Storm clouds over the waterworks.

CISA rides out a Cyber Storm. The EU struggles to share cyber threat information. Nightmare Eclipse drops another Defender zero-day. TASK#STOMP steals business documents. North Korean operatives fake their way through job interviews. A genetics lab pays $700,000 over a phishing breach. A zero-day in Meta’s Muse AI assistant opens the door to privilege hijacking. Marc Woolward, Senior Advisor to Humanix and former CTO for Goldman Sachs, discussing social engineering and vishing attacks. Infiltrating Team PCP. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Marc Woolward, former CTO for Goldman Sachs and Senior Advisor to Humanix, discussing social engineering/vishing attacks and how ShinyHunters continues to use this method on other industries. Selected Reading CISA’s Cyber Storm X tests cybersecurity preparedness across transportation, water and wastewater sectors (Industrial Cyber) Another worry for water systems: infostealer exposure (CyberScoop) Poor data sharing undermining EU cyber defences, auditors say (Reuters) New TASK#STOMP Windows Backdoor Enables Continuous Document Theft (Hackread) New Windows Defender zero-day blocks Microsoft antivirus updates (Bleeping Computer) Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme (SecurityWeek) Ambry Genetics Pays $700K HIPAA Fine in Phishing Breach (GovInfo Security) Meta Muse AI app flaw lets local malware redirect dictation traffic (The Register) An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang (WIRED) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices