SUSE flaw found hiding in plain port.

CyberWire Daily

N2K Networks, Inc.

Daily News, Tech News, News, Technology

4.6 • 1K Ratings

🗓️ 1 August 2025

⏱️ 27 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

A critical vulnerability in SUSE [SOO-suh] Manager allows attackers to run commands with root privilege. A joint CISA and U.S. Coast Guard threat hunt at a critical infrastructure site reveals serious cybersecurity issues. Healthcare providers across the U.S. report recent data breaches. Cybercriminals infiltrate a bank by physically planting a Raspberry Pi on a network switch. Russian state-backed hackers target Moscow diplomats to deploy ApolloShadow malware. Luxembourg investigates a major telecom outage tied to Huawei equipment. China’s cyberspace regulator summons Nvidia over alleged security risks linked to its H20 AI chips. A new report examines early indicators of system compromise. Today we are joined by Ryan Whelan, Managing Director and Global Head of Accenture Cyber Intelligence, with their analysis of Scattered Spider. Pwn2Own puts a million dollar bounty on WhatsApp zero-clicks. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire GuestOur guest today is Ryan Whelan, Managing Director and Global Head of Accenture Cyber Intelligence, discussing the possibilities of Scattered Spider. Selected Reading Critical flaw in SUSE Manager exposes enterprise deployments to compromise (Beyond Machines) CISA identifies OT configuration flaws during cyber threat hunt at critical infrastructure organization, lists cyber hygiene (Industrial Cyber) CISA Issues ICS Advisories for Rockwell Automation Using VMware, and Güralp Seismic Monitoring Systems (Cyber Security News) Florida Internal Medicine Practices Discloses November 2024 Data Breach (HIPAA Journal) Cybercrooks use Raspberry Pi to steal ATM cash (The Register) Russian Cyberspies Target Foreign Embassies in Moscow via AitM Attacks: Microsoft (SecurityWeek) Luxembourg probes reported attack on Huawei tech that caused nationwide telecoms outage (The Record) Nvidia summoned by China's cyberspace watchdog over risks in H20 chips (CGTN) Hackers Regularly Exploit Vulnerabilities Before Public Disclosure (Infosecurity Magazine) Pwn2Own hacking contest pays $1 million for WhatsApp exploit (Bleeping Computer) Audience Survey Complete our annual audience survey before August 31. Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the Cyberwire Network, powered by N2K.
0:09.7	Did you know Active Directory is targeted in 9 out of 10 cyber attacks? Once attackers get in,
0:17.9	they can take control of your entire network. That's why Sempris created Purple Knight, the free security assessment tool that scans your active directory for hundreds of vulnerabilities and shows you how to fix them.
0:30.9	Join thousands of IT pros using Purple Knight to stay ahead of threats.
0:35.5	Download it now at Sempris.com slash Purple dash night. That's Sempris.com
0:41.6	slash purple dash night.
0:43.6	A critical vulnerability in Sousa manager allows attackers to run commands with root privilege.
1:03.0	A joint Sisa and U.S. Coast Guard threat hunt at a critical infrastructure site reveals serious cybersecurity issues.
1:09.6	Healthcare providers across the U.S. report recent data breaches.
1:13.3	Cyber criminals infiltrate a bank by physically planting a raspberry pie on a network switch.
1:19.0	Russian state-backed hackers target Moscow diplomats to deploy Apollo shadow malware.
1:24.6	Luxembourg investigates a major telecom outage tied to Huawei equipment.
1:29.3	China's cyberspace regulator summons Nvidia over alleged security risks linked to its H2O AI chips.
1:36.5	A new report examines early indicators of system compromise. Today our guest is Ryan Wielin,
1:42.5	managing director and global head of Accenture Cyber Intelligence
1:45.7	with their analysis of scattered spider. And Pone to Own puts a million dollar bounty on WhatsApp
1:52.8	zero clicks. It's Friday, August 1st, 2025.
2:06.8	I'm Dave Bittner, and this is your Cyberwire Intel briefing. Thanks for joining us here today.
2:26.6	I don't know how the rest of you feel,
2:28.5	but it seems impossible to me that we are already in August.
2:33.4	A critical vulnerability in Sousa Manager
2:36.4	allows attackers to run commands with root privileges
	...

Transcript will be available on the free plan in 10 days. Upgrade to see the full transcript now.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.