CISA sounds the alarm on Cisco flaws.

CyberWire Daily

N2K Networks, Inc.

Daily News, Tech News, News, Technology

4.6 • 1K Ratings

🗓️ 26 September 2025

⏱️ 27 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

CISA gives federal agencies 24 hours to patch a critical Cisco firewall bug. Researchers uncover the first known malicious MCP server used in a supply chain attack. The New York SIM card threat may have been overblown. Microsoft tags a new variant of the XCSSET macOS malware. An exposed auto insurance claims database puts PII at risk. Amazon will pay $2.5 billion to settle dark pattern allegations. Researchers uncover North Korea’s hybrid playbook of cybercrime and insider threats. An old Hikvision security camera vulnerability rears its ugly head. Dan Trujillo from the Air Force Research Laboratory’s Space Vehicles Directorate joins Maria Varmazis, host of T-Minus Space Daily to discuss how his team is securing satellites and space systems from cyber threats. DOGE delivers dysfunction, disarray, and disappointment. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.CyberWire Guest Dan Trujillo from the Air Force Research Laboratory’s Space Vehicles Directorate joins Maria Varmazis, host of T-Minus Space Daily to discuss how his team is securing satellites and space systems from cyber threats and also shares advice for breaking into the fast-growing field of space cybersecurity Selected Reading Federal agencies given one day to patch exploited Cisco firewall bugs (The Record) First malicious MCP Server discovered, stealing data from AI-Powered email systems (Beyond Machines) Secret Service faces backlash over SIM farm bust as experts challenge threat claims (Metacurity) Microsoft warns of new XCSSET macOS malware variant targeting Xcode devs (Bleeping Computer) Microsoft cuts off cloud services to Israeli military unit after report of storing Palestinians' phone calls (CNBC) Auto Insurance Platform Exposed Over 5 Million Records Including Documents Containing PII (Website Planet) Amazon pays $2.5 billion to settle Prime memberships lawsuit (Bleeping Computer) DeceptiveDevelopment: From primitive crypto theft to sophisticated AI-based deception (We Live Security) Critical 8 years old Hikvision Camera flaw actively exploited again (Beyond Machines) The Story of DOGE, as Told by Federal Workers (WIRED) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the Cyberwire Network, powered by N2K.
0:09.7	AI adoption is exploding, and security teams are under pressure to keep up.
0:16.9	That's why the industry is coming together at the Datasec AI conference,
0:21.4	the premier event for cybersecurity data and AI leaders, hosted by data security leader,
0:27.4	Saira.
0:28.5	Built for the industry, by the industry, this two-day conference is where real-world insights and bold solutions take center stage.
0:36.6	Datasek AI 25 is happening November 12th and 13th in Dallas.
0:41.8	There's no cost to attend.
0:43.4	Just bring your perspective and join the conversation.
0:46.7	Register now at Datasek AI 2025.com backslash cyberwire.
0:52.7	Thank you. dot com backslash cyberwire CISSA gives federal agencies 24 hours to patch a critical Cisco firewall bug.
1:10.9	Researchers uncover the first known malicious MCP server used in a supply chain attack.
1:16.3	The New York SIM card threat may have been overblown.
1:19.6	Microsoft tags a new variant of the XCS set macOS malware.
1:24.3	An exposed auto insurance claims database puts PII at risk. Amazon will pay $2.5 billion
1:30.9	to settle dark pattern allegations. Researchers uncover North Korea's hybrid playbook of cybercrime
1:37.5	and insider threats. An old Hick Vision security camera vulnerability rears its ugly head. Dan Trujillo from the Air Force Research Laboratory Space Vehicles Directorate
1:47.9	joins Maria Vermazas, host of the T-Minus Space Daily,
1:51.4	to discuss how his team is securing satellites and space systems from cyber threats.
1:56.9	And Doge delivers dysfunction, disarray, and disappointment.
2:11.6	It's Friday, September 26, 2025.
2:15.8	I'm Dave Bittner, and this is your Cyberwire Intel briefing.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.