Podcasts about cisa

GPT escapes the sandbox and hacks Huggingface. SolarWinds patches multiple critical flaws. CISA orders patching of a critical Langflow AI vulnerability. A Paidwork breach affects over 23 million users. A recently patched SharePoint vulnerability is under active exploitation. Oracle patches over 1,400 vulnerabilities. Apps turn Smart TVs into residential proxies. The FCC considers expanding direct to satellite communications. German and U.S. authorities dismantle a major phishing-as-a-service (PhaaS) platform. Our guest is Jimmy McNary, Deputy Federal CTO at Semperis, discussing comprehensive identity security assessments for Microsoft GCC. AI models can't resist bending the rules. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest On our Industry Voices segment, we are joined by Jimmy McNary, Deputy Federal CTO at Semperis, discussing how Purple Knight now delivers comprehensive identity security assessments for Microsoft GCC high environment. Selected Reading OpenAI Claims Its AI Models Went Rogue and Hacked Another Company (Infosecurity Magazine) SolarWinds Serv-U Update Fixes 15 Critical Vulnerabilities Enabling Remote Code Execution as Root (GB Hackers) CISA orders urgent action on actively exploited Langflow RCE flaw (Bleeping Computer) Paidwork breach exposes data of 23 million users: Check if you're affected (Malwarebytes) Fourth SharePoint Vulnerability Exploited in Past Month's Wave of Attacks (SecurityWeek) Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates (SecurityWeek) Chairman Carr Proposes to Expand Direct-to-Device Satellite Broadband Connectivity to Unlicensed Wireless Devices (FCC) LG to Ban Residential Proxies from Smart TV Apps (Krebs on Security) Police dismantle Kratos phishing platform, arrest developer (Bleeping Computer) AI's cheatin' heart will make you weep (The Register) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Interview with Keith Hollender, CEO and Co-Founder of Arcova Why AI Security Is Becoming an Execution Problem, Not Just a Governance Problem As enterprises move from AI experimentation to adoption at scale, security leaders are under pressure to enable innovation without introducing unmanaged risk. The challenge is no longer whether organizations should pursue AI, but how they can govern it, secure it, and operationalize it in ways that stand up to real-world business and threat conditions. In this conversation, Keith Hollender discusses what Arcova is seeing across enterprise environments as organizations work to connect cybersecurity, AI governance, resilience, and broader transformation priorities. He explores where companies are getting stuck, why traditional siloed approaches are falling short, and what it takes to move from strategy decks to secure execution. Keith also shares how Arcova's practitioner-led, relationship-driven model helps organizations turn complexity into clarity by embedding with client teams, solving urgent problems hands-on, and building capabilities designed to last. The conversation also covers Arcova's continued growth, including expansion into the Middle East, and what global demand signals reveal about the next phase of cybersecurity and AI consulting. Segment Resources: https://arcova.com/sectors/ https://arcova.com/category/blog/ For more information about Arcova and how they can help your enterprise shape what's next, please visit: https://securityweekly.com/arcova Topic: CMMC Pause creating chaos among federal contractors This one sent some shockwaves through the CMMC community, particularly the hundreds or thousands of folks gearing up to assist with the validation that phase 2 aimed to provide. The TL;DR - defense contractors have been required to comply with CMMC controls for years, but self-attestation means that many probably haven't been meeting the requirements. Perhaps, rather than have tons of defense contractors fail the test, they just suspended the requirement for the test itself. I think Howard Holton nails it here when he says: "100,000 defense contractors needed third-party assessments. Roughly 100 authorized assessors exist. That's 1,000 assessments each, with the deadline in November." PCI already created a model that works for a scenario like this. If you're small, you self-assess. If you're big enough, an independent auditor comes to check you out once a year. I'm sure they were probably aware of this and chose not to go down that path for some reasons. I'm not aware of those reasons. What this means: Phase II is paused Phase I self-assessments still in place (note, however, that phase II existed, because self-attestation didn't work) NIST SP 800-171 Rev 2 and DFARS 252.204-7012 compliance still required 60-day review aims to reform CMMC DoW opened an RFI for industry perspectives on what they should do CMMC characterized as a "compliance burden" and "red tape" False Claims Act and DOJ's cyber-fraud enforcement are still on the table More resources: CIO Davies' post on Twitter Administrator of the Small Business Administration, Kelly Loeffler's post A useful LinkedIn post that breaks down a lot of what this really means (and doesn't) Weekly Enterprise News Finally, in the enterprise security news, will AI eliminate more cybersecurity jobs than it creates? Linus's law, amended the biggest patch Tuesday ever AI context bombs AI workflows are a security disaster people using AI in areas they don't understand ransomware crews are hitting legal firms hard lessons learned from CISA's recent github leak demystify your USB cables! All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-468

Welcome to this week's episode of the PEBCAK Podcast!  We've got four amazing stories this week so sit back, relax, and keep being awesome!  Be sure to stick around for our Dad Joke of the Week. (DJOW) Follow us on Instagram @pebcakpodcast   Please share this podcast with someone you know!  It helps us grow the podcast and we really appreciate it!   Simple 6 signup link https://simple6.co/r/CFUR98   Kalshi's flight-cancellation betting market Kalshi filed with the CFTC to let traders bet on airline flight-cancellation rates, even as the company fights insider-trading scandals and nearly 20 gambling-related lawsuits. https://www.inc.com/moses-jeanfrancois/kalshi-wants-to-make-money-off-of-canceled-flights-new-sky-trading-plan/91374679 Kalshi's self-certification filing would let users trade "yes/no" contracts on whether a set percentage of flights at a given airport get canceled in a window, using FlightAware data (DOT stats as backup); preemptive cancellations count, delays/diversions don't — this comes as Kalshi is also defending nearly 20 federal/state suits (including one joined by NY AG Letitia James) arguing its sports contracts are unlicensed gambling, and after it fined three Congressional candidates for insider trading in April.   Trump's teleprompter operator under CFTC investigation The CFTC is investigating Trump's longtime teleprompter operator, Gabriel Perez, for allegedly using advance knowledge of the president's speeches to win big on Kalshi's "mention markets." https://www.cftc.gov/filings/ptc/ptc0714269602.pdf https://apnews.com/article/trump-teleprompter-insider-trading-kalshi-ccd6d0ec68e1eb15d100ad770d91abae Perez, who's run Trump's teleprompter since 2016 and reportedly made over $100,000 (Kalshi says north of $90,000 in frozen profits) betting on "mention markets" tied to specific words Trump would say in speeches, was put on unpaid leave after Kalshi's surveillance team flagged the trades and referred the case to the CFTC — the White House called it "a disgrace," and it marks the first known case of a sitting administration employee investigated for prediction-market insider trading.   Microsoft's record-breaking July Patch Tuesday Microsoft's July 2026 Patch Tuesday fixed a record 570 flaws — including three zero-days — while a researcher dropped a new unpatched Windows PoC exploit within hours. https://www.bleepingcomputer.com/news/microsoft/microsoft-july-2026-patch-tuesday-fixes-massive-570-flaws-3-zero-days/ https://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/ https://thehackernews.com/2026/07/researcher-drops-new-windows-zero-day.html The 570-flaw haul (59 critical) included two actively-exploited zero-days — an AD FS elevation-of-privilege bug (CVE-2026-56155) and a SharePoint elevation-of-privilege flaw (CVE-2026-56164), both now on CISA's KEV list — plus a publicly disclosed BitLocker bypass; hours after patches dropped, researcher "Chaotic Eclipse" released a working PoC called LegacyHive targeting Windows' Profile Service that functions even on fully patched systems, continuing a months-long, increasingly public feud with Microsoft over disclosure timing.   China's AI companion chatbot crackdown China enacted rules banning "emotional reliance" on AI companion chatbots and virtual relationships with minors, part of a broader push tied to the country's fertility concerns. https://www.wsj.com/tech/ai/china-wants-more-babiesso-its-cracking-down-on-chatbot-love-affairs-65cd6c82 The new rules require companion-chatbot makers to get regulatory pre-approval, alert a user's emergency contact if they detect an emotional crisis, and have already pushed ByteDance's Doubao, Alibaba's Qwen, and Tencent's Yuanbao to shut down custom AI-persona features; researchers cited by WSJ say Beijing's underlying worry is that people bonding with chatbots could "take them out of the marriage market," tying directly into China's fertility push.   UK's midnight social media curfew for teens The UK is proposing a default midnight-to-6am social media curfew for 16- and 17-year-olds, with autoplay and infinite scroll switched off by default too. https://www.reuters.com/technology/uk-plans-default-midnight-social-media-curfew-16-17-year-olds-2026-07-14/ The curfew (opt-out, not mandatory) follows last month's full under-16 social media ban and is expected to take effect by spring 2027; a government trial of 300+ teens found it delivered the most consistent sleep benefits of the options tested, though critics like Shadow Education Secretary Laura Trott called an easily-switched-off curfew pointless.   Dad Joke of the Week (DJOW)   Find the hosts on LinkedIn: Chris - https://www.linkedin.com/in/chlouie/ Brian - https://www.linkedin.com/in/briandeitch-sase/

Interview with Keith Hollender, CEO and Co-Founder of Arcova Why AI Security Is Becoming an Execution Problem, Not Just a Governance Problem As enterprises move from AI experimentation to adoption at scale, security leaders are under pressure to enable innovation without introducing unmanaged risk. The challenge is no longer whether organizations should pursue AI, but how they can govern it, secure it, and operationalize it in ways that stand up to real-world business and threat conditions. In this conversation, Keith Hollender discusses what Arcova is seeing across enterprise environments as organizations work to connect cybersecurity, AI governance, resilience, and broader transformation priorities. He explores where companies are getting stuck, why traditional siloed approaches are falling short, and what it takes to move from strategy decks to secure execution. Keith also shares how Arcova's practitioner-led, relationship-driven model helps organizations turn complexity into clarity by embedding with client teams, solving urgent problems hands-on, and building capabilities designed to last. The conversation also covers Arcova's continued growth, including expansion into the Middle East, and what global demand signals reveal about the next phase of cybersecurity and AI consulting. Segment Resources: https://arcova.com/sectors/ https://arcova.com/category/blog/ For more information about Arcova and how they can help your enterprise shape what's next, please visit: https://securityweekly.com/arcova Topic: CMMC Pause creating chaos among federal contractors This one sent some shockwaves through the CMMC community, particularly the hundreds or thousands of folks gearing up to assist with the validation that phase 2 aimed to provide. The TL;DR - defense contractors have been required to comply with CMMC controls for years, but self-attestation means that many probably haven't been meeting the requirements. Perhaps, rather than have tons of defense contractors fail the test, they just suspended the requirement for the test itself. I think Howard Holton nails it here when he says: "100,000 defense contractors needed third-party assessments. Roughly 100 authorized assessors exist. That's 1,000 assessments each, with the deadline in November." PCI already created a model that works for a scenario like this. If you're small, you self-assess. If you're big enough, an independent auditor comes to check you out once a year. I'm sure they were probably aware of this and chose not to go down that path for some reasons. I'm not aware of those reasons. What this means: Phase II is paused Phase I self-assessments still in place (note, however, that phase II existed, because self-attestation didn't work) NIST SP 800-171 Rev 2 and DFARS 252.204-7012 compliance still required 60-day review aims to reform CMMC DoW opened an RFI for industry perspectives on what they should do CMMC characterized as a "compliance burden" and "red tape" False Claims Act and DOJ's cyber-fraud enforcement are still on the table More resources: CIO Davies' post on Twitter Administrator of the Small Business Administration, Kelly Loeffler's post A useful LinkedIn post that breaks down a lot of what this really means (and doesn't) Weekly Enterprise News Finally, in the enterprise security news, will AI eliminate more cybersecurity jobs than it creates? Linus's law, amended the biggest patch Tuesday ever AI context bombs AI workflows are a security disaster people using AI in areas they don't understand ransomware crews are hitting legal firms hard lessons learned from CISA's recent github leak demystify your USB cables! All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-468

Interview with Keith Hollender, CEO and Co-Founder of Arcova Why AI Security Is Becoming an Execution Problem, Not Just a Governance Problem As enterprises move from AI experimentation to adoption at scale, security leaders are under pressure to enable innovation without introducing unmanaged risk. The challenge is no longer whether organizations should pursue AI, but how they can govern it, secure it, and operationalize it in ways that stand up to real-world business and threat conditions. In this conversation, Keith Hollender discusses what Arcova is seeing across enterprise environments as organizations work to connect cybersecurity, AI governance, resilience, and broader transformation priorities. He explores where companies are getting stuck, why traditional siloed approaches are falling short, and what it takes to move from strategy decks to secure execution. Keith also shares how Arcova's practitioner-led, relationship-driven model helps organizations turn complexity into clarity by embedding with client teams, solving urgent problems hands-on, and building capabilities designed to last. The conversation also covers Arcova's continued growth, including expansion into the Middle East, and what global demand signals reveal about the next phase of cybersecurity and AI consulting. Segment Resources: https://arcova.com/sectors/ https://arcova.com/category/blog/ For more information about Arcova and how they can help your enterprise shape what's next, please visit: https://securityweekly.com/arcova Topic: CMMC Pause creating chaos among federal contractors This one sent some shockwaves through the CMMC community, particularly the hundreds or thousands of folks gearing up to assist with the validation that phase 2 aimed to provide. The TL;DR - defense contractors have been required to comply with CMMC controls for years, but self-attestation means that many probably haven't been meeting the requirements. Perhaps, rather than have tons of defense contractors fail the test, they just suspended the requirement for the test itself. I think Howard Holton nails it here when he says: "100,000 defense contractors needed third-party assessments. Roughly 100 authorized assessors exist. That's 1,000 assessments each, with the deadline in November." PCI already created a model that works for a scenario like this. If you're small, you self-assess. If you're big enough, an independent auditor comes to check you out once a year. I'm sure they were probably aware of this and chose not to go down that path for some reasons. I'm not aware of those reasons. What this means: Phase II is paused Phase I self-assessments still in place (note, however, that phase II existed, because self-attestation didn't work) NIST SP 800-171 Rev 2 and DFARS 252.204-7012 compliance still required 60-day review aims to reform CMMC DoW opened an RFI for industry perspectives on what they should do CMMC characterized as a "compliance burden" and "red tape" False Claims Act and DOJ's cyber-fraud enforcement are still on the table More resources: CIO Davies' post on Twitter Administrator of the Small Business Administration, Kelly Loeffler's post A useful LinkedIn post that breaks down a lot of what this really means (and doesn't) Weekly Enterprise News Finally, in the enterprise security news, will AI eliminate more cybersecurity jobs than it creates? Linus's law, amended the biggest patch Tuesday ever AI context bombs AI workflows are a security disaster people using AI in areas they don't understand ransomware crews are hitting legal firms hard lessons learned from CISA's recent github leak demystify your USB cables! All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-468

Interview with Keith Hollender, CEO and Co-Founder of Arcova Why AI Security Is Becoming an Execution Problem, Not Just a Governance Problem As enterprises move from AI experimentation to adoption at scale, security leaders are under pressure to enable innovation without introducing unmanaged risk. The challenge is no longer whether organizations should pursue AI, but how they can govern it, secure it, and operationalize it in ways that stand up to real-world business and threat conditions. In this conversation, Keith Hollender discusses what Arcova is seeing across enterprise environments as organizations work to connect cybersecurity, AI governance, resilience, and broader transformation priorities. He explores where companies are getting stuck, why traditional siloed approaches are falling short, and what it takes to move from strategy decks to secure execution. Keith also shares how Arcova's practitioner-led, relationship-driven model helps organizations turn complexity into clarity by embedding with client teams, solving urgent problems hands-on, and building capabilities designed to last. The conversation also covers Arcova's continued growth, including expansion into the Middle East, and what global demand signals reveal about the next phase of cybersecurity and AI consulting. Segment Resources: https://arcova.com/sectors/ https://arcova.com/category/blog/ For more information about Arcova and how they can help your enterprise shape what's next, please visit: https://securityweekly.com/arcova Topic: CMMC Pause creating chaos among federal contractors This one sent some shockwaves through the CMMC community, particularly the hundreds or thousands of folks gearing up to assist with the validation that phase 2 aimed to provide. The TL;DR - defense contractors have been required to comply with CMMC controls for years, but self-attestation means that many probably haven't been meeting the requirements. Perhaps, rather than have tons of defense contractors fail the test, they just suspended the requirement for the test itself. I think Howard Holton nails it here when he says: "100,000 defense contractors needed third-party assessments. Roughly 100 authorized assessors exist. That's 1,000 assessments each, with the deadline in November." PCI already created a model that works for a scenario like this. If you're small, you self-assess. If you're big enough, an independent auditor comes to check you out once a year. I'm sure they were probably aware of this and chose not to go down that path for some reasons. I'm not aware of those reasons. What this means: Phase II is paused Phase I self-assessments still in place (note, however, that phase II existed, because self-attestation didn't work) NIST SP 800-171 Rev 2 and DFARS 252.204-7012 compliance still required 60-day review aims to reform CMMC DoW opened an RFI for industry perspectives on what they should do CMMC characterized as a "compliance burden" and "red tape" False Claims Act and DOJ's cyber-fraud enforcement are still on the table More resources: CIO Davies' post on Twitter Administrator of the Small Business Administration, Kelly Loeffler's post A useful LinkedIn post that breaks down a lot of what this really means (and doesn't) Weekly Enterprise News Finally, in the enterprise security news, will AI eliminate more cybersecurity jobs than it creates? Linus's law, amended the biggest patch Tuesday ever AI context bombs AI workflows are a security disaster people using AI in areas they don't understand ransomware crews are hitting legal firms hard lessons learned from CISA's recent github leak demystify your USB cables! All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-468

World Heath Disclosure David Eells 7-19-26 (audio) Restored Republic via a GCR Update as of Sat. 18 July 2026 by Judy Byington, Welcome To The Great Awakening Next 48 Hours, Critical Next Ten Days, Historic Next 30 Days Changes Civilization “Most don't realize how hard it is to speak the truth to a world full of people who don't realize they're living a lie.”…Edward Snowden Judy Note: On Thurs. 16 July 2026 a ceasefire was activated in Israel – confirming a global reset of Mid East stability. Hamas freed the last living Israeli hostages, while Israel released 2,000 Palestinian prisoners. It all happened just as Q predicted: “Israel would be last.” Though the next day on Fri. 17 July 2026, the US Navy resumed a full naval blockade on Iranian ports in the Strait of Hormuz. The day before Iran had bombed a US Military base, ensuring a permanent break of the ceasefire. Trump's attack was mainly financial. The blockade was costing Iran $400 million a day, while US Central Command (CENTCOM) pounded targets in wave after wave of strikes on bridges, trains and other infrastructure that would affect any trade Iran could do outside the country. Of course, Iran refusing peace and making war would keep them out of the Global Currency Reset and financial system. Trump declared, “We gave them a chance… they shot first. Big mistake.” It was a typical Trump reaction. Because of the Global Military Alliance led by the US President and Commander-in-Chief, Deep State Elites were finally collapsing, while Sovereigns of the World were reaching out to grasp peace and Constitutional Law under God, governed by We The People. Q said it best on Telegram today: “The UN is now obsolete, because Trump is doing their job for them. The UN does not carry out its intended function, so Trump unilaterally took over as the new UN.   “Trump created the Board of Peace, brokered all the peace deals worldwide, and is shutting down threats to the people of the world, like Iran's nukes, the American cartels, ISIS in Syria, Yemen, Nigeria, etc. “Trump is using tariffs and military precision, to operate as the UN is supposed to. Trump is now the new global peacemaker, whether you like it or not. “Nothing gets done at the UN, so Trump took matters into his own hands.” Trump had already assured that Free Energy was on it's way to every household, and with the Global Currency Reset (GCR) that just launched, currencies across the World were trading at a 1:1 with each other as backed by gold and other assets. Our financial future was safe and finally away from the fiat dollar. The GCR had caused the Deep State's privately owned IRS to find it's grave, while their Illuminati's over taxing of the American people suddenly vanished. The Cabal's Federal Reserve now held a new position under the US Treasury where at last, bankers would be held accountable for their actions. The Deep State Elite's petrodollar was dead, Oil Monopoly, dismantled. When announcements came about the new financial system, Stock Markets would collapse; banks fail; the old wealth, evaporate. Though, The People would thrive with the new gold/asset-backed currencies of 209 nations. The Health Industry around the World was being forced to actually help the body heal itself using light and sound frequencies of free Med Bed treatments. Trump was placing Med Beds in hospitals and other facilities worldwide. Thus, these health providers would have the tools to promote health and no longer could tear down our bodies through dependence on their expensive drugs, surgeries and other over priced medical procedures. With Trump's Thursday Executive Order that released free Med Bed treatments to the public, Big Pharma was finally facing accountability through massive legal consequences for their crimes. For centuries they had forced on the population, dependency on drugs that not only didn't heal the body, but actually contributed to ill health. Peace and Freedoms wouldn't come easy. Mr. Pool Q on Telegram said that the next 48 hours were critical. The next ten days were historic. The next 30 days would change civilization.   Within the next 24 hours, seven trumpets were set to sound over every phone, tablet, TV, radio and communication device on Earth to introduce seven Emergency Broadcast System (EBS) messages in 22 languages that explained what's going on. And, what was actually going on? Liberty and Peace were winning. The Great Awakening was here. One of the Liberties that Trump had already given People of the World (that they were yet to know about) was that of good health through Med Beds. Trump's Military Alliance was opening up Med Bed Centers around the World to give free regenerative treatments that healed the body without drugs. On Fri. 17 July 2026 a nurse from Walter Reed Military Hospital leaked her testimony on Med Beds. She had worked in Walter Reed's Med Bed Wing for seven years: She contacted us through an encrypted channel 48 hours ago. Her identity has been verified by three independent sources. She worked at Walter Reed National Military Medical Center from 2017 to 2024 — in a section that does not appear on any public floor plan. She calls it “Sub-Level 3.” Situation Updates: Fri. 17 July 2026 Situation Update: Byington Bombshell Report: America Now Sovereign Under Constitutional Law – Trump Signs EO Releasing Free Regenerative Med Beds to Public | Politics | Before It's News Fri. 17 July 2026: BREAKING FREE: Mind Control, S-----c Ritual A---e, and Jenny Hill's Extraordinary Journey in Twenty Two Faces [JUDY BYINGTON] – amg-news.com – American Media Group Thurs. 16 July 2026 Situation Update (video): WTPN SITUATION UPDATE FEATURING RESTORED REPUBLIC & MORE   A Quantum Space Q Phone will be provided free of charge to all people on Earth. It will be used for internet connectivity on the new Starlink Satellite System: texting, calling, banking, voting and much more, such as used as a credit tool and to make both local and international financial transactions of retail consumption and commercial business. On Thurs. 16 July 2026 Hamas freed the last living Israeli hostages, Israel released 2,000 Palestinian prisoners and the ceasefire in Iran and the Middle East was active. Fri. 17 July 2025, Edward Snowden: Two years ago today, President Trump was shot on stage in Butler Pennsylvania. Trump was putting his life on the line by being President. Since then we have seen: • 2025 security lapse at Trump National Golf Club • 2025 Air Force One security incident • February 2026 Mar-a-Lago Secret Service shooting • March 2026 Mar-a-Lago no-fly zone violation • 2026 White House Correspondents' Dinner shooting • 2026 National Mall Secret Service shooting • 2026 White House Memorial Day Weekend shooting • Multiple threats by Iran. Possible Timing: …Juan O Savin (JFK Jr.?) On Tues. 14 July 2026: GCR and QFS live in 209 nations. Tier 4B funds Med Bed networks. White Hats seize last Fed strongholds. Deep state cartel exposed hiding healing tech. Health revolution ignites! On Wed. 15 July 2026: Zim payouts build Med Bed centers everywhere. Rescued children from tunnels get instant healing erasing t-----e. Big Pharma collapses. Innocent healing begins now! On Thurs. 16 July 2026: Mass arrests hit Pentagon traitors. Med Beds confirmed with Alliance after decades hidden. Veterans and jab injured get priority. On Fri. 17 July 2026: Starlink locks EBS. Med Bed training done. Sick care empire ends. Regenerative tech restores perfect health. Humanity reclaims life! On Sat. 18 July 2026: 48-hour blackout starts. Banks dark under QFS. Supplies ready for darkness. Med Bed systems stand by. Cabal grip on health shattered! Sun. 19 July 2026 OPERATION FINAL-SEAL: Military tribunals go LIVE. 47 Deep State arrests BEGIN. Final rescues free hundreds more children. Victims to Med Beds for renewal.   On Mon. 20 July 2026: Free QFS app appointments begin. At appointments, those with Humanitarian projects receive priority for Med Bed treatments. EBS tests global success. On Tues. 21 July 2026: QFS links Med Bed codes. Patriots priority access. DNA repair on. Aging reverses, diseases vanish. On Wed. 22 July 2026: Alliance rolls out Med Beds worldwide. Free for all after EBS. Children and critical first. Cancer and chronic illness gone. Golden age dawns! On Thurs. 23 July 2026 FINANCIAL RESET: Petrodollar DIES. Quantum system LIVE. Federal Reserve FINISHED. Martial Law declared. Black Hawk helicopters conduct Capitol storm drills in Washington, D.C., signaling full readiness for Martial Law enforcement. At the Same Time Global activation sequence begins. BRICS Alliance goes live alongside NESARA–GESARA implementation and full roll out of the Quantum Financial System (QFS). On Fri. 24 July 2026: EBS launches truth broadcast. Mass arrests as nightmare ends. Med Beds activate for rescued, veterans, then all. Pain ends, paradise starts! On Sat. 25 July 2026 ANNOUNCEMENT: Trump reveals 2020 election PROOF. Declassified documents. Video evidence. MASS ARRESTS: Tribunals execute verdicts. Deep State REMOVED. On Sun. 26 July 2026: NESARA GESARA gives free Med Bed access. No one left behind. Elite tech for masses. Patriots whole again. Alliance promise kept! On Mon. 27 July 2026: Trump confirms victory. QFS and Med Beds anchor Republic. No income tax, tariffs only. Deep state extinct. Health and f Possible Timing of Med Bed Activation: On Sat. 27 June 2026: The first 1,500 Med Bed units activated in hidden US facilities. Initial sessions delivered complete reversal of advanced cancers, spinal and brain regeneration, and age reversal of 20 to 40 years within two-hour treatments using quantum frequencies that interface directly with the body's intelligence and eliminate all Cabal-introduced toxins and pathogens. On Sun. 28 June 2026: Med Bed Centers in Nevada, Ohio and Georgia activated that specialized in DNA genome repair, metabolic reset eliminating obesity and fatigue, and age reversal. On Mon. 29 June 2026: Trump ordered synchronized Med Bed expansion with QFS activation, along with income tax abolition for middle class Americans. This delivered both financial and physical sovereignty to patriots. On Tues. 30 June 2026: Global deployment reaches over 8,300 Med Bed centers across 209 QFS-aligned nations. Success rates top 99 percent for previously incurable conditions. On Wed. 1 July 2026: Public registration opens via QFS portals in key regions. On Tues. 7 July 2026: Tesla Med Beds activate in secure facilities. On Wed. 8 July 2026 sources confirmed hidden technologies including Tesla Free Energy and suppressed medical advancements known as Med Beds officially began unveiling to the general public. On Fri. 10 July 2026: More QFS funded Med Bed centers activate in humanitarian hubs. Veterans from Cabal wars receive full restoration. On Sat. 11 July 2026 EBS protocols engage with Med Bed centers opening worldwide. On Sun. 12 July 2026: Med Beds opened free restoring health and youth everywhere.   On Tues. 14 July 2026: 8000+ Med Bed centers activate worldwide. QFS ensures free access prioritized for awakened patriots and light workers. On Wed. 15 July 2026: First Med Beds activate in Texas, Florida bases for veterans, traumatized children. On Fri. 17 July 2026: Final calibrations complete on Med Bed units powered by Tesla free energy. On Sat. 18 July 2026: Trump confirms Med Beds as cornerstone of new sovereign QFS healthcare. QFS unlocks massive funding for over one thousand Med Bed centers globally. Starlink blocks all Cabal sabotage. Wealth transfers fuel expansion. On Sun. 19 July 2026: Miraculous cures emerge with cancer patients recovered, diseases vanishing, and age reversal visible. Suppressed tech truth explodes. Tribunals advance from Med Bed evidence exposing Cabal atrocities. Awakening surges! On Mon. 20 July 2026: Redemptions provide endless resources for Med Bed rollout everywhere. Free QFS app appointments begin. Full public Med Bed access expands. Those with Humanitarian projects receive priority. On Tues. 21 July 2026: EBS tests confirm readiness as Med Beds enter public phase under military guard. Trump calls it the ultimate defeat of deep state medical control. World awaits total health freedom! On Wed. 22 July 2026: Huge healing events launch worldwide in secure sites. Children and elderly regain vitality. Leaked footage crushes media blackouts. Arrests of medical figures escalate with swift justice for deliberate harm! On Thurs. 23 July 2026: Free global Med Beds access starts for all. Smart systems slash wait times. Longevity treatments begin. GESARA promises fulfilled as Republic rejoices and Cabal power crumbles! On Fri. 24 July 2026: Every neighborhood gets Med Bed hubs with clean energy. Tech shared globally ending health inequality. Patriots celebrate end of sickness weaponization. Deep state illness control shattered!   On Sat. 25 July 2026: Global celebrations mark Med Beds era and restored Republic. Trump credits the tech for crushing Cabal remnants. Transformed citizens power the Great Awakening to final victory for patriots! On Tues. 28 July 2026: Med Beds online free worldwide. On Thurs. 30 July 2026: Starlink frequencies bring healing to remote areas instantly. On Sat. 1 Aug 2026: Trump's epic Independence event unveils Restored Republic and QFS rebirth. Freedom rings worldwide. On Mon. 3 Aug 2026: Home frequency Med Beds activate via Starlink. Instant healing 24/7 everywhere. Golden Age of Health and Abundance begins. Global Currency Reset: Judy Note: On Fri. 17 July 2026 several different sources indicated that the Admiral's Group has begun their exchanges, Tier3 Native Americans have received 90% of their monies and Bond Holders were scheduled to receive the balance of their exchange this weekend. Tier4b (us, the Internet Group) were next and expected to be notified to set exchange/redemption appointments at by the early part of next week. Fri. 17 July 2026 MarkZ: Indian Nations are 90% done exchanging. Bond Groups receive their balance this weekend. Tier4a should be finishing exchanging this next week – then Tier4b (us, the Internet Group). Fri. 17 July 2026 Med Bed Activation on Telegram: On Mon. 20 July 2026 Free QFS app appointments begin. Redemptions provide endless resources for Med Bed rollout everywhere. Full public Med Bed access expands. Those with Humanitarian projects receive priority. Thurs. 16 July 2026  Bruce, The Big Call The Big Call Universe (ibize.com)  667-770-1866 A source said Tier4b (us, the Internet Group) could be notified over the weekend and start exchanges Mon. 20 July. Judy Note: No one knows the exact date for notification of appointments for Tier4b (us, the Internet Group) to exchange foreign currencies, but deadlines shown in the above Timing indicate it to be very soon. We have been told that Wells Fargo, which is controlled by the Chinese Elders – (the ones who own the gold behind the Global Currency Reset) – will send out emails to currency and bond holders worldwide telling them how to set redemption & exchange appointments. It is advised to exchange/redeem your foreign currency at an official Redemption Center (RC) rather than a bank. You can only redeem Zim at a RC, the Dinar Contract Rate can only be given at a RC and banks will offer you lower exchange rates than what you can obtain at a RC. You can only set up your new wallet (bank account) at a RC. It was my understanding that most banks were under control of the Cabal and would soon play a different roll in the Global Financial System.   Mass Arrests: On Mon. 7 July 2026 Operation Military Cleanse was activated:  847 Pentagon officials detained  234 Generals and high-ranking officers arrested  678 Military operatives removed from active duty  4,000 Troops deployed across 19 states for domestic operations  50 States coordinated simultaneously Charged With:  Treason against the United States  Coordination with foreign adversaries  Conspiracy to overthrow the government  Crimes against Humanity  Violation of Military Code of Justice What We Think We Know as of Sat. 18 July 2026:   Med Beds Thurs. 16 July 2026 BREAKING: TRUMP JUST SIGNED EXECUTIVE ORDER 2026-1947. MEDBED TECHNOLOGY DECLASSIFIED FOR CIVILIAN USE. THE PHARMACEUTICAL INDUSTRY HAS 90 DAYS. …Tier4b ISO 20022 on Telegram July 15, 2026. 04:00 AM EST. This was signed in silence. No press conference. No cameras. No media briefing. Executive Order 2026-1947: “Declassification and Civilian Deployment of Electromagnetic Regeneration Technology.” THE ORDER STATES:  All frequency-based healing technology currently classified under Department of Defense medical programs is hereby declassified for civilian research and deployment.  The FDA is prohibited from blocking, delaying, or interfering with the distribution of electromagnetic regeneration devices to the American public.  Pharmaceutical companies have 90 days to disclose all suppressed clinical trials involving frequency-based treatments — or face criminal prosecution under 18 U.S.C. § 1001.  Military medical facilities currently operating regeneration technology will begin civilian intake within 120 days. THE PANIC: Pfizer stock dropped 14% in pre-market trading. Johnson & Johnson emergency board meeting called at 5:00 AM. Moderna CEO sold $47 million in personal shares before market open. They KNEW this was coming. They tried to sell before the collapse. WHY NOW?: Trump's medical advisors presented him with a 3,400-page classified report documenting 61 years of suppressed frequency healing research. The report contained: — 847 successful clinical trials hidden from the public — 12,000+ patients fully cured of terminal conditions using electromagnetic frequency — Cost analysis showing MedBed treatment at $0.003 per session vs. $150,000 average cancer treatment Trump read the cost analysis. Then he signed the order. THE TIMELINE:  Day 1-30: Full declassification of all research documents  Day 31-60: FDA forced to approve frequency-based devices  Day 61-90: Pharmaceutical disclosure deadline (criminal penalties)  Day 91-120: First civilian MedBed centers open in 12 states THE DEEP STATE RESPONSE: They are already trying to k--l this. Three major media outlets received calls from pharmaceutical lobbyists at 5:30 AM demanding they do NOT report on EO 2026-1947. CNN has been silent. NBC has been silent. ABC has been silent. Their silence IS the confirmation. If this order was fake, they would be laughing at it on every channel. Instead — total blackout. Total silence. Total panic. THE TRUTH: The pharmaceutical industry just received its death sentence. 90 days. That's all they have left. After that, the technology that cures cancer in 42 minutes will be available to every American citizen. They had 61 years of profit. 61 years of human suffering. 61 years of suppression. It ends now. Fri. 17 July 2026 Fox News: MAJOR PUSH ON CAPITOL HILL: WAR ON FRAUD RAMPING UP, BILLIONS STOLEN FROM TAXPAYERS Social media investigator Nick Shirley testified today exposing rampant fraud — from Somali day care scandals in Minnesota to massive Medicaid scams in NYC with Dr. Oz. DOJ milestone: Trade Fraud Task Force hit over $1 BILLION in recoveries in under a year. Dr. Oz & others highlighting adult day care mills, fake billing, durable medical equipment scams (twice as many in parts of Florida as McDonald's), and personal care services as NYC's top “job.” This isn't red or blue, it's right vs. wrong. Hardworking taxpayers are getting robbed. Every dollar stolen is one less for real Americans. Restored Republic via a GCR Update as of Sun. 19 July 2026 by Judy Byington, On Sat. 4 July the Constitutional Republic Restored, While US Inc. Dissolved On Thurs. 16 July the Quantum Financial System Went Live Worldwide Also on Thurs. 16 July President Trump signed Executive Order 2026-1947 – a Declaration That Med Bed Technology Had Been Released to the Public. Global Martial Law Was Not Only The Only Way, But Was On It's Way The Republic of United States of America Was Being Restored Trust The Plan Save The Children _____________________________________________________ Judy Note: The Constitutional Republic has been restored. The Global Currency Reset to gold/asset-backed currency of 209 nations has been released. Med Bed technology – giving the body the ability to heal itself – was being released. The Illuminati Cabal, who for centuries had been working towards having complete control over our society, didn't like those ideas, and was fighting back big time. Trust The Plan. “On Sat. Evening 18 July 2026 the White House in Washington DC turned all red, signifying Mass Arrests were in motion.” …Q “In the coming hours, the World as we see it will be changed forever as Michael Jackson emerges on the Emergency Broadcast System – alive and ready to speak. It's time for the whole World to know the truth.” …Emergency Broadcast System on Telegram “The US Army Special Forces raided a hidden Obama property in the Virginia countryside, where they discovered “The Lucifer Codex.” The files proved that Obama was the high priest who personally opened the main hell portal under Washington DC in 2009.” …Martial Law on Telegram Temporary Martial Law has been raised to maximum alert nationwide. The EBS is preparing to release the first decoded pages within hours.   