Loading summary
Lauren Zabrick
You're listening to the Cyberwire Network powered by N2K.
CompTIA/ N2K Announcer
Are you ready for AI in cybersecurity? Demand for these skills is growing exponentially for cybersecurity professionals. It's why CompTIA, the largest vendor neutral certification authority, is developing SEC AI Plus. It's their first ever AI certification focused on artificial intelligence and cybersecurity and is designed to help mid career cybersecurity professionals demonstrate their competencies with AI tools. And that's why N2K's SEC AI practice exam is coming out this year to help you prepare for the certification release in 2026. To find out more about this new credential and how N2K can help you prepare today, check out our blog@certify.cybervista.net blog and thanks.
Sponsor/Advertisement Voice
At Thales they know cybersecurity.
Dave Bittner
Can be tough and you can't protect everything.
Co-host/Reporter
But with Thales, you can secure what matters most.
Sponsor/Advertisement Voice
With Thales industry leading platforms, you can.
Co-host/Reporter
Protect critical applications, data and identities anywhere and at scale with the highest roi.
Sponsor/Advertisement Voice
That's why the most trusted brands and.
Dave Bittner
Largest banks, retailers and healthcare companies in.
Sponsor/Advertisement Voice
The world rely on Thales to protect what matters most applications, data and identity.
Co-host/Reporter
That's Thales T H A L E.
Sponsor/Advertisement Voice
S learn more@thalesgroup.com Cyber.
Dave Bittner
CISA layoffs threaten US cyber coordination with states, businesses and foreign partners Google issues its second emergency Chrome update in a week and puts privacy sandbox out of its misery. OpenAI's new browser proves vulnerable to indirect prompt injection. SpaceX disables Starlink devices used by scanner.
Sponsor/Advertisement Voice
Compounds Reddit sues alleged data scrapers Blue.
Dave Bittner
Cross Blue Shield of Montana suffers a data breach A new Android infostealer abuses.
Co-host/Reporter
Termux to exfiltrate data.
Dave Bittner
Iran's muddy water deploys a wide ranging Middle east espionage campaign.
Sponsor/Advertisement Voice
We're joined by Lauren Zabrick and Camille.
Dave Bittner
Stewart Gloucester discussing the next evolution of Share the Mic in Cyber and when customer service fails, try human resour.
Co-host/Reporter
Foreign.
Dave Bittner
October 23, 2025 I'm Dave Bittner and this is your Cyberwire Intel Briefing. Thanks for joining us here today.
Co-host/Reporter
It's great to have you with us.
Dave Bittner
The East Wing of the White House.
Co-host/Reporter
Isn'T the only thing the Trump administration is taking a wrecking ball to. The President has effectively shuttered the Cybersecurity and Infrastructure Security Agency's Stakeholder Engagement Division, a key unit responsible for coordinating cybersecurity improvements with state, local, private and international partners. Sweeping layoffs in mid October cut nearly all 95 staff, leaving only the sector management unit intact.
Dave Bittner
The move eliminates three vital offices council.
Co-host/Reporter
Management, strategic relations and international affairs, disrupting CISA's partnerships with critical infrastructure operators, academic institutions and foreign governments. Experts warn the cuts will erode trust, reduce situational awareness and weaken collaboration mechanisms essential for defending sectors such as healthcare, energy and telecommunications. Former White House cybersecurity advisor Michael Daniels said the downsizing risks leaving CISA blind to certain threats and trends. Industry and government officials describe the cuts as dangerous, potentially isolating the US from global cyber allies and depriving defenders of shared intelligence and expertise. CISA said the restructuring was meant to realign the agency's mission.
Dave Bittner
Google has issued its second emergency Chrome update in a week, patching a high.
Co-host/Reporter
Severity flaw in the browser's V8 JavaScript engine. The vulnerability was discovered by Google's AI driven research project Big Sleep. Details remain undisclosed until most users update. The fix appears in the latest version across Windows, Mac, Linux and Android. Users can trigger the update manually via Chrome's About Google Chrome settings page to ensure immediate protection elsewhere.
Dave Bittner
Google has officially ended its long delayed.
Co-host/Reporter
Privacy sandbox project, abandoning plans to replace third party cookies with privacy focused ad technologies. The company will retire 10 remaining sandbox APIs, citing complexity, poor adoption and regulatory pressure. Google will instead maintain cookies alongside limited privacy tools like chips and FedCM. The move restores short term ad stability, but highlights the industry's continued lack of viable Privacy. Safe Alternatives OpenAI's new Atlas browser has been found vulnerable to indirect prompt injection, a technique where malicious instructions hidden in web content trick AI agents into unintended actions.
Dave Bittner
Brave Software's report this week confirmed the.
