
CyberWire Daily War comes for the cloud.
8 snips
Apr 3, 2026 Brandon Karpf, leader in international public‑private partnerships and former U.S. intelligence officer, discusses defending critical infrastructure amid geopolitical cyber threats. He covers cloud data centers targeted in wartime, Chinese dark‑web intelligence leaks, a video‑conferencing zero‑day in Asia, and widespread credential‑harvesting campaigns. Short, urgent takes on threats and community actions.
AI Snips
Chapters
Transcript
Episode notes
Cloud Data Centers Become Wartime Targets
- Data centers and cloud regions are now dual-use targets in wartime, creating real physical and connectivity risks for enterprises.
- Dave Bittner cites strikes framed as responses to alleged U.S. military use of commercial platforms and risks to submarine cables like the Strait of Hormuz.
Massive Dark Web Intelligence Leak Shows State‑Scale Monitoring
- A nearly 1 TB publicly accessible intelligence database tracked a billion breach records tied to Chinese state interests.
- UpGuard found annotated monitoring of Tor markets, Telegram channels, and journalists, showing pre-positioned surveillance-scale collection.
Trusted Update Mechanism Abused To Distribute Malware
- Attackers used TrueConf's update mechanism to distribute malicious updates to dozens of Asian government agencies.
- Checkpoint found compromised on-prem TrueConf servers replaced legitimate packages, enabling HAVOC-linked persistence and lateral movement.
