CyberWire Daily The SharePoint siege goes strategic.
12 snips
Jul 22, 2025 
Michael Daniel, a key figure at the Cyber Threat Alliance (CTA), dives into the pressing world of cybersecurity. He discusses the recent confusion over Microsoft SharePoint zero-days and highlights the troubling rise of AI-driven ransom negotiations. Daniel emphasizes the need for collaboration and trust among cybersecurity entities, drawing from lessons learned during incidents like WannaCry. The conversation further explores the evolving challenges in public-private partnerships and the critical responses to state-sponsored cyber threats.
AI Snips
Chapters
Transcript
Episode notes
CrushFTP Zero-Day Exploitation Insight
- CrushFTP zero-day exploited actively worldwide mainly on systems using outdated versions.
- Threat actors disguise vulnerable systems as updated to avoid detection.
UK's Strategic Ransomware Response
- UK proposes banning ransomware payments by public sector entities to disrupt cybercriminal financial models.
- Proposal includes mandatory ransomware payment notifications and measures to protect critical infrastructure.
AI-Powered Ransomware Negotiations
- New ransomware group Global Group uses an AI chatbot to automate victim negotiations.
- This automation allows scalable psychological pressure across time zones.