VibeCoding exposes insecure AI-built apps

CISA orders rapid patching of actively exploited Ivanti zero-day. Canvas gets hacked during finals week. Dirty Frag is a new Linux zero-day. Researchers document a serious Claude Chrome extension bug. Meta ends Instagram encryption. PCPJack malware clean house before moving in. A new report highlights quantum-era cryptographic threats. Cloudflare announces layoffs amidst AI deployment. Sri Lankan police shut down a scam center. Maria Varmazis joins me to look back at ten years of geopolitics in cyber. Vibe coding reveals valuable data. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we’re previewing a special edition of CyberWire Daily’s 10th anniversary series, where N2K CyberWire’s Maria Varmazis and Dave Bittner revisit a decade of cyber geopolitics and warfare.

Selected Reading

CISA gives feds four days to patch Ivanti flaw exploited as zero-day (Bleeping Computer)

​​Hackers ate my homework: Educational SaaS Canvas down after cyberattack (The Register)

New Linux 'Dirty Frag' zero-day gives root on all major distros (Bleeping Computer)

Flaw in Claude’s Chrome extension allowed ‘any’ other plugin to hijack victims’ AI (CyberScoop)

Meta U-turns on encryption push for Instagram as DMs go plaintext (The Register)

‘PCPJack’ Worm Removes TeamPCP Infections, Steals Credentials (Security Week)

Quantum Risk Explained (Recorded Future)

Building for the future (Cloudflare)

Sri Lanka makes 37 arrests as it raids another scam centre (Bitdefender)

Thousands of Vibe-Coded Apps Expose Corporate and Personal Data on the Open Web (WIRED)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices