. A federal agency urges employees to limit phone use in response to Chinese hacking. Law enforcement is perplexed by spontaneously rebooting iPhones. A key supplier for oilfields suffers a ransomware attack. Hewlett Packard Enterprise (HPE) patches multiple vulnerabilities in its Aruba Networking access points. Cybercriminals use game-related apps to distribute Winos4.0. Germany proposes legislation protecting security researchers. The TSA proposes new cybersecurity regulations for critical transportation infrastructure. Our guest is Aaron Griffin, Chief Architect from Sevco Security, sharing the discovery of a significant Apple iOS bug involving iPhone Mirroring.  AI tries to wing it in a Reddit group, but moderators put a fork in it. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Our guest is Aaron Griffin, Chief Architect from Sevco Security, sharing the discovery of a significant Apple iOS 18 and macOS Sequoia privacy bug that exposes employee personal iPhone apps and data to companies through iPhone Mirroring. Read Sevco’s blog on the topic.

Selected Reading

CISA warns of Critical Palo Alto Networks Vulnerability Exploited in Attacks (GB Hackers)

U.S. Agency Warns Employees About Phone Use Amid Ongoing China Hack (Wall Street Journal)

Host of House panels getting briefed on major Chinese hacker telecom breaches (CyberScoop)

Police Freak Out at iPhones Mysteriously Rebooting Themselves, Locking Cops Out (404 Media)

Texas-based oilfield supplier faces disruptions following ransomware attack (The Record)

HPE Patches Critical Vulnerabilities in Aruba Access Points (SecurityWeek)

Winos4.0 hides in gaming apps to hijack Windows systems (The Register)

Germany drafts law to protect researchers who find security flaws (Bleeping Computer)

TSA proposes new cybersecurity rule for surface transportation, seeks public feedback (Industrial Cyber)

Reddit’s ‘Interesting as Fuck’ Community Rules That AI-Generated Video Is Not Interesting (404 Media)

Share your feedback.

We want to ensure that you are getting the most out of the podcast. Please take a few minutes

المضيفون والضيوف

للاستماع إلى حلقات ذات محتوى فاضح، قم بتسجيل الدخول.

اطلع على آخر مستجدات هذا البرنامج

قم بتسجيل الدخول أو التسجيل لمتابعة البرامج وحفظ الحلقات والحصول على آخر التحديثات.

تحديد بلد أو منطقة

أفريقيا والشرق الأوسط، والهند

آسيا والمحيط الهادئ

أوروبا

أمريكا اللاتينية والكاريبي

الولايات المتحدة وكندا