A little too OpenAI.

An OpenAI engineer faces charges over an alleged covert recording device. Attackers exploit a PAN-OS firewall flaw and an Ivanti zero-day. Aoki infostealer hunts AI credentials. Researchers uncover critical weaknesses in an AI gateway. CikaBika Bot turns Discord into a command center. Online ads deliver mercenary spyware without a click. Microsoft disrupts a massive Chinese-language phishing operation. And INTERPOL leads an international crackdown on child sexual abuse material. Character.ai runs out of tokens.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today, we are featuring Kieran Human, Lead Cybersecurity Engineer at ThreatLocker, who guested on Hacking Humans with Maria Varmazis and Joe Carrigan this week. Tune in to listen to their full conversation here and join the crew including Dave Bittner every Thursday on your favorite podcast app.

Selected Reading

Office of Public Affairs | Saudi National Arrested for Installing Surreptitious Audio Recording Device at OpenAI (US Department of Justice)

Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix (CSO Online)

CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials (Cyber Security News)

New Aoki Infostealer Targets AI Coding Assistant Credentials (Infosecurity Magazine)

Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool (Infosecurity Magazine)

CikaBika Bot RAT Uses Discord for C&C (Securi