Behind the friendly face.

Hugging Face reports an autonomous AI-powered breach. Ernst & Young discloses a client data breach. Attackers are actively exploiting a critical ServiceNow flaw. Ransomware gangs sharpen their tactics against law firms. Capital One open-sources an AI security tool. Text salting fools AI email filters. Hidden gambling apps slip into Apple’s App Store. And federal agents arrest a Florida man accused of spreading malware through video games. Monday business briefing. Tim Starks from CyberScoop discusses election integrity. Fake feathers lead to faulty findings.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Tim Starks from CyberScoop discussing election integrity and the Trump administration’s waning influence. You can read more here.

Selected Reading

AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign (Security Affairs)

Ernst & Young Data Breach Affects Personal, Financial Information (SecurityWeek)

Critical ServiceNow code execution flaw now exploited in attacks (Bleeping Computer)

How ransomware tactics against law firms are changing (Wisconsin Law Journal)

Capital One Open Sources AI-Powered ‘VulnHunter’ Security Tool (SecurityWeek)

AI spam filters are getting suckered by old-school text salting (The Register)

Investigation reveals dozens of disguised gambling apps on the App Store in Brazil (9to5Mac)