macOS developers targeted via VS Code lures

DOGE staff face scrutiny over possible Hatch Act violations. GitLab fixes a serious 2FA bypass. North Korean hackers target macOS developers through Visual Studio Code. Researchers say the VoidLink malware may be largely AI-built. MITRE rolls out a new embedded systems threat matrix. Oracle drops a massive patch update. Minnesota DHS reports a breach affecting 300,000 people. Germany looks to Israel for cyber defense lessons. A major illicit marketplace goes dark. Our guest is Ashley Jess, Senior Intelligence Analyst from Intel 471, with a “crash course” on underground cyber markets. And auditors emerge as an unlikely line of cyber defense.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we have Ashley Jess, Senior Intelligence Analyst from Intel 471, sharing a “crash course” on how underground cyber markets and emerging trends.

Selected Reading

Trump administration concedes DOGE team may have misused Social Security data (POLITICO)

GitLab warns of high-severity 2FA bypass, denial-of-service flaws (Bleeping Computer)

North Korean Hackers Target macOS Developers via Malicious VS Code Projects (SecurityWeek)

Voidlink Linux Malware Was Built Using an AI Agent, Researchers Reveal (Infosecurity Magazine)

MITRE Launches New Security Framework for Embedded Systems (SecurityWeek)

Oracle's First 2026 CPU Delivers 337 New Security Patches (SecurityWeek)

Minnesota Agency Notifies 304,000 of Vendor Breach (GovInfo Security)

Germany and Israel Pledge Cybersecurity Alliance (BankInfo Security)

$12B Scam Market Tudou Guarantee Shuts Down (GovInfo Security)

Research reveals a surprising line of defence against cyber attacks: accountants (The Conversation)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices