Exchange hybrid flaw raises cloud alarm.

CyberWire Daily

N2K Networks, Inc.

Tech News, News, Daily News, Technology

4.8 • 1.1K Ratings

🗓️ 7 August 2025

⏱️ 28 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Microsoft warns of a high-severity vulnerability in Exchange Server hybrid deployments. A Dutch airline and a French telecom report data breaches. Researchers reveal new HTTP request smuggling variants. An Israeli spyware maker may have rebranded to evade U.S. sanctions. CyberArk patches critical vulnerabilities in its secrets management platform. The Akira gang use a legit Intel CPU tuning driver to disable Microsoft Defender. ChatGPT Connectors are shown vulnerable to indirect prompt injection. Researchers expose new details about the VexTrio cybercrime network. SonicWall says a recent SSLVPN-related cyber activity is not due to a zero-day. Ryan Whelan from Accenture is our man on the street at Black Hat. Do androids dream of concierge duty? Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest We continue our coverage from the floor at Black Hat USA 2025 with another edition of Man on the Street. This time, we’re catching up with Ryan Whelan, Managing Director and Global Head of Cyber Intelligence at Accenture, to hear what’s buzzing at the conference. Selected Reading Microsoft warns of high-severity flaw in hybrid Exchange deployments (Bleeping Computer) KLM suffers cyber breach affecting six million passengers (IO+) Cyberattack hits France’s third-largest mobile operator, millions of customers affected (The Record) New HTTP Request Smuggling Attacks Impacted CDNs, Major Orgs, Millions of Websites (SecurityWeek) Candiru Spyware Infrastructure Uncovered (BankInfoSecurity) Enterprise Secrets Exposed by CyberArk Conjur Vulnerabilities (SecurityWeek) Akira ransomware abuses CPU tuning tool to disable Microsoft Defender (Bleeping Computer) A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT (WIRED) Researchers Expose Infrastructure Behind Cybercrime Network VexTrio (Infosecurity Magazine) Gen 7 and newer SonicWall Firewalls – SSLVPN Recent Threat Activity (SonicWall) Want a Different Kind of Work Trip? Try a Robot Hotel (WIRED) Audience Survey Complete our annual audience survey before August 31. Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the Cyberwire Network, powered by N2K.
0:09.7	AI adoption is exploding, and security teams are under pressure to keep up.
0:16.9	That's why the industry is coming together at the Datasec AI conference,
0:21.4	the premier event for cybersecurity data and AI leaders, hosted by data security leader,
0:27.4	Saira.
0:28.5	Built for the industry, by the industry, this two-day conference is where real-world insights and bold solutions take center stage.
0:36.6	Datasek AI 25 is happening November 12th and 13th in Dallas.
0:41.8	There's no cost to attend.
0:43.4	Just bring your perspective and join the conversation.
0:46.7	Register now at Datasek AI 2025.com backslash cyberwire.
0:52.7	Thank you. dot com backslash cyberwire.
1:10.5	Microsoft warns of a high severity vulnerability in exchange server hybrid deployments.
1:14.0	A Dutch airline and a French telecom report data breaches.
1:18.5	Researchers reveal new HTTP request smuggling variants.
1:23.3	An Israeli spyware maker may have rebranded to evade U.S. sanctions.
1:28.0	CyberArk patches critical vulnerabilities in its secrets management platform.
1:34.2	The Akira gang uses a legit Intel CPU tuning driver to disable Microsoft Defender.
1:38.8	Chat TPT connectors are shown vulnerable to indirect prompt injection.
1:43.4	Researchers expose new details about the Vex Trio Cybercrime Network.
1:49.9	Sonic Wall says a recent SSL-VPN-related cyber activity is not due to a zero-day.
1:53.9	Ryan Whelan from Accenture is our man on the street at Black Hat and to Android's dream of concierge duty.
2:11.8	Thank you. Cyncierge duty. It's Thursday, August 7th, 2025.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.