Apple has a message for you.

Apple sends out threat notifications to users targeted by spyware. Trivy, not LiteLLM, was the original source of the 2,500-organization supply chain attack. French tax authority confirms data breach. Chinese hack-for-hire group conducts espionage and cybercrime simultaneously. Ukrainian police shut down 94 scam call centers. Former data analyst jailed for insider extortion plot. New macOS malware spreads via ClickFix. Today we are joined by Tom Kellermann, VP of AI Security at TrendAI, discussing the machine-speed war for financial control. And the glitch in the surveillance matrix.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Tom Kellermann, VP of AI Security at TrendAI, discussing the machine-speed war for financial control. If you want to learn more on this topic, check out the article here. You can also check out Tom on the AI Security Brief here.

Selected Reading

If Apple sends you a push notification alerting you to a spyware attack, take it seriously (TechCrunch)

Trivy, Not LiteLLM Behind the 2,500 Org Compromise (SecurityWeek)

France investigates tax authority breach after hacker claims 600,000 victims (The Record)

Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side (Symantec)

AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers (Jamf)

Ukraine shuts down 94 fraudulent call centers, seize millions in cash (BleepingComputer)