Multiple root-level risks resolved.

CyberWire Daily

N2K Networks, Inc.

Technology, Tech News, Daily News, News

4.8 • 1.1K Ratings

🗓️ 24 February 2026

⏱️ 28 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

SolarWinds patches four critical remote code execution vulnerabilities. A ransomware attack on Conduant puts the data of over 25 million Americans at risk. RoguePilot enables Github repository takeovers. ZeroDayRat targets Android and iOS devices. North Korea’s Lazarus group deploy Medusa ransomware against organizations in the U.S. and the Middle East. Attackers’ breakout times drop to under half an hour. CISA maintains its mission despite staffing challenges. Russian satellites draw fresh scrutiny. Two South Korean teenagers are charged with breaching Seoul’s public bike service. Krishna Sai, CTO at SolarWinds, discusses why leaders should focus less on speculating about an AI bubble, and more on how to quantify AI’s tangible contributions. The Pope pushes prayerful priests past predictable programs. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Krishna Sai, CTO at SolarWinds, discussing why leaders should focus less on speculating about an AI bubble, and more on how to quantify AI’s tangible contributions. Selected Reading Critical SolarWinds Serv-U flaws offer root access to servers (Bleeping Computer) Massive Conduent Data Breach Exfiltrates 8 TB Affects Over 25 Million Americans (GB Hackers) GitHub Issues Abused in Copilot Attack Leading to Repository Takeover (SecurityWeek) New ZeroDayRAT Malware Claims Full Monitoring of Android and iOS Devices (Hackread) North Korean state hackers seen using Medusa ransomware in attacks on US, Middle East (The Record) CrowdStrike says attackers are moving through networks in under 30 minutes (CyberScoop) Shutdown at D.H.S. Extends to Cyber Agency, Adding to Setbacks (The New York Times) From Cold War interceptors to Ukraine: how Russia came to park spy satellites next to the West’s most sensitive tech in orbit (Meduza) Korean cops charge two teens over Seoul bike hire breach (The Register) Pope tells priests to use their brains, not AI, to write homilies (EWTN News) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the Cyberwire Network, powered by N2K.
0:05.7	Solar wins, patches four critical remote code execution vulnerabilities.
0:21.6	A ransomware attack on conduit puts the data of over 25 million Americans at risk.
0:26.6	Rogue Pilot enables GitHub repository takeovers.
0:30.6	Zero-day rat targets Android and iOS devices.
0:33.6	North Korea's Lazarus Group deploys Medusa ransomware. Attackers' breakout times drop to
0:40.5	under half an hour. Sissa maintains its mission despite staffing challenges. Russian satellites draw
0:47.0	fresh scrutiny. Two South Korean teenagers are charged with breaching Seoul's public bike service.
0:53.4	Krishna-Sai, CTO at Solar Winds,
0:56.0	discusses why leaders should focus less on speculating about the AI bubble
1:00.0	and more about how to quantify AI's tangible contributions.
1:04.9	And the Pope pushes prayerful priests past predictable programs.
1:19.1	Music priests past predictable programs. It's Tuesday, February 24th, 20206.
1:23.0	I'm Dave Bittner, and this is your Cyberwire Intel briefing.
1:40.1	Thank you. Dave Bittner and this is your Cyberwire Intel Briefing. Thanks for joining us here today. It's great to have you with us.
1:44.2	Solar Winds has released updates to address four critical remote code execution vulnerabilities
1:49.6	in its ServeU file transfer software, which runs on Windows and Linux systems.
1:56.2	The most severe flaw is a broken access control issue that allows attackers with high privilege to create
2:02.5	a system administrator account and execute arbitrary code with route or administrative permissions.
2:09.3	Solar winds also patch two type confusion vulnerabilities and an insecure direct object reference
2:16.4	or IOR flaw,
2:18.1	each of which could also enable root-level code execution.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.