Hackers hiding in plain sight.

Medusa’s reach grows. Cl0p expands its victim list. The DOJ charges 17 alleged Iranian hackers. CISA sounds the alarm on four exploited vulnerabilities. TWINLOOT hides in plain sight inside Microsoft 365. Maria Varmazis shares the latest from the space-cyber realm as Ukraine strikes Russia’s satellite nerve center. The FDA considers guardrails for AI medical devices. Expired credit cards get an unexpected second life. A disgruntled contractor heads to prison. Dave Bittner sits down with Brian Vecci, Field CTO at Varonis, at Black Hat USA to discuss how AI is calling your security bluff. Highway hijinks meet high-tech hardware.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

At Black Hat USA, Dave Bittner sat down with Brian Vecci, Field CTO at Varonis, as they discussed how AI is calling your security bluff. If you enjoyed this conversation, be sure to check out the full interview here.

Selected Reading

CISA: Medusa ransomware hit over 500 critical infrastructure orgs (Bleeping Computer)

US charges Iranians for sprawling hacking campaign on government agencies, universities (The Record)

Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign (SecurityWeek)

CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities (SecurityWeek)

New TWINLOOT Malware Steals Windows Passwords Via Fake Lock Screen (Hackread)

Ukraine says it hit Russian rocket centre linked to Starlink-style network (CNBC)

FDA Weighing Possible Regs for GenAI Medical Devices (G