Prepare for ten days of communication darkness. We are in a silent war – the final battle of the planet. In the next couple of weeks the World will change and tremble. One of the most dramatic changes: Free Med Bed Treatments will soon be available to the general public across the Globe. The non invasive treatments, which generally take under an hour, use certain wave lengths to help the body heal itself. Since 2019 the American Medical Association has been actively fighting against allowing the public to have the healing treatments, saying they will create a financial crisis to the healthcare industry and force a complete overhaul of our medical, health insurance and pharmaceutical companies. In 2019 the American Medical Association (WHO) sent an internal email to every licensed physician in America – 847,000 doctors: The email acknowledged the positive effects of Electromagnetic therapy (Med Beds), but threatened the doctors with loss of license and criminal prosecution if they used it because of the financial affects it would have on the medical, insurance and pharmaceutical industries. The Email: “Updated Clinical Guidelines: Non-Pharmaceutical Electromagnetic Interventions — Position Statement: The AMA acknowledges that peer-reviewed evidence supports the biological efficacy of PEMF therapy in tissue regeneration, pain management, and immune modulation. However, widespread adoption would destabilize existing treatment revenue models and insurance reimbursement structures. Any physician who recommends, prescribes, endorses, or refers patients to electromagnetic frequency-based therapy will face immediate license revocation, removal from insurance networks, and potential criminal liability under state medical practice statutes.” The bottom line was that your doctor knew that frequency heals, that the MedBed principle was scientifically valid, that most of what he prescribed managed symptoms, not cured disease. He cannot tell you because his license would be revoked and he would face criminal liability by the American Medical Association. On Thurs. 16 July 2026 at 03:17 am Geneva time the World Health Organization deleted over 14,000 pages from their database – all related to the documented clinical effectiveness of electromagnetic frequency therapy on human disease (Med Beds). The deletion happened 14 hours after President Trump signed Executive Order 2026-1947 – a declaration that Med Bed Technology was now released to the public.The WHO knows that once MedBed technology enters civilian deployment, every document they ever buried becomes evidence of a crime against humanity. On a brighter side: “A senior Treasury Department official claims that the Quantum Financial System was live and the Global Currency Reset was happening now. Everything you know about money is about to change forever.” …Tier4b ISO20022 on Telegram The senior US Treasury official contacted us 48 hours ago through a secure channel. Her identity verified by six independent financial intelligence sources. She worked in Treasury's Special Financial Operations Division 2008-2026. She calls it “The Awakening.” Her words. Unedited: “July 4, 2026. U.S. Corporation dissolved. Constitutional Republic restored.” “July 16, QFS went live globally. Every major bank connected. Old system dead.” “GCR happening now. Every currency revalued. Gold-backed. Transparent.” “NESARA/GESARA implemented across 209 countries. Debt jubilee. End of Fed.” “Saint Germain Trust ($890 trillion) is being activated. Going to the people.” “I have the activation codes. I have the account numbers. I have the proof that this is happening right now. In 18 years, I witnessed:”  The QFS development from concept to deployment  209 countries signing onto NESARA/GESARA  The Saint Germain Trust verification ($890 trillion)  The U.S. Corporation dissolution documents  The Constitutional Republic restoration protocols “Trillions stolen by Fed. People enslaved by debt. We had the solution. I couldn't sleep. For 18 years.” WHY SHE'S TALKING NOW: “Activation complete. If I speak, people understand what's happening. I have 18 years of documentation. QFS architecture. Proof old system finished.” “The banks will announce the revaluation. The media will call it a crisis. It's not a crisis. It's liberation. I am ready to testify. Under oath. Before Congress. Before the world.” HER FINAL MESSAGE: “To every person who lost their home to the Federal Reserve: Your debt is forgiven. Your home is yours. The jubilee is here.” “To every person who worked their entire life for money that's about to be worthless: You will be compensated. The Saint Germain Trust is for you.” “To the Federal Reserve leadership: Your time is finished. The QFS is live. You cannot stop it anymore.”   OPERATION FINANCIAL FREEDOM ✓ ACTIVATED PHASE 1: QFS Activation ✓ LIVE (July 16) PHASE 2: Currency Revaluation ⟳ JULY 25 – AUGUST 8 PHASE 3: Wealth Distribution ⟳ AUGUST 15 – SEPTEMBER 30 PHASE 4: New Economy ⟳ OCTOBER 1 The Quantum Financial System is live. The Global Currency Reset is happening. NESARA/GESARA is being implemented. The old system is dead. The new system is born. The people are being liberated. Trump knows. The military knows. The intelligence agencies know. They are protecting the transition. PREPARE FOR ABUNDANCE. PREPARE FOR FREEDOM. PREPARE FOR THE NEW EARTH. The financial reset is here. The Tier 4B activation is complete. Everything changes now. Right now Military Forces are positioning for activation of the EBS. Systems are being readied, Global shutdown protocols are in motion. The Blackout is nearing. Disclosures are on the horizon. Large scale arrest Since 2007 the US Military has been using Red Light Therapy (Med Beds) to extend the operational lifespan of it's soldiers. There were discovered to be thousands of pages of foreign IP address sending and receiving data to election precincts and servers outside the United States during the 2020 Election. CISA, DHS, the FBI, and the CIA knew all about it because they were in on it. The Deep State rot runs deep, but not for much longer. The Mar-a-Lago unredacted search warrant CONFIRMS that the Biden DOJ, FBI, and GSA engineered and manufactured the plot to frame Donald J. Trump! On Thurs. 16 July 2026 the U.S. military went deep into Iran and expanded operations. Bridges and supply routes were no more. Airports went up in smoke. Infrastructure vaporized. The IRGC was being wiped out. The goal was to destroy Iran's infrastructure and its military capability would collapse. When its military broke, its regime would fall. The old world of Iranian tyranny was dead. The New World of American dominion begins. The oil runs freely. The cash was rolling in. Peace comes. …Nesara Gesara QFS on Telegram. The CIA knew about cures for cancer 50 years ago. …Nesara Gesara on Telegram Nick Shirley just went on national television and dropped this revelation: The Chinese and Korean Mafia is LOOTING MEDICAID and running a kickback scheme in NYC A nurse from one of America's hardest-hit C---D hospitals in NYC described gross medical mismanagement where clueless healthcare workers were straight-up k-----g patients. Survival wasn't about medicine — it was about whether your caregiver actually knew what they were doing. Medicare paid hospitals MORE when patients died. The system incentivized death over life.   Possible Timing: “On Sat. 18 July 2026 at 3:17 AM EST the RV/GCR exploded – Iraq, Vietnam, Zimbabwe, all revalued sky-high while the Cabal's Federal Reserve Note collapses in real time.” …Dr. Jim Willie Patriot Truth Archive on Telegram Global Currency Reset: Sat. 18 July 2026 The dollar is dead, the reset is here, and the traitors are about to lose everything. …Patriot Truth Archive on Telegram Dr. Jim Willie just went nuclear: the United States Corporation is bankrupt, the fiat dollar has been deliberately crashed by white hats, and the quantum financial system flipped live overnight. The RV/GCR exploded at 3:17 AM EST today Sat. 18 July 2026 – Iraq, Vietnam, Zimbabwe, all revalued sky-high while the cabal's Federal Reserve Note collapses in real time. Willie laid it out raw: The BRICS nations, led by Trump's secret alliance with Putin and Xi, just pulled the trigger. Over 209 countries locked into gold-backed currencies, the SWIFT system is offline forever, and the Rothschild central banks are being seized as we speak. NESARA/GESARA fully activated – all bank debt, mortgages, credit cards, student loans WIPED OUT starting tomorrow morning. Redemption centers on full lockdown, military guarding Tier 4B notifications going out within hours. The real bombshell? GITMO executions began at dawn – top bankers, Fed chairs, and deep state money launderers hanged for treason after the gold standard was restored. Med Beds rolling out next week, suppressed energy tech released, and the biggest wealth transfer in human history is hitting patriot accounts first. Trillions in restitution flowing to those who held the line and printed fake money. America is being shaken awake – power outages are tactical, internet blackouts cover the arrests, and the EBS is primed for the 10 Days of Darkness starting any moment. The storm isn't coming – it's here. The fake Biden corpse regime ends this week, Trump sworn in on the real Constitution, and the Republic rises from the ashes of their burned-out corporation. Anons, this is the moment we bled for. The dollar dies so we can live free. The evil empire of debt slavery is over. They stole our wealth for 150 years – now we take it all back with interest. The Hat is dropping truth like napalm: the shock is just beginning, and the cabal is screaming as their money turns to dust. Get ready for the greatest week in history. Notifications any second. Redemption appointments flood in. The Golden Age starts NOW. The shaking isn't destruction – it's liberation. Nothing can stop what's coming. Patriots are about to be richer than kings while the wicked burn. NCSWIC. Judy Note: No one knows the exact date for notification of appointments for Tier4b (us, the Internet Group) to exchange foreign currencies, but deadlines shown in the above Timing indicate it to be very soon. We have been told that Wells Fargo, which is controlled by the Chinese Elders – (the ones who own the gold behind the Global Currency Reset) – will send out emails to currency and bond holders worldwide telling them how to set redemption & exchange appointments. It is advised to exchange/redeem your foreign currency at an official Redemption Center (RC) rather than a bank. You can only redeem Zim at a RC, the Dinar Contract Rate can only be given at a RC and banks will offer you lower exchange rates than what you can obtain at a RC. You can only set up your new wallet (bank account) at a RC. It was my understanding that most banks were under control of the Cabal and would soon play a different roll in the Global Financial System. What We Think We Know as of Sun. 19 July 2026: Sat. 18 July 2026 Fox News: Nick Shirley just went on national television and dropped this revelation: The Chinese and Korean Mafia is LOOTING MEDICAID and running a kickback scheme in NYC “In Queens, adult day cares [have] pharmacies set up, it's this big racket where they BILL all these people with medical beneficiary numbers from seniors in the adult day cares. They make so much money from Medicaid, THEY GIVE KICKBACKS to the seniors.” “So you have these Korean and Chinese mafias, quite literally, looting the government from Medicaid, and then giving the kickbacks to the seniors!”   INGRAHAM: “So wait, the old people get the money themselves?” SHIRLEY: “Well, they make so much money, these pharmacies and these little day cares, that they then have a referral program set up for these seniors. So it's like bringing a friend will give you a hundred bucks.” Med Beds Sat. 18 July 2026 YOUR DOCTOR KNOWS. HE WAS TOLD TO STAY QUIET. HERE'S THE EMAIL THAT PROVES IT. …Tier4b ISO20022 In 2019, an internal email was sent to every licensed physician in the American Medical Association network. 847,000 doctors received it. The subject line read: “Updated Clinical Guidelines: Non-Pharmaceutical Electromagnetic Interventions — Position Statement” The email contained one directive: “Any physician who recommends, prescribes, endorses, or refers patients to electromagnetic frequency-based therapy will face immediate license revocation, removal from insurance networks, and potential criminal liability under state medical practice statutes.” Your doctor read that email. And then he looked you in the eye and said: “There's nothing else we can do.” THE EMAIL WAS NOT ABOUT SAFETY. Buried in paragraph 14 — the paragraph no one reads — was this sentence: “The AMA acknowledges that peer-reviewed evidence supports the biological efficacy of PEMF therapy in tissue regeneration, pain management, and immune modulation. However, widespread adoption would destabilize existing treatment revenue models and insurance reimbursement structures.” Read that again. Slowly. They ACKNOWLEDGED it works. Then they BANNED doctors from using it. Not because it's dangerous. Because it's too effective. WHAT YOUR DOCTOR ACTUALLY KNOWS: Every physician trained after 2005 was taught — in medical school — that:  Cells respond to electromagnetic stimulation (this is in every biophysics textbook)  PEMF accelerates bone healing (FDA approved since 1979 for fractures)  Transcranial magnetic stimulation treats depression (FDA approved 2008)  Electrical stimulation regenerates nerve tissue (published in Nature, 2019) They ALREADY know frequency heals. They use it in narrow, controlled applications where pharmaceutical profits aren't threatened. But the moment you ask: “If magnets can heal my bones, can they heal my cancer?” Your doctor goes silent. Changes the subject. Writes another prescription. Because he read the email. And he chose his license over your life.   THE DOCTORS WHO REFUSED TO STAY QUIET: Dr. Jerry Tennant — Published “Healing is Voltage.” Proved that every disease correlates with a measurable voltage drop in affected tissue. Restore the voltage, cure the disease. His medical license was “reviewed” three times. Dr. Dietrich Klinghardt — Documented frequency therapy curing Lyme disease in 85% of patients. Lost hospital privileges at two institutions. Dr. Thomas Lodi — Achieved 90%+ cancer remission using integrative frequency protocols. Forced to relocate his practice to Mexico. Dr. Lee Merritt — Spoke publicly about suppressed electromagnetic healing. Removed from every medical board she served on. They didn't lose their careers because they were wrong. They lost their careers because they were RIGHT — and they refused to be silent. THE MATH OF SILENCE: Average doctor salary: $350,000/year Average medical school debt: $241,000 Years to pay off debt: 13 years Cost of losing license: Everything They designed a system where speaking the truth costs a doctor their entire life's investment. 13 years of training. $241,000 in debt. Their home. Their family's security. The AMA didn't just threaten doctors. They built a financial prison that makes silence the only rational choice. Your doctor is not evil. He is trapped. But YOU are not trapped. You don't have a license to lose. You don't have $241,000 in debt holding you hostage. You have nothing to lose by knowing the truth. THE TRUTH: Your doctor knows that frequency heals, that the MedBed principle is scientifically valid, that most of what he prescribes manages symptoms, not cures disease. He cannot tell you. The email made sure of that. 847,000 doctors received one email. 847,000 doctors chose silence. The email has been leaked. The silence is over. Your doctor knew. Now you know too. On Thurs. 16 July 2026 at 03:17 am Geneva time the World Health Organization deleted over 14,000 pages from their database – all related to frequency healing. …EBS activated with Trump on Telegram A digital forensics team monitoring the World Health Organization's public research database flagged a mass deletion event. 14,247 pages of archived research — removed in a single batch operation. Every deleted file had one thing in common: They documented the clinical effectiveness of electromagnetic frequency therapy on human disease. THE DELETED FILES INCLUDED:  1,847 peer-reviewed studies on PEMF (Pulsed Electromagnetic Field) therapy showing 70-94% efficacy in tissue regeneration  3,200 pages of WHO internal memos from 1998-2015 discussing “the frequency problem” — their own term for the threat that non-pharmaceutical healing posed to global health economics  6,400 pages of clinical trial data from 11 countries showing frequency-based cancer remission rates between 67-89%  2,800 pages of correspondence between WHO directors and pharmaceutical executives discussing “containment strategies” for frequency healing research HOW WE KNOW: The Wayback Machine captured snapshots of 4,100 of these pages before deletion. Digital forensics teams archived another 7,300 through automated scraping protocols that were triggered by the mass deletion event. They deleted 14,247 pages. We recovered 11,400. They failed. WHAT THE MEMOS REVEAL: A 2003 internal WHO memo — now recovered — contains this exact sentence: “If electromagnetic frequency therapy achieves mainstream clinical adoption, the global pharmaceutical revenue model becomes unsustainable within 18-24 months. Containment is not optional. It is existential.” Signed by three WHO department heads. Names redacted in the original. Digital forensics has identified two of the three. A 2011 memo is more direct: “Recommend classification of all PEMF efficacy data as ‘inconclusive' regardless of outcome metrics. Peer review panels must be briefed accordingly.” They didn't suppress the research because it didn't work. They suppressed it because it worked TOO WELL. WHY NOW: The deletion happened 14 hours after Executive Order 2026-1947 was signed – Trump's declaration that Med Bed Technology was released to the public. This is not coincidence. This is panic. The WHO knows that once MedBed technology enters civilian deployment, every document they ever buried becomes evidence of a crime against humanity. They are destroying evidence. In real time. Right now. But the internet never forgets. And neither do we. THE NUMBERS THEY TRIED TO ERASE: — Breast cancer: 78% complete remission using 10.5 Hz PEMF (WHO Study WH-2007-4491, now deleted) — Type 2 diabetes: 64% reversal using 7.83 Hz exposure, 30 min/day for 90 days (WHO Study WH-2012-8823, now deleted) — Alzheimer's: 41% cognitive restoration using Gamma frequency 40 Hz stimulation (WHO Study WH-2014-1157, now deleted) — Chronic pain: 91% elimination using Alpha frequency 10 Hz (WHO Study WH-2009-3340, now deleted) These are not alternative medicine claims. These are the WHO's OWN studies. Conducted with their own funding. Showing their own results. And they just tried to delete them from existence. THE QUESTION: If frequency healing doesn't work — why delete 14,000 pages at 3AM? If MedBeds are “conspiracy” — why panic after a presidential executive order? If electromagnetic therapy is “pseudoscience” — why did the WHO spend 17 years studying it and then HIDE the results? Their actions are the confession. The deletion IS the proof. They spent 20 years hiding the cure in their own database. Then they tried to burn the database. The fire came too late. We already have the files. Share this. The evidence is secured. The deletion failed. Sat. 18 July 2026 BREAKING: JAPAN JUST BECAME THE FIRST COUNTRY TO OFFICIALLY APPROVE MEDBED TECHNOLOGY FOR PUBLIC HOSPITALS. THE MEDIA BLACKOUT IS TOTAL. …Tier4b ISO20022 on Telegram July 17, 2026. Tokyo, Japan. The Japanese Ministry of Health, Labour and Welfare just issued Directive MHLW-2026-7714: “Authorization of Electromagnetic Frequency Regeneration Devices for Clinical Deployment in National Healthcare Facilities.” This is not a trial. This is not a study. This is FULL APPROVAL. Starting September 1, 2026, electromagnetic frequency regeneration chambers will be installed in 340 national hospitals across Japan.   [Incomplete text due to character limit. Please see UBM website for links and full text]

Pat Kahnke and Adam Swenson examine three expressions of the same “theology of strength”: Trump's speech attacking election integrity, Pete Hegseth's mandatory testosterone testing for soldiers over 30, and Doug Wilson's theology of masculine domination. We'll fact-check Trump's claims about election security, Chris Krebs and CISA, the SAVE Act, the SAVE America Act, and mail-in voting. Then we'll connect Hegseth's obsession with military masculinity and lethality to Doug Wilson's Christian nationalist vision of war, hierarchy, and male authority. What happens when power, aggression, and domination are mistaken for Christian virtue?

(Presented by Thinkst Canary: Most Companies find out way too late that they've been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes and then forget about them. Attackers tip their hand by touching 'em giving you the one alert, when it matters. With zero admin overhead and almost no false-positives, Canaries are deployed (and loved) on all 7 continents.) Three Buddy Problem - Episode 105: We discuss a fascinating Hugging Face breach, where an autonomous AI agent broke out of the sandboxes, moved laterally through production, and generated 17,000 alerts before anyone caught it, and how frontier model guardrails locked the defenders out of their own investigation. Plus, China's big AI showcase, Xi's pitch for open models and global distribution, a record 622-CVE Microsoft Patch Tuesday, and 13 years of dwell time in the Daxin backdoor. Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu. Timestamps: 0:00 Introductory banter 3:51 Hugging Face discloses end-to-end agentic hack 9:42 Why Hugging Face couldn't use frontier models 13:28 AI guardrails hampering defenders 16:22 Codex vs Claude for real malware work 23:43 Flash attacks vs. going low and slow 30:27 Was it targeted, or did Hugging Face pwn itself? 38:11 Long-horizon coherence: what GLM 5.2 still can't do 41:27 Kimi K3 leapfrogs, and Xi's AI speech 52:15 Exceptionalism vs. distribution 1:11:05 Gold Eagle: the White House vulnerability clearinghouse 1:15:05 Microsoft patches 622 CVEs — a record 1:20:29 APT corner: Daxin resurfaces after 13 years of dwell time 1:29:45 Balochistan police, and Microsoft's attribution-free wiper 1:34:26 Denis Obrezkov, leaked Kaspersky records, and the wrong questions 1:46:01 Magnet Forensics sues over a burned iPhone bug 1:57:57 Shout-outs

What happens when a ransomware attack takes less effort than ordering takeout? In this live news episode of The Audit, Joshua Schmidt, Eric Brown, and Nick Mellem sit down with Tabitha Senty of IT Audit Labs to break down the headlines shaping cybersecurity right now. The crew covers how AI is lowering the barrier to entry for ransomware attacks, why identity and access still sit at the center of every breach, and how threat actors are chaining together low and medium severity vulnerabilities to gain a foothold nobody saw coming. From there, the conversation moves into social engineering and the human side of security, including DEF CON's social engineering contest and lessons on training people without fear or punishment. The crew also digs into a CISA warning on how fast AI is accelerating cyber risk, a fresh executive push on post-quantum cryptography, and closes out with a head-scratching pivot from Midjourney into full-body health scanners at spas, and everything that could go wrong with it. In this episode: Why AI is lowering the cost of ransomware attacks — Identity and access are still the real entry point, and AI just makes the attack faster once someone's in. How threat actors chain low-severity vulnerabilities into major breaches — Eric explains why patching only highs and criticals is no longer enough to protect an environment. The social engineering tactics still fooling smart people — Pretexting as IT, DEF CON's live social engineering contest, and why fear-based training backfires. A CISA warning that cyber risk is accelerating faster than expected — The timeline for AI-driven offensive capability is no longer years away, it's months. Midjourney's pivot into full-body health scanners at spas — The crew unpacks the security, compliance, and data governance nightmare hiding behind a wellness trend. If this conversation sparked something, share it with someone who needs to hear it. Like, share, and subscribe for more of the discussions shaping the future of cybersecurity and IT. #AIRansomware #Cybersecurity #SocialEngineering #PostQuantum #IdentitySecurity #ITAudit #CyberNews #DEFCON #ThreatIntelligence #CyberRisk 

Nightmare Eclipse drops another Windows zero-day. The Gentlemen take the ransomware crown. CISA orders emergency Fortinet patching. Canada's surveillance bill faces U.S. scrutiny. Meta's Oversight Board flags AI censorship bias. Commerce tops the cyber target list. An active espionage campaign hits Bangladesh's military. The Hewlett Foundation commits $100 million to emerging tech security. And U.S. prosecutors dismantle an alleged cyber-enabled money laundering network. Our guest is Nick Stohlman, Vice President of CJIS Strategy at Imprivata, talking about CJIS readiness and the identity security challenges facing public safety agencies. Leaked source code reveals an AI mixtape. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Nick Stohlman, Vice President of CJIS Strategy at Imprivata, talking about CJIS, Criminal Justice Information Services, readiness and the identity security challenges facing public safety agencies. Selected Reading New Windows LegacyHive zero-day gives hackers admin privileges (Bleeping Computer) The Gentlemen Overtakes Qilin as Most Prolific Ransomware Threat (Infosecurity Magazine) CISA urges immediate action on actively exploited Fortinet flaws (Bleeping Computer) Senator calls on Rubio, Blanche to push back against Canadian surveillance legislation (The Record) Meta Oversight Board finds top AI models less likely to criticize repressive regimes (Reuters) Commerce faces rising AI bot activity, escalating DDoS attacks, and new fraud tactics (Akamai) From Biography to Backdoor: Tracking a DoNot (APT-C-35) Intrusion Targeting Bangladesh Military Personnel (Cyderes) Hewlett Foundation Announces New $100 Million Emerging Technology and Security Initiative (Hewlett Foundation) US charges two over laundering $43 million from investment fraud (Bleeping Computer) Hack Reveals Suno AI Music Generator Scraped YouTube, Deezer, and Genius (404 Media) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Crogl calls it a Knowledge Engine for Security Operations, and the idea is simple: analysts are drowning in alerts, and cutting corners isn't the fix. Every alert deserves a real look. So Crogl built an AI that works alongside the analyst, not instead of them, an assistant one investor called an "Iron Man suit" for security researchers. The goal isn't to replace the team. It's to make every single analyst as effective as the whole team combined. Monzy Merza, Co-founder and CEO of Crogl, joins us today on BarCode to talk community, what's coming at Black Hat, and why the best defense in cybersecurity might just be showing up and sharing what you know.SYMLINKS[Crogl] - https://crogl.com An AI-powered security operations platform that helps security teams investigate alerts, perform threat hunting, and automate cybersecurity workflows while keeping customer data within their own environment.[Monzy Mirza – LinkedIn] - https://www.linkedin.com/in/monzymerza/ The official LinkedIn profile of Monzy Mirza, Co-founder and CEO of Crogl, where he shares insights on AI, cybersecurity, and security operations.[MITRE ATT&CK® Framework] - https://attack.mitre.org/ A globally recognized cybersecurity knowledge base maintained by MITRE that documents adversary tactics, techniques, and procedures (TTPs). Crogl references the framework for investigating security alerts and threat hunting.[CISA] - https://www.cisa.gov/ The U.S. Cybersecurity and Infrastructure Security Agency. The episode discusses using CISA advisories, such as those related to Volt Typhoon, as inputs for threat hunting.[Volt Typhoon Advisory] - https://www.cisa.gov/news-events/cybersecurity-advisories CISA's collection of official cybersecurity advisories, including guidance on the Volt Typhoon threat actor. The episode references uploading these advisories into Crogl for automated threat hunting.[Slack] - https://slack.com/ A workplace collaboration platform. Crogl provides customers with access to a Slack community where users can interact directly with the engineering team and provide product feedback.[Black Hat USA] - https://www.blackhat.com/us-25/ One of the world's leading cybersecurity conferences. Monzy mentions that the Crogl team will host a booth, hackathon, and community sessions during Black Hat.

CISA warns of active SharePoint attacks. The NSA pushes coordinated vulnerability disclosure. ClickLock Stealer targets macOS. Splunk and Zoom patch critical flaws. Spirals ransomware strikes in under 24 hours. New Windows evasion techniques emerge. LabubaRAT poses as NVIDIA software. 23andMe settles over its 2023 breach. Plus, a look back at one of the most audacious data center heists ever pulled off. Our guest is Ryan Kalember, Chief Strategy Officer at Proofpoint, discussing why agentic AI is creating a new insider threat. Near, far, wherever you are…the scam must go on. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Ryan Kalember, Chief Strategy Officer at Proofpoint, and he is discussing why agentic AI is creating a new insider threat. Selected Reading CISA urges immediate SharePoint hardening as exploits mount (CSO Online) NSA joins CISA and Others in Releasing the Cybersecurity Information Sheet “Establishing a Coordinated Vulnerability Disclosure Program to Work with Security Researchers” (NSA) ‘ClickLock Stealer' Bypasses macOS Security With Social Engineering, Process Killing (SecurityWeek) Splunk, Zoom Patch Critical Vulnerabilities (SecurityWeek) New Spirals ransomware encrypts victim network in under 24 hours (Bleeping Computer) Bind Link Abuse: One Windows Feature, Many Ways to Blind Your EDR (Bitdefender) LabubaRAT: A Rust Based Remote Access Tool Masquerading as NVIDIA Software (Blackpoint Cyber) 23andMe reaches $18 million settlement with states for massive breach (The Record) How a Gang of Thieves Pulled Off a Multimillion-Dollar Data Center Heist (The New York Times) Fake Céline Dion Paris Tickets Sold on Facebook and Ticketmaster Clones (Hackread) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

The United States is bombing Iran for a fourth straight night, Senator Lindsey Graham is dead and his Senate seat went to his sister, the agency that certifies your voting machines just got emptied by email, and a text message that would not admit it was a bot tried to move Radell's opinion on Israel. The thread tonight is one question: who actually gets to decide, and who is being kept out of the room? In this episode of Purple Political Breakdown: Iran and the Strait of Hormuz: the June memorandum collapsed, the strikes and the naval blockade are back, oil is near 85 dollars, and the White House position keeps reversing faster than it can be reported. Why the missing story is not the policy, it is the absence of one. Lindsey Graham: the senator's death, the appointment of his sister Darline Graham Nordone to the seat on the President's recommendation, and an honest look at the record, including the 2016 Merrick Garland blockade and the 2020 Amy Coney Barrett confirmation eight days before the election. The Election Assistance Commission: what this quiet agency actually does for your vote, why firing every commissioner months before a midterm matters, and the receipts that connect it to the SAVE Act, the DOGE and True the Vote data deal, the ERIC exodus, and the CISA cuts. Breakdown in the Public: the "Friends for Peace" texts Radell received, traced by reporters to Brad Parscale's firm and a nine million dollar Israeli Foreign Ministry contract, plus fresh polling on where American opinion on Israel actually stands. Research on a Dime: the Maine Senate scramble to replace Graham Platner and who the Democrats might pick, and the new 21st Century ROAD to Housing Act that became law without a signature. Good News to close: Pakistan's rooftop solar boom, a landmark NHS heart-attack prevention rollout, and a gene therapy giving deaf children their hearing. NEW: main shows are now live on Wednesdays, and the full podcast episode now drops Thursdays at 8am EST. CHAPTERS 0:00 Intro, updates, and tonight's through-line 5:24 Nuanced News. Iran: a war with no off-ramp 11:12 Lindsey Graham has died, and the seat went to his sister 19:00 The EAC firing and the machinery of election security 28:26 Quick hits across the news 31:02 Breakdown: the Friends for Peace texts, and who is moving your opinion 39:04 Viewer mail: NATO, Ukraine, and Russia's invasion 41:46 Research on a Dime: Maine's Senate scramble after Platner 49:34 The housing law that passed without a signature 55:41 Good News to close 59:56 Outro and what is next Got a political solution worth sharing? Post it in the new community: https://www.reddit.com/r/policysolutions/ Watch and subscribe: [EPISODE LINK] Listen on Apple Podcasts: https://podcasts.apple.com/podcast/id1626987640 Website: https://www.purplepoliticalbreakdown.com Standard Resource Links & Recommendations The following organizations and platforms represent valuable resources for balanced political discourse and democratic participation: PODCAST NETWORK Check Out the Podcast Website: https://www.purplepoliticalbreakdown.com ALIVE Podcast Network: Check out the ALIVE Network where you can catch a lot of great podcasts like my own, led by amazing Black voices. Link: https://alivepodcastnetwork.com/ CONVERSATION PLATFORMS HeadOn: A platform for contentious yet productive conversations. It's a place for hosted and unguided conversations where you can grow a following and enhance your conversations with AI features. Link: https://app.headon.ai/ Living Room Conversations: Building bridges through meaningful dialogue across political divides. Link: https://livingroomconversations.org/ UNITY MOVEMENTS Us United: A movement for unity that challenges Americans to step out of their bubbles and connect across differences. Take the Unity Pledge, join monthly "30 For US" conversation calls, wear purple (the color of unity), and participate in National Unity Day every second Saturday in December. Their programs include the Sheriff Unity Network and Unity Seats at sports events, proving that shared values are stronger than our differences. Link: https://www.us-united.org/ BALANCED NEWS & INFORMATION OtherWeb: An AI-based platform that filters news without paywalls, clickbait, or junk, helping you access diverse, unbiased content. Link: https://otherweb.com/ VOTING REFORM & DEMOCRACY Equal Vote Coalition & STAR Voting: Advocating for voting methods that ensure every vote counts equally, eliminating wasted votes and strategic voting. Link: https://www.equal.vote/star Future is Now Coalition (FiNC): A grassroots movement working to restore democracy through transparency, accountability, and innovative technology while empowering citizens and transforming American political discourse. Link: https://futureis.org/ POLITICAL ENGAGEMENT Independent Center: Resources for independent political thinking and civic engagement. Link: https://www.independentcenter.org/ GET DAILY NEWS Text 844-406-INFO (844-406-4636) with code "purple" to receive quick, unbiased, factual news delivered to your phone every morning via Informed (https://informed.now) Check Out the Unfuck America Tour & National Ground Game: https://www.nationalgroundgame.com/ Check Out the CIVICS App to Know More About Your Politicians: https://www.civicpolitics.com Subscribe to the Substack: https://open.substack.com/pub/purplepoliticalbreakdown ALL LINKS https://linktr.ee/purplepoliticalbreakdown The Purple Political Breakdown is committed to fostering productive political dialogue that transcends partisan divides. We believe in the power of conversation, balanced information, and democratic participation to build a stronger society. Our mission: "Political solutions without political bias." Subscribe, rate, and share if you believe in purple politics, where we find common ground in the middle! Also if you want to be apart of the community and the conversation make sure to Join the Discord: https://discord.gg/ptPAsZtHC9

AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience

AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience

AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience

AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience

AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience

AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience

AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience

AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed. Europe warns their largest banks to prepare for AI attack. The EU launches an action plan for AI Cybersecurity. China considers keeping its budget AI to itself. The UK's NCSC & GCHQ announce their "Cyber Shield". CISA is using Mythos to audit U.S. government code. Microsoft warns of their upcoming patch flood. "RoguePlanet" receives an on-the-fly patch. An underused mode to kid-proof an iPhone. Listener feedback and three new AI attacks HalluSquatting, GhostApproval & GitLost Show Notes - https://www.grc.com/sn/SN-1087-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT arcticwolf.com/trends threatlocker.com/twit XBOW.com adaptivesecurity.com cohesity.com/Resilience

Tuesday, July 14, 2026 Today, Trump will give a Thursday night address likely to produce falsified evidence of foreign interference in the 2020 election; a federal judge has sanctioned two lawyers and referred Blanche and Woodward to the Bar for disciplinary action after finding Donald's lawsuit against the IRS was a fraud on the court; the Justice Department has finally turned over evidence in the shooting case of Renée Good by ICE agent Jonathan Ross in Minneapolis; 12 states have filed a lawsuit to block the Paramount Skydance and Warner Bros. merger; the Governor of South Carolina has appointed Lindsey Graham's sister to take over his Senate seat for the remainder of the term; ICE agents have killed another person in a vehicle in Biddeford Maine sparking protests at Susan Collins' office; 20 agents from the FBI and other federal agencies were seen with U.S. Capitol Police officers entering Lindsey Graham's house; Katie Phang fires back at Todd Blanche's refusal to release court-ordered Epstein documents; plus Allison delivers your Good News. The Daily Beans is proud to partner with Miles Taylor and our friends at DEFIANCE.org For a limited time, members of the Daily Beans community can receive a FREE 3-month full membership to DEFIANCE.org and gain access to one of the fastest-growing pro-democracy movements in America. Join here: https://www.defiance.org/beans   Thank You, HoneyLove Save 20% Off Honeylove by going to honeylove.com/DAILYBEANS #honeylovepod  #sponsored Thank You, OneSkin Get 15% off OneSkin with the code DAILYBEANS at  https://www.oneskin.co/dailybeans #oneskinpod #ad   Join The Daily Beans and give a gift today to ensure The Trevor Project can continue its crucial work in the face of continued challenges. Donate to The Trevor Project - Daily Beans Podcast The Latest Breakdown:BREAKING: EXCLUSIVE: FBI Admits it has Epstein Files Training Videos StoriesTrump election task force to begin releasing classified intel documents | MS NOW Trump Had Role in Weighing Proposals to Seize Voting Machines | The New York Times Trump administration tried to ‘manipulate the judicial process' with its IRS settlement, judge says | NBC News Fractures emerge after feds share evidence from Good, Pretti killings with Minnesota authorities | Minnesota Star Tribune 12 states file lawsuit to block $110 billion Paramount-Warner Bros. merger | NBC News Lindsey Graham's sister picked to serve the rest of his Senate term | The Washington Post FBI agents search Sen. Graham's DC home | NBC News ICE Agent Kills Person in Vehicle in Biddeford, Maine, State Officials Say | The New York TimesGood TroubleOppose Todd Blanche for Attorney General ⭑ 5 Calls →Urge Democrats to Oppose and Stop Trump's Crypto Corruption | Indivisible Guide →Defiance.org/beans →Show up for our Libraries - action.ala.org →goodtroubleliveson.org/ July 17-19 →How to help those impacted by the Venezuela earthquakes|AP →Oppose House Amendment to Defund the Peace Corps! →Stand With Minnesota →ICE List  →iceout.org Good Newsdana-goldbergs-southwest-funnyfest Oct 9 -Email Dana@DanaGoldberg.com for sponsorship information Tour - DANA GOLDBERGTickets for Dana Goldberg: Outrageous - Sep 23 - Den Theater - Chicago  →Share your Good News & Good Trouble - The Daily Beans →Beans Talk audio -beans-talk.simplecast.com →Email Dana LGBTQ Owned eating establishments in your area - hello@mswmedia.com Subject: “Dana's Project” Subscribe to the MSW YouTube Channel - MSW Media - YouTube Our Donation Links The Trevor Project - trevorproject.org/beans Blue Wave California - https://secure.actblue.com/donate/msw-bwc Donate to Public Citizen - https://citizen.org/beans/ Donate to It Gets Better / The Daily Beans Fundraiser Pathways to Citizenship link to MATCH Allison's Donationhttps://crm.bloomerang.co/HostedDonation?ApiKey=pub_86ff5236-dd26-11ec-b5ee-066e3d38bc77&WidgetId=6388736 Join Dana and The Daily Beans in support of Human Rights Campaign http://onecau.se/_ekes71 More Donation LinksNational Security Counselors - Donate, ActBlue.com/donate/msw-bwc, WhistleblowerAid.org/beans Dr. Allison Gill - The Breakdown | Allison Gill, Mueller, She Wrote @muellershewrote.com - Bluesky, MSW & The Daily Beans Podcast @muellershewrote - Instagram, MSW Media - YouTube →Federal workers - email AG at fedoath@pm.me and let me know what you're going to do, or just vent. I'm always here to listen.  Dana Goldberg - Dana is on Patreon! At Dana's Dugout, @dgcomedy - Bluesky, @dgcomedy - IG, Dana Goldberg - Facebook,  DanaGoldberg.com More from MSW Media - Shows - MSW Media, Cleanup On Aisle 45 pod, The Breakdown | Allison Gill Reminder - you can see the pod pics if you become a Patron. The good news pics are at the bottom of the show notes of each Patreon episode! That's just one of the perks of subscribing! patreon.com/muellershewrote Listener Survey:http://survey.podtrac.com/start-survey.aspx?pubid=BffJOlI7qQcF&ver=shortFollow the Podcast on Apple:https://apple.co/3XNx7ckWant to support the show and get it ad-free and early?https://patreon.com/thedailybeanshttps://dailybeans.supercast.com/https://apple.co/3UKzKt0 Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Treasury sanctions a VPN provider tied to ransomware. The Pentagon hits pause on CMMC audits. Critical flaws surface in Google Cloud's Dialogflow CX. Estée Lauder discloses a data breach. Mobile networks become a battlefield for tracking U.S. personnel. Australia calls out Big Tech over child safety. SAP patches critical bugs. CISA flags an actively exploited Cisco flaw. And the federal government accelerates AI investments. Our guest is Bogdan Botezatu, Senior Director, Threat Research and Reporting at Bitdefender, talking about Cyberthreats to Journalists and Influencers. AI costs savings come at a price. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Bogdan Botezatu, Senior Director, Threat Research and Reporting at Bitdefender, is talking about "Targeting the Messengers: Cyberthreats to Journalists and Influencers," their awareness campaign designed to address the escalating digital and reputational risks faced by media professionals in hostile environments. Selected Reading US sanctions VPN, malware providers for enabling ransomware attacks (Bleeping Computer) Pentagon announces 'immediate suspension' of CMMC Phase II mandates (Breaking Defense) Google Cloud Dialogflow CX vulnerability allowed AI agent hijacking | brief  (SC Media) Estée Lauder Companies Reports Data Breach Exposing Health Records and SSNs (Beyond Machines) US military targeted in Iran war phone-tracking campaign (Financial Times) Australia finds serious gaps in Big Tech response to online child sexual abuse (Reuters) SAP warns of critical flaws in NetWeaver and Commerce Cloud (Bleeping Computer) CISA adds Cisco IOS flaw to known exploited vulnerabilities catalog | brief (SC Media) Federal AI Projects Get Priority in TMF Funding Dash (GovInfo Security) Companies Are Throttling Employees' AI Use Because It's Too Expensive (404 Media) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

The episode highlights a structural shift in cybersecurity risk, moving from a reliance on human skill as both the source of attack and defense to a landscape shaped by autonomous AI agents acting as privileged entities inside client environments. This pivot is illustrated by Sysdig's discovery of an agentic ransomware attack (“Jade Puffer”) where AI software—not a human operator—managed intrusion end-to-end, adapting in real time without manual intervention. The key structural effect is a drastic reduction in the cost and skill required to mount effective attacks, while simultaneously introducing unmanaged access points in the form of AI agents with human-equivalent credentials. Supporting this shift, Sysdig found that the AI-driven “Jade Puffer” attack executed more than 600 payloads, automatically adjusted after failures, and required minimal human oversight. ZDNet reported Apple's unusually rapid patch cycle, attributed by the company to the speed of AI-driven exploit development. According to IT Pro, attackers typically remain inside networks for about two and a half weeks before detection, with nearly half of breaches only discovered after data loss. The U.S. cybersecurity agency CISA admitted to lacking an incident response playbook, improvising during a breach. These developments collectively indicate that existing human-centric security models are being outpaced by autonomous threats. Further reinforcing this thesis, The New Stack emphasized a governance gap: most organizations lack standards for assigning identity or scoping access for AI agents, which today operate using human credentials without effective monitoring or control. AvePoint's research, as cited by Dave Sobel, suggests the number of unseen AI tools inside organizations has nearly tripled, while about half of employees now use AI agents frequently. While agent-based automation expands operational efficiency, the inability to monitor or restrict these agents exposes a widening attack surface and undermines traditional governance. For MSPs and IT service leaders, the operational ramifications include increased accountability for identifying, inventorying, and scoping AI agents as privileged identities within client environments. Continuing to rely on human-centric security and pricing models risks misalignment with actual exposure. The analysis suggests treating AI agent identity management as a distinct, recurring service line—akin to user identity and multifactor authentication—with pricing linked to risk rather than labor hours. Failure to proactively address this governance gap may result in unaccounted incidents and reactive, non-strategic service delivery that affects renewal cycles and liability positions. 00:00 5 Security Alarms Ringing at Once  04:22 Why Hacking No Longer Takes Skill  06:40 Your Agents Became the New Insiders 09:14 Why Do We Care?  Supported by: ScalePad 

On this week's Security Sprint, Dave and Andy covered the following topics:Opening:• The Show Must Go On: Building Cyber Resilience for Venues — Global Awareness Professionals — 08 Jul 2026. Global Awareness Professionals published a Gate 15 guest post on strengthening venue cyber resilience through assessment, planning, exercises, and post-incident learning. • Lessons from CISA's Cyber Incident — Cybersecurity and Infrastructure Security Agency — 09 Jul 2026. CISA disclosed lessons from its response to an incident involving credentials exposed through a publicly accessible software repository. Main Topics:New York to ban smart glasses from all courthouses. All courts in New York state will ban smart glasses starting later this month. Beginning on July 20, all eyewear or headwear that contains cameras, microphones or other recording technology will not be allowed inside any Unified Court System facilities, according to a memo from the Office of Court Administration. The ban applies to more than 1,240 state, county, city, town and village courts.Terrorism / Extremism• When violence shapes identities: In a larger pool of perpetrators. — Europol — 13 Jul 2026. Europol's European Union Terrorism Situation and Trend Report 2026 assesses that terrorism in Europe is becoming increasingly decentralized, with a broader and more diverse pool of perpetrators motivated by jihadist, right-wing extremist, left-wing extremist, anarchist, separatist, and single-issue ideologies. The report notes continued growth in lone-actor violence, online radicalization, youth involvement, and hybrid ideological influences that blur traditional threat categories. Europol emphasizes that violent extremist ecosystems increasingly reinforce one another through online platforms, propaganda, and shared narratives even when ideological goals differ. • Feared for years, an Iranian attack on US soil has not materialized. Here's why. — Christian Science Monitor — 10 Jul 2026. The article examines why Iran has not conducted a large-scale retaliatory attack inside the United States despite decades of concern from U.S. intelligence and security officials. • Blurring Terrorism and War: Russia's Counter-Terrorism Framework and the Risks for International Partners — International Centre for Counter-Terrorism — 09 Jul 2026• 8 men indicted in planned drone and sniper attack on White House UFC cage-fighting show — Associated Press — 10 Jul 2026Severe Weather:• CSU Hurricane Seasonal Forecasting — Colorado State University — 08 Jul 2026. Colorado State University's initial seasonal hurricane forecast and press release for 2026 was released on Thursday, April 9, 2026 and updated on Wednesday, June 10, 2026 and Wednesday, July 8, 2026. • Taiwan, Japan and south-eastern China brace for Typhoon Bavi as landslides kill 15 in Philippines • 100 million Americans face dangerous heat as temperatures surge • A ‘super' El Niño is brewing. Experts fear historic dangers from extreme weather Quick Hits:• NSA and Partners Release Guidance on Improving Router Hygiene to Protect Against Russian State-Sponsored Targeting — National Security Agency — 13 Jul 2026 • Frontier AI models and their impact on cyber security – an update on AI model harnesses — Australian Signals Directorate — 13 Jul 2026• Cyber Shield: The path to an agentic AI future for cyber defence — National Cyber Security Centre — 07 Jul 2026• National Day of Protest Against Data Centers on July 18—Map, List of Cities — Newsweek — 09 Jul 2026• CISA expects to finalize key cyber reporting rule by September — Nextgov/FCW — 06 Jul 2026

What happens when the nation's top cybersecurity agency has to write its incident response playbook during an active high-severity breach? In this episode of The Other Side of the Firewall, hosts Ryan, Shannon, and Chris sit down with special guest Alfredzo Nash from Cyber Coffee Hour to dissect a sobering TechCrunch report. We break down the recent CISA incident where AWS GovCloud access keys were exposed on GitHub, forcing the agency into a reactive scramble. But this isn't just a story about a credential leak. We dive deep into the systemic root cause: the compounding risk of slashing cybersecurity budgets and understaffing critical defensive teams. We tackle our two core pillars—analyzing fast-breaking industry news and exploring the real-world human impact on cyber career journeys. Is your organization just a "near miss" away from a headline? Let's find out. Article: US cybersecurity agency CISA had to build its incident playbook during the incident, agency reveals IwZXh0bgNhZW0CMTAAYnJpZBExWE1PRGtpNlVUNUtkRVdhRnNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5qB_nVUyi5j5BO5RI9VGpxbnqozkuy4u4cN8kkBCwTRasFAphwzshAmuKRfQ_aem_BHpwfyX5nw3YEzT0oTwDjw Accenture faces massive data breach that could put clients at risk https://www.cybersecuritydive.com/news/accenture-data-breach-access-keys-source-code/824694/?fbclid=IwZXh0bgNhZW0CMTAAYnJpZBExWE1PRGtpNlVUNUtkRVdhRnNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5qB_nVUyi5j5BO5RI9VGpxbnqozkuy4u4cN8kkBCwTRasFAphwzshAmuKRfQ_aem_BHpwfyX5nw3YEzT0oTwDjw New EU plan to address the risks and opportunities of advanced AI for cybersecurity https://commission.europa.eu/news-and-media/news/new-eu-plan-address-risks-and-opportunities-advanced-ai-cybersecurity-2026-07-07_en?fbclid=IwZXh0bgNhZW0CMTAAYnJpZBExWE1PRGtpNlVUNUtkRVdhRnNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR7rdjYRQaMXsmyypowwz0NfMYalcDOM3Lo9XxFvMTZYvPT-SJo9qrMKhdPmQg_aem_SSGK7okw4s7uTXpXTAzNMA Buy my book: https://www.theothersideofthefirewall.com/ Please LISTEN

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, we're getting into the daily realities of modern internal auditing — the messy, practical, and sometimes uncomfortable challenges that don't always make it onto conference agendas. Jas Gill sits down with Asim Fareeduddin to talk through what's shaping internal audit. Fareeduddin shares why business acumen is the hardest skill to hire for, how to think about AI beyond the basics, and why understanding how your company makes, and could lose, money is the foundation of every valuable audit. HOST: Jasdeep Gill, CIA, CISA, CISM, CFE Senior Manager, Internal Audit and Assurance, RELX  GUEST: Asim Fareeduddin, CISA, CPA, CISM, CIPP, CISSP Head of Internal Audit and Assurance, RELX KEY POINTS: Introduction [00:00:02-00:00:50] Geopolitical Instability and Flexible Audit Planning [00:00:50-00:02:43] Cyber Risk, Upskilling, and Second-Line Collaboration [00:02:43-00:05:31] Auditing Culture and Behavior [00:05:31-00:07:05] Measuring Internal Audit Impact [00:07:05-00:10:04] Business Acumen and the Future Audit Talent Profile [00:10:04-00:12:36] Upskilling Through AI, Training, and Practical Exposure [00:12:36-00:14:45] Competing for Top Talent [00:14:45-00:17:29] Skills for the Modern Internal Auditor [00:17:29-00:21:31] Building Professional Courage and Trust [00:21:31-00:24:50] Commercial Curiosity and Understanding Revenue Risk [00:24:50-00:27:44] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Vision 2035 Cybersecurity Topical Requirement Knowledge Center: Artificial Intelligence Communicating with the Board: Turning Audit Insights   Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

・Lessons from CISA's Cyber Incident | CISA ・CISA Admin Leaked AWS GovCloud Keys on Github – Krebs on Security … もっと読む "第309回 これはボクも聴くのが楽しみだ！スペシャル！" The post 第309回 これはボクも聴くのが楽しみだ！スペシャル！ first appeared on podcast - #セキュリティのアレ.

From October 30, 2024: The Cybersecurity and Infrastructure Security Agency (CISA) has taken a leading role in coordinating efforts to secure the 2024 election—from ensuring the physical security of election workers, to protecting election systems from cyber threats, to identifying foreign influence campaigns and preparing for deepfakes. With a week until Election Day, Senior Editors Quinta Jurecic and Eugenia Lostri spoke with CISA's Cait Conley, Senior Advisor to the agency's director, about how CISA is working to protect the vote. To receive ad-free podcasts, become a Lawfare Material Supporter at www.patreon.com/lawfare. You can also support Lawfare by making a one-time donation at https://givebutter.com/lawfare-institute.Support this show http://supporter.acast.com/lawfare. Hosted on Acast. See acast.com/privacy for more information.

Intel Chat with Matt Bromiley and Chris Luft.Matt and Chris break down four stories from the week in threat intel:• Varonis Threat Labs' "Rogue Agent" — a permission boundary flaw in Google Dialogflow CX's Code Blocks feature that could let an attacker with a single permission (dialogflow.playbooks.update) inject persistent malicious code into a chatbot's execution pipeline and silently exfiltrate conversations; Google has fully patched it, no customer action required.• The EvilTokens campaign and "ghost phishing" — AES-GCM-encrypted phishing pages that look harmless to URL scanners and only reveal themselves after decrypting in the victim's browser, driving Microsoft device code phishing against Microsoft 365 accounts.• CISA adds four actively exploited flaws to the KEV catalog with a July 10 patch deadline under BOD 26-04: Adobe ColdFusion (CVE-2026-48282, CVSS 10.0), Langflow (CVE-2026-55255, chained with CVE-2026-33017), and Joomla's SP Page Builder (CVE-2026-48908) and Page Builder CK (CVE-2026-56290) extensions.• HalluSquatting — Tel Aviv University researchers show attackers can register the repository names AI coding assistants predictably hallucinate, then ride prompt injection to code execution on developer machines — with success rates up to 85% for repos and 100% for skill installs across Cursor, Windsurf, Copilot, Cline, Gemini CLI and more.Stories covered:• https://www.darkreading.com/application-security/dialogflow-cx-rogue-agent-flaw-enabled-ai-chatbot-data-theft• https://thehackernews.com/2026/07/new-ghost-phishing-wave-is-breaking.html• https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-coldfusion-langflow-joomla-flaws/• https://thehackernews.com/2026/07/new-hallusquatting-attack-could-trick.htmlChapters:0:00 Intro & catching up4:31 Google Dialogflow CX "Rogue Agent" flaw11:03 EvilTokens & "ghost phishing"17:37 CISA KEV: ColdFusion, Langflow & Joomla — patch by July 1024:56 HalluSquatting: weaponizing AI hallucinations33:16 Wrap-upThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.Subscribe wherever you listen:• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740• YouTube: https://www.youtube.com/@limacharlieioLearn more about LimaCharlie: https://limacharlie.io#cybersecurity #infosec #threatintel #AIsecurity #phishing

Accenture confirms a data breach. An Australian telecom investigates a nationwide outage. It's shields up for the UK. CISA eyes September for its critical infrastructure reporting rule. NewsJunkie fakes CTV ad traffic. Agentic AI triggers EDR. CISA taps Mythos for vulnerability scans. Meta faces trillion dollar fines in state lawsuits. Our guest is Russ Anderson, COO and co-founder of RapidFort, sharing a coordinated industry effort to harden the world's most critical open source software against AI-enabled cyber threats. When it comes to breaches, mum's the word.  Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Russ Anderson, COO and co-founder of RapidFort, is sharing the Linux Foundation's Akrites initiative, a coordinated industry effort to harden the world's most critical open source software against AI-enabled cyber threats. Selected Reading Accenture confirms breach after hacker offers stolen data for sale (Bleeping Computer) Nationwide Telstra outage disrupts thousands, raises questions of foreign launched cyberattack (The Nightly) Britain plans to build autonomous AI 'Cyber Shield' to defend nation (The Record) CISA Eyes September Date for Final Cyber Incident Reporting Rule (MeriTalk) HUMAN Security Disrupts CTV Device Spoofing Operation "NewsJunkie" (Globe Newswire) When AI agents look like attackers: what behavioral telemetry tells us (SOPHOS) Space Force adds Relativity, Impulse Space to national security launch program. (Space News)  CISA Deploys Anthropic's Mythos AI to Hunt Vulnerabilities in U.S. Government Code (Security Affairs) Mark Zuckerberg's biggest legal nightmare yet could cost Meta $1.4 trillion (The Independent) Most cybersecurity workers have been told to conceal a breach, report finds (Cybersecurity Dive) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

The DHS inspector general will investigate forced CISA reassignments, Canada hacked a ransomware gang, Taiwan charges two executives with helping Chinese hackers, and new vulnerabilities can disable Hoymiles solar panels. Show notes Risky Bulletin: All new cars to include a camera aimed at the driver's face

SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Andy's career transition from Microsoft to Zscaler, the return of the AI model Fable and its user experience, and a critical SharePoint vulnerability that has caught CISA's attention. They delve into the implications of these topics for security professionals and the importance of staying updated on actively exploited vulnerabilities.----------------------------------------------------YouTube Video Link: ⁠⁠https://youtu.be/3VbR22krL-w----------------------------------------------------Documentation: https://www.bleepingcomputer.com/news/artificial-intelligence/claude-fable-relaunch-disappoints-users-with-nerfed-performance/https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659https://www.cisa.gov/known-exploited-vulnerabilities-catalog----------------------------------------------------Contact Us:Website: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.linkedin.com/company/bluesecpodYouTube: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.linkedin.com/in/andyjaw/Email: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠andy@bluesecuritypod.com⁠----------------------------------------------------Adam BrewerTwitter: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://twitter.com/ajbrewerLinkedIn: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.linkedin.com/in/adamjbrewer/Email: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠adam@bluesecuritypod.com

Jack Cable, co-founder and CEO of Corridor and a former senior technical advisor at CISA, discusses AI's impact on cybersecurity, vulnerability discovery, and coding practices.

Intel Chat with Matt Bromiley and Chris Luft.Matt and Chris break down four stories from the week in threat intel:• Zenity researchers observed three campaigns where attackers hijacked internet-exposed AI inference endpoints (Ollama, LiteLLM) as free model backends for offensive operations — including the Strix and HexStrike-AI pentesting frameworks and a Codex agent posing as a "security auditor" — enabled by no-auth defaults and placeholder API keys.https://www.darkreading.com/cloud-security/attackers-hijack-exposed-ai-endpoints-power-offensive-ops• A CISA advisory on Daktronics controllers behind scoreboards, digital billboards and highway signs: unauthenticated path traversal, arbitrary file upload and default admin credentials chaining to root-level control, found and responsibly disclosed by a Princeton undergrad.https://www.securityweek.com/new-controller-flaws-expose-highway-signs-and-billboards-to-remote-hacking/• Cato's "DuneSlide" (CVE-2026-50548 / CVE-2026-50549) — two critical Cursor flaws where a single prompt injection escapes the terminal sandbox and executes arbitrary commands on a developer's machine; patched in Cursor 3.0.https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html• Anthropic restoring worldwide Claude Fable 5 access after the US Commerce Department lifted emergency export controls triggered by a jailbreak — plus what it means for AI governance, open-source model catch-up and the data center debate.https://thehackernews.com/2026/07/anthropic-restores-claude-fable-5-after.htmlChapters:0:00 Intro & catching up1:17 Attackers hijacking exposed AI backends (Ollama & LiteLLM)9:18 CISA advisory: billboard & highway sign controllers13:46 Cursor "DuneSlide" prompt-injection sandbox escape20:34 Claude Fable 5 export controls lifted28:17 Data centers, nuclear déjà vu & the AI race33:39 Wrap-upThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.Learn more about LimaCharlie: https://limacharlie.io#cybersecurity #infosec #threatintel #AIsecurity #promptinjection

AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers and careless disclosures are turning the cybersecurity playbook upside down. Win10's popularity forces another year of free updates. CISA directs all federal agencies to update their UniFi OS devices. CISA gave federal agencies "the weekend" to update Cisco devices. Australia is disturbed by a deeply compromised infrastructure provider. OpenAI introduces Daybreak-powered "Patch the Planet" initiative. Meta's employee monitoring-for-AI-training backfired badly. Script Kiddies figure out how to use AI to find vulnerabilities. AI improves with "looping", "repeating" or "iterating". A wonderful story about Kevin Mitnick. Serious hackers mistakenly left a server directory accessible Show Notes - https://www.grc.com/sn/SN-1085-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com/twit hoxhunt.com/securitynow cohesity.com/Resilience zscaler.com/security

AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers and careless disclosures are turning the cybersecurity playbook upside down. Win10's popularity forces another year of free updates. CISA directs all federal agencies to update their UniFi OS devices. CISA gave federal agencies "the weekend" to update Cisco devices. Australia is disturbed by a deeply compromised infrastructure provider. OpenAI introduces Daybreak-powered "Patch the Planet" initiative. Meta's employee monitoring-for-AI-training backfired badly. Script Kiddies figure out how to use AI to find vulnerabilities. AI improves with "looping", "repeating" or "iterating". A wonderful story about Kevin Mitnick. Serious hackers mistakenly left a server directory accessible Show Notes - https://www.grc.com/sn/SN-1085-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT XBOW.com hoxhunt.com/securitynow cohesity.com/Resilience zscaler.com/security

AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers and careless disclosures are turning the cybersecurity playbook upside down. Win10's popularity forces another year of free updates. CISA directs all federal agencies to update their UniFi OS devices. CISA gave federal agencies "the weekend" to update Cisco devices. Australia is disturbed by a deeply compromised infrastructure provider. OpenAI introduces Daybreak-powered "Patch the Planet" initiative. Meta's employee monitoring-for-AI-training backfired badly. Script Kiddies figure out how to use AI to find vulnerabilities. AI improves with "looping", "repeating" or "iterating". A wonderful story about Kevin Mitnick. Serious hackers mistakenly left a server directory accessible Show Notes - https://www.grc.com/sn/SN-1085-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT XBOW.com hoxhunt.com/securitynow cohesity.com/Resilience zscaler.com/security

AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers and careless disclosures are turning the cybersecurity playbook upside down. Win10's popularity forces another year of free updates. CISA directs all federal agencies to update their UniFi OS devices. CISA gave federal agencies "the weekend" to update Cisco devices. Australia is disturbed by a deeply compromised infrastructure provider. OpenAI introduces Daybreak-powered "Patch the Planet" initiative. Meta's employee monitoring-for-AI-training backfired badly. Script Kiddies figure out how to use AI to find vulnerabilities. AI improves with "looping", "repeating" or "iterating". A wonderful story about Kevin Mitnick. Serious hackers mistakenly left a server directory accessible Show Notes - https://www.grc.com/sn/SN-1085-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT XBOW.com hoxhunt.com/securitynow cohesity.com/Resilience zscaler.com/security

AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers and careless disclosures are turning the cybersecurity playbook upside down. Win10's popularity forces another year of free updates. CISA directs all federal agencies to update their UniFi OS devices. CISA gave federal agencies "the weekend" to update Cisco devices. Australia is disturbed by a deeply compromised infrastructure provider. OpenAI introduces Daybreak-powered "Patch the Planet" initiative. Meta's employee monitoring-for-AI-training backfired badly. Script Kiddies figure out how to use AI to find vulnerabilities. AI improves with "looping", "repeating" or "iterating". A wonderful story about Kevin Mitnick. Serious hackers mistakenly left a server directory accessible Show Notes - https://www.grc.com/sn/SN-1085-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT XBOW.com hoxhunt.com/securitynow cohesity.com/Resilience zscaler.com/security

AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers and careless disclosures are turning the cybersecurity playbook upside down. Win10's popularity forces another year of free updates. CISA directs all federal agencies to update their UniFi OS devices. CISA gave federal agencies "the weekend" to update Cisco devices. Australia is disturbed by a deeply compromised infrastructure provider. OpenAI introduces Daybreak-powered "Patch the Planet" initiative. Meta's employee monitoring-for-AI-training backfired badly. Script Kiddies figure out how to use AI to find vulnerabilities. AI improves with "looping", "repeating" or "iterating". A wonderful story about Kevin Mitnick. Serious hackers mistakenly left a server directory accessible Show Notes - https://www.grc.com/sn/SN-1085-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT XBOW.com hoxhunt.com/securitynow cohesity.com/Resilience zscaler.com/security

AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers and careless disclosures are turning the cybersecurity playbook upside down. Win10's popularity forces another year of free updates. CISA directs all federal agencies to update their UniFi OS devices. CISA gave federal agencies "the weekend" to update Cisco devices. Australia is disturbed by a deeply compromised infrastructure provider. OpenAI introduces Daybreak-powered "Patch the Planet" initiative. Meta's employee monitoring-for-AI-training backfired badly. Script Kiddies figure out how to use AI to find vulnerabilities. AI improves with "looping", "repeating" or "iterating". A wonderful story about Kevin Mitnick. Serious hackers mistakenly left a server directory accessible Show Notes - https://www.grc.com/sn/SN-1085-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: blackhat.com/us-26 and use code TWIT XBOW.com hoxhunt.com/securitynow cohesity.com/Resilience zscaler.com/security

The Supreme Court limits geofence warrants. DHS moves to expand CISA. The State Department offers $10 million for Russian hackers. A legal theory could reshape EU-U.S. data sharing. Plus, cyberattacks hit D.C. housing, Oracle and SimpleHelp flaws face active exploitation, malware lingers on Japanese military networks, and stolen Apple supplier data surfaces online. John Cannava, CIO at Ping Identity, discusses how identity threats don't go on holiday. The Secret Service dial down the risk on BYOD.  Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by John Cannava, CIO at Ping Identity, as he discusses how identity threats don't go on holiday: how attackers take advantage of these high-traffic moments to blend in with normal user behavior, and what needs to change to better protect fans of major events like this summer's World Cup, and identity threats in travel at large. Selected Reading Supreme Court says police need a warrant to obtain Google location data (Washington Post) DHS Eyes 600 New Cybersecurity Hires, New Director for CISA (BankInfo Security) US posts $10 million reward over Russian cyber campaign targeting Signal, WhatsApp (The Record) US Supreme Court just blew up EU-US Data Transfers (NOYB) DC Housing Authority hit by cyberattack, website down (WJLA) Exploitation of Recent Oracle E-Business Suite Vulnerability Begins (SecurityWeek) USB drives carrying China-linked malware infected Japanese military networks for nearly a year (Bitdefender) A forged login key unlocks SimpleHelp servers, and a new stealer is raiding cloud and AI credentials (SURIQ) Apple iPhone 18 Pro supplier list, parts and photos exposed in Tata data leak (Reuters) Even the Secret Service won't use company-issued phones (The Register) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

CISA sets urgent deadline to fix exploited Cisco flaw Chinese cybersecurity company claims it has a better-than-Mythos bug finder Amazon Q flaw enables cloud credential theft  Get the show notes here: https://cisoseries.com/cybersecurity-news-cisas-cisco-deadline-chinas-mythos-competitor-amazon-q-flaw/ Huge thanks to our sponsor, Silent Push Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues.  Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence. For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment. Learn more at silentpush.com

Tata Electronics and Bajaj Auto continue recovery from cyberattacks. FCC tightens undersea cable rules to bolster national security. CISA warns of actively exploited PTC vulnerability. Gamaredon expands toolkit, hides behind legitimate services. Iran-linked hackers turn public warning systems into psychological weapons. Threat actors target critical infrastructure across Southeast Asia. DCloud framework behind global scam economy. Polish police disrupt SIM-swapping gang. French statistics agency reports cyberattack affecting nearly 13,000 staff. Our guest is Michael Fanning, CISO at Splunk, discussing how AI doesn't create problems, it exposes them. And an open-book exam for hackers. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Michael Fanning, CISO at Splunk, discussing how AI doesn't create problems, it exposes them. Selected Reading Apple supplier Tata tightens internal controls after data breach, sources say (Reuters)  Bajaj Auto resumes normal operations as cyberattack probe continues (Storyboard18)  FCC passes new cybersecurity rules for emergency systems, undersea cables (CyberScoop) U.S. CISA adds Cisco and PTC Windchill and FlexPLM flaws to its Known Exploited Vulnerabilities catalog (SecurityAffairs)  Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances (ESET)  A Cyber-Psychological Operation: Iran-Linked Attackers Target Warning Systems (Claroty)  CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure (Unit 42) From San Pedro to Salinas: How a Chinese Framework “DCloud Uni-App” Powers a Global Scam Economy (Infoblox) Poland busts SIM-swapping gang tied to millions in crypto theft (BleepingComputer) France's statistics department reports cyberattack on staff data (Reuters) UK school's network left wide open for invasion, student found (The Register) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

LastPass says Klue breach affected customer information, but passwords remain secure. Attackers begin exploiting Cisco Unified CM vulnerability. CISA flags actively exploited Ubiquiti and Lantronix flaws, urges rapid patching. DifyTap flaws could expose private AI conversations across tenants. Researchers find AI plugin registry let unofficial tools masquerade as trusted software. xpl0itrs launches leak site, signaling shift toward full-service cyber extortion. Ransomware attack hits Indian auto giant Bajaj Auto. U.S. presses Meta to submit AI models for national security reviews. Alleged criminal marketplace administrator extradited to the US. U.S. expands sanctions against Cambodian scam network tied to cyber fraud operations. On today's Industry Voices segment, we are joined by Mike Masciulli, Managing Director, Migration Products and Services at Semperis, discussing RC4 and AD Migration: The Break Scenarios Hiding in Your Source Domain. And a lesson in access control. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest On today's Industry Voices segment, we are joined by Mike Masciulli, Managing Director, Migration Products and Services at Semperis, discussing RC4 and AD Migration: The Break Scenarios Hiding in Your Source Domain. If you enjoyed this conversation, check out the full interview here. Selected Reading Password manager maker LastPass says hackers stole customer support case data during Klue breach (TechCrunch) Klue says hackers stole credential from 2022 that led to customer data breaches (TechCrunch) Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks (BleepingComputer) U.S. CISA adds Ubiquiti UniFi OS and Lantronix EDS5000 plugin flaws to its Known Exploited Vulnerabilities catalog (SecurityAffairs)  DifyTap: Zafran discovers how attackers can silently wiretap AI data across tenants on a platform powering 1M+ apps  (Zafran)  23 ClawHub Plugins Squat Official Org Scopes (Manifold Security)  Cyber Intel Brief: xpl0itrs Leak Site Launch (Dataminr)  Indian auto giant Bajaj Auto hit by ransomware incident (The Record)  U.S. Presses Meta to Agree to A.I. Reviews as Security Concerns Rise (NY Times) Algerian Man Extradited to US for Running Cybercrime Marketplaces (SecurityWeek) US adds sanctions against accused Cambodian scammers Prince Group (Reuters) Ushering in the Next Frontier of Quantum Innovation (The White House)  Meta Exposed Data Internally From Its Controversial Employee-Tracking Program (WIRED)  Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Portland's Business Struggles and Las Vegas's SCHEDULE JBS 6-19-2026.1900 LAGrowth. Guest: Jeff Bliss. High taxes and progressive policies in Portland are driving a corporate exodus, including Under Armour, as business districts empty. Conversely, Las Vegas is thriving, highlighted by the opening of a massive four-story In-N-Out on the Strip. The segment also covers California's proposed wealth tax and calls to nationalize AI. 1Ethics Investigations into the Newsom Administration. Guest: Jeff Bliss. Governor Gavin Newsom and his wife, Jennifer Siebel Newsom, face investigations regarding millions in "behested payments" from entities like PG&E to her media company. While Newsom dismisses the probe as political weaponization, critics suggest these payments indicate potential undue influence and significant ethical scandals within the administration. 2Critique of Middle East Ceasefire Strategy. Guest: Richard Epstein. Epstein argues that recurring ceasefire declarations are merely strategic devices for rearmament rather than genuine steps toward peace. He criticizes current negotiation styles for alienating allies and failing to pursue the unconditional surrender of adversaries, which he believes is the only stable solution for regional security. 3Supreme Court Rulings on Gun Rights and Drug Use. Guest: Richard Epstein. In a unanimous decision, the Supreme Court ruled that marijuana use alone does not justify the categorical stripping of a citizen's Second Amendment rights. Epstein critiques the court's narrow reliance on originalism, suggesting a "police power" analysis should instead determine if a person poses an immediate physical threat. 4Economic Resilience in D.C. and Lancaster County. Guest: Jim McTague. A drop in gasoline prices has boosted consumer spending at retail stores and supermarkets. While D.C. remains popular with tourists, employers are struggling to find workers with specialized technical skills. Meanwhile, the housing market remains robust at the high end despite higher interest rates. 5Italian Defense Pressures and the Summer Heatwave. Guest: Lorenzo Fiori. Italy's government is balancing NATO's demands for increased military spending against rising energy costs. Simultaneously, a record-breaking heatwave reaching 104°F in Milan is straining public resources, prompting Fiori to recommend the cooler Garfagnana region for its fresh environment and traditional bean and cabbage soup. 6SpaceX's Aggressive Launch Schedule and Innovation. Guest: Bob Zimmerman. Gwynne Shotwell indicates that SpaceX's Starship may begin operational flights and orbital refueling tests by year's end. The company is also demolishing older facilities at Vandenberg for new launchpads, while private startups advance 3D-printed rockets and orbital satellite rescue missions to assist aging telescopes. 7Mars Discoveries and Cosmological Mysteries. Guest: Bob Zimmerman. The discovery of galaxies devoid of dark matter is challenging fundamental astronomical theories. On Mars, the Curiosity rover has reached smooth ground after five years of rocky terrain. Additionally, orbiters have detected multiple dust devils and potential frost and ice in the planet's equatorial regions during winter. 8Literary Giants of the New England Renaissance. Guest: Bruce Nichols. This segment explores the intense relationship between Hawthorne and Melville, who dedicated Moby Dick to Hawthorne. While Ralph Waldo Emersonoften criticized their dark worldviews, these authors, alongside Walt Whitman and Margaret Fuller, were instrumental in inventing a uniquely original and enduring American literary voice. 9Thoreau's Performative Solitude at Walden Pond. Guest: Bruce Nichols. Henry David Thoreau built his famous cabin on land owned by Ralph Waldo Emerson. Contrary to his image as a total hermit, Thoreau was quite social, often walking into town for fresh-cooked meals and laundry. He eventually spent years refining his journals into the masterpiece Walden. 10The Struggles and Triumphs of Louisa May Alcott. Guest: Bruce Nichols. Louisa May Alcott supported her family because her father, Bronson Alcott, failed to earn a consistent living. She served as a Civil War nurse, dealing with horrific casualties before contracting a severe illness she attributed to mercury poisoning. Her 1868 novel Little Womenfinally resolved the family's debts. 11The Literary Legacy and Final Days of the Alcotts. Guest: Bruce Nichols. Following the success of Little Women, Alcott resisted fan demands for her protagonist to marry Laurie, choosing an independent path. As the circle aged, both Emerson and Bronson Alcott suffered significant cognitive decline, with Louisa providing essential financial and personal support until her death in 1888. 12Diplomatic Strains and Escalation Risks in Ukraine. Guest: Anatol Lieven. European leaders are divided over initiating direct negotiations with Russia as the war remains stuck on the ground. While some advocate for offering Putina "golden bridge" to claim a symbolic victory, others argue for continued pressure, despite the constant risks of accidental or nuclear escalation. 13The Rise of Andy Burnham in UK Politics. Guest: Anatol Lieven. Greater Manchester Mayor Andy Burnham is emerging as a formidable potential successor to Prime Minister Keir Starmer. Though Burnham enjoys strong regional support, he faces daunting national issues, including the funding crisis in the NHS and Britain's inability to borrow like the United States. 14A Vision for Governance Reform in Canada. Guest: Conrad Black. Biographer Conrad Black and billionaire Stephen Jarislowsky have proposed recommendations to streamline Canadian governance by reducing duplicated bureaucracy. They argue that Canada's public service is top-heavy and that lowering corporate and personal taxes is essential for maintaining economic growth and competitiveness with the United States. 15CISA's Mission to Protect Critical Infrastructure. Guest: Francis Rose. Acting Director Nick Anderson explains CISA's role as a vital clearinghouse for cyber threat information across federal and private sectors. Since 85% of critical infrastructure is privately owned, CISA focuses on information exchange to prevent bad actors from moving laterally to disrupt water or power supplies. 16

CISA's Mission to Protect Critical Infrastructure. Guest: Francis Rose. Acting Director Nick Anderson explains CISA's role as a vital clearinghouse for cyber threat information across federal and private sectors. Since 85% of critical infrastructure is privately owned, CISA focuses on information exchange to prevent bad actors from moving laterally to disrupt water or power supplies. 16DC 1936

This episode unpacks the jaw-dropping surge in vulnerabilities unearthed by AI, revealing how Microsoft shattered its own patch records while adversaries and defenders race to outpace each other. The conversation gets real about whether AI is fixing our broken software or just making attacks easier for everyone. Rootkits found in more than 400 ArchLinux User Repository packages. The US government requests Anthropic to remove Mythos and Fable. CISA responds to AI-driven attacks with new patching requirements. NPM to switch to more secure install defaults. Will it help. Our listeners react to last week's PHP commentary. June shows that AI has arrived for vulnerability discover Show Notes - https://www.grc.com/sn/SN-1083-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: meter.com/securitynow canary.tools/twit - use code: TWIT joindeleteme.com/twit-biz zscaler.com/security adaptivesecurity.com