Building a great firewall around AI.

China embraces open AI models, then worries it’s become a national security risk. The cyberattack on Minnesota water systems proves larger than first reported. CISA updates its SBOM guidance. AI supercharges dangling DNS attacks. Researchers uncover a self-propagating Copilot worm. A critical Rails flaw demands urgent patching. Mac users are lured into installing malware through fake Claude guides. Amazon links a string of NPM compromises to North Korea. And Russia charges Telegram founder Pavel Durov with aiding terrorism. Ben Yelin joins us with a border search case that’s breaking new ground. Don’t bite the North Korean hand that feeds you.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Ben Yelin from University of Maryland Center for Cyber Health and Hazard Strategies talking about a border search case that’s breaking new ground. If you enjoyed this conversation, check out Ben on the Caveat podcast here.

Selected Reading

As China’s A.I. Gets Stronger, It Poses New Risks to Beijing (New York Times)

Minnesota Water Utilities Suffer ‘Coordinated Cyber Attack’ (GovTech)

CISA Updates Software Bill of Materials Guidance to Strengthen Supply Chain Security (HSToday)

‘DangleGeddon’: AI Could Weaponize Forgotten DNS Records at Global Scale (SecurityWeek)

Word worm crawls into Copilot, spreads chaos (The Register)

Possible ar