Shut it down before they do.

Kiteworks urges customers pull the plug on vulnerable servers. CISA lays out its election security plan. Known vulnerabilities linger unpatched. Big AI labs consider a new standards body. Questions surround claims of an OpenAI Medicare hack. File notifications become a privacy leak. SectopRAT hides in audio software. A new Android banking trojan takes control. An attacker puts open-source AI agents to work hacking hundreds of organizations. A Rydox cybercrime marketplace operator pleads guilty. Our guest is Todd Thorsen, CISO of CrashPlan, with ways to prepare for and react to critical infrastructure campaigns. Americans give AI the side-eye. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Todd Thorsen, CISO of CrashPlan, discusses ways to prepare for and react to critical infrastructure campaigns, and how AI is contributing to a bigger and more disruptive attack surface. Selected Reading Imminent Zero-Day Attack: KiteWorks Urges Customers to Shut Down Servers (Heise) CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks (SecurityWeek) Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated (Hackread) Google, OpenAI, Anthropic Plan Frontier AI Standards Body (GovInfo Security) Doubts grow over claims OpenAI agent hacked Australian Medicare portal (The Record) Windows, Linux, Android File Notification Systems Leak User Activity (SecurityWeek) SectopRAT Abuses Legitimate Audio Software Files to Steal PC Data (Hackread) RemControl Banking Trojan Gives Attackers Remote Control of Android Devices (Infosecurity Magazine) Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs (The Register) Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court (SecurityWeek) Americans Fear AI Will Make the World Worse, Love It Anyway (404 Media) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices