Welcome home, hacker.

CERT/CC warns of an unpatched Tenda router backdoor. Adobe races to patch an actively exploited ColdFusion flaw. Canada pulls back the curtain on offensive cyber operations. Anthropic quietly removes hidden tracking from Claude Code. Chinese AI gains momentum as U.S. providers sweeten the deal. U.S. cloud firms challenge South Korea’s new security rules. Microsoft’s device telemetry helps unmask an alleged Scattered Spider hacker. And Spanish police arrest an alleged pro-Russia hacktivist.Orla Daly, CIO at Skillsoft, discusses if AI is already bypassing its own guardrails and why most organizations aren't ready. The stochastic parrot is back, and it’s tired of being misquoted.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Orla Daly, CIO at Skillsoft, discusses if AI is already bypassing its own guardrails and why most organizations aren't ready.

Selected Reading

Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available (Security Affairs)

Hackers Exploit Maximum Severity Adobe ColdFusion Flaw (Infosecurity Magazine)

Canadian spy agency says it hacked drug traffickers, extremists, and a ransomware gang last year (TechCrunch)

Secret Claude tracker shocks users after Anthropic’s anti-surveillance stance (Ars Technica)

Chinese AI models are gaining ground with U.S. companies as OpenAI, Anthropic costs surge (CNBC)

AI Giants Are Handing Out Tons of Free Computing Power to Grab Startup Share (Wall Street Journal)

U.S. Big T