A rough week for safety.

OpenAI fires safety researchers for mishandling sensitive information. CISA looks to secure the next 250. Dell patches six critical flaws, while attackers exploit a FortiMail zero-day. Warlock ransomware expands its reach, and Star Blizzard scales up its phishing. Researchers map maritime GPS spoofing. An alleged Iranian hacker is extradited to the U.S., and law enforcement takes down KillSec. Our guests are John Kindervag and Dr. Chase Cunningham, discussing their new book "Cyber Resilience at Machine Speed: The Zero Trust Model for the AI Era". Clippy’s back, and this time he wants your wallet.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by John Kindervag, along with Dr. Chase Cunningham, discussing their book "Cyber Resilience at Machine Speed: The Zero Trust Model for the AI Era".

Selected Reading

Disinformation, Defense and Democracy: A Look as This Year’s Election Security (Security Magazine)

CISA launches ‘Securing the Next 250’ campaign to strengthen critical infrastructure cybersecurity and resilience (Industrial Cyber)

Dell asks admins to patch max severity CSM flaws as soon as possible (Bleeping Computer)

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks (Bleeping Computer)

Chinese ransomware group Warlock targets Spanish- and Portuguese-speaking countries (SC Media)

Russian FSB-linked hackers scale up phishing attacks against Ukraine supporters