Astra, la vista, baby.

OpenAI holds back its newest model over safety concerns. Kiteworks lifts its precautionary shutdown. Apple patches an exploited zero-day. Japanese rail operators disclose cyberattacks. An Anthropic authentication flaw opens the door to account takeover. Thousands of Supabase databases leak data. NeedyMantis targets telecoms and governments. A Vietnamese national faces charges in a multimillion-dollar crypto laundering scheme. James Winebrenner, CEO of Elisity, is sharing barriers to compliance and challenges for manufacturers as the EU Cyber Resilience Act is implemented. If you’re hoping for credit, be careful what you share.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

James Winebrenner, CEO of Elisity, is sharing barriers to compliance and challenges for manufacturers as the EU Cyber Resilience Act (EU CRA) is implemented.

Selected Reading

OpenAI Says It Will Not Release Newest Astra A.I. Model Over Safety Concerns (The New York Times)

Florida asks for order to halt ChatGPT development (Axios)

Kiteworks Urges Customers to Restart Systems After Shutdown Notice (Infosecurity Magazine)

Apple patches CoreGraphics zero-day flaw exploited in attacks (Bleeping Computer)

Japanese Railway Operators Hit with Weekend Cyber Attacks (Infosecurity Magazine)

Cycode Uncovers Account Takeover in Anthropic's MCP Python SDK (Cycode)

Everything Everywhere: Systemic Data Exposure in Supabase Apps (UpGuard)

Daemon Tools Hackers' NeedyMantis Malware Dissected by Microsoft