CyberWire Daily Typhoon on the line.
7 snips
Jun 18, 2025 Viasat faced a breach by the China-backed Salt Typhoon, highlighting vulnerabilities in critical infrastructure. Microsoft’s updates unleashed unexpected flaws, creating chaos in cybersecurity. The episode examines severe risks linked to SMS authentication and the growing threat of ransomware attacks. Traditional backup solutions are critiqued, pushing for modern, AI-driven strategies in data protection. The intertwining of cybersecurity with political dynamics is also explored, stressing the importance of robust identity management.
AI Snips
Chapters
Books
Transcript
Episode notes
Microsoft Patch Dilemma
- Microsoft's June 2025 security update forces a dilemma: install a patch that breaks DHCP or remain vulnerable to severe exploits.
- This reflects a growing problem of rushed patches causing major system failures in production environments.
Urgent Linux Flaws Patch
- Admins must patch two local privilege escalation flaws on Linux immediately due to their critical risk.
- These flaws allow root access and can be chained for full system compromise.
SMS Routing Risks Exposed
- Tech giants use global low-cost SMS routing, exposing users to risks from intermediaries with links to surveillance and cybercrime.
- This industry remains largely unregulated, creating significant data vulnerabilities despite bans in some countries.