Co-host/Reporter
Flaw as a systemic problem across AI powered browsers like Perplexity's, Comet and Felu. While Atlas resisted some tests, researchers still demonstrated successful injections using Google Docs, prompting Atlas to output manipulated text.
Dave Bittner
OpenAI acknowledged the risk, calling prompt injection.
Co-host/Reporter
An unsolved security problem despite red teaming, safety guardrails and detection systems.
Dave Bittner
Experts warn that the threat undermines data confidentiality and integrity.
Co-host/Reporter
With no perfect fix yet, experts urge stronger downstream security and human oversight. OpenAI maintains Atlas remains experimental and is refining protections for safer AI browsing.
Dave Bittner
SpaceX has disabled more than 2,000 Starlink.
Co-host/Reporter
Satellite devices used by scam compounds in Myanmar after mounting pressure from politicians and anti trafficking advocates.
Dave Bittner
Lauren Dreyer, SpaceX's vice president of business.
Co-host/Reporter
Operations, said the company proactively shut down over 2,500 kits near suspected scam centers and is cooperating with global law enforcement. The move follows reports that Starlink had enabled Internet access for cybercrime operations near the Thai border despite previous government crackdowns. Thai and US officials, including Senator Maggie Hassan, had urged Elon Musk to prevent Starlink's use in human trafficking and large scale fraud. Myanmar authorities recently seized dozens of Starlink devices in a raid that detained over 2,000 people at a major scam complex. While some operations have been disrupted, reports suggest new compounds continue to emerge despite ongoing enforcement.
Dave Bittner
Reddit has filed a lawsuit against four.
Co-host/Reporter
SERP API, oxylabs, AWM Proxy and Perplexity, accusing them of illegally scraping Reddit content via Google search results and selling it to AI developers like OpenAI and Meta. Reddit seeks a permanent injunction, damages and a ban on using scraped data. The company argues that AI firms are fueling a data laundering economy by exploiting its user generated content without compensation, while SERP API and Perplexity deny wrongdoing. Reddit says it's spent millions building anti scraping defenses and even trapped Perplexity with a hidden test post to prove its case. The lawsuit underscores rising tensions between data owners and AI companies as content rich platforms move to license data rather than give it away. Reddit already has paid deals with Google and OpenAI.
Dave Bittner
Blue Cross Blue Shield of Montana is under investigation after a data breach exposed.
Co-host/Reporter
Personal and medical information for up to 462,000 residents.
Dave Bittner
The breach, spanning November 2024 through March.
Co-host/Reporter
Of this year, may have compromised names, addresses and billing data. State Auditor James Brown called the incident deeply disturbing and launched an immediate probe criticizing the insurer for failing to notify customers or provide credit. Monitoring officials urge Montanans to monitor benefit statements and report suspicious activity.
Dave Bittner
SANS researcher Xavier Mertens has uncovered an.
Co-host/Reporter
Infostealer that uses Termux on Android to run Python, harvest contacts, messages, location, app data and banking related files and exfiltrate them via Telegram.
Dave Bittner
The sample scored a 0 out of.
Co-host/Reporter
64 on VirusTotal and includes Vietnamese comments, the researcher reports. The malware calls Termux utilities and scans mapped storage paths for Facebook, WhatsApp media and banking file names. It installs a persistent backdoor script that periodically logs location data and sends information using a Telegram bot token. The finding shows Android can be a vector for infostealers traditionally focused on Windows, elevating risks to confidentiality and integrity of user data.
Dave Bittner
Iranian state sponsored hacking group Muddy Water.
Co-host/Reporter
Also known as Static, Kitten, Mercury and.
Dave Bittner
Seed Worm, has targeted over 100 government entities across the Middle east and North.
Co-host/Reporter
Africa using version 4 of its Phoenix backdoor, according to a new report from Group IB. The campaign began Aug. 19 with phishing emails sent from a compromised Account accessed via NordVPN. Attached Word documents contained malicious macros that deployed the fake update loader, which decrypted and installed Phoenix version 4.
Dave Bittner
The new version features enhanced persistence through.
Co-host/Reporter
Comm objects and supports commands for file upload, download, and shell execution. Researchers also found an infostealer targeting Chrome, Edge, Opera, and Brave browsers for credentials. Muddy Water additionally leveraged the PDQ and Action One RMM tools for remote control. Most victims were embassies, consulates and foreign ministries, signaling continued Iranian cyber espionage operations.
Dave Bittner
Coming up after the break, Lauren Zabrick and Camille Stewart Gloucester have the latest on Share the Mic in Cyber and when customer service fails, try Human Resources. Stay with us.
Sponsor/Advertisement Voice
What's your 2am Security worry? Is it do I have the right controls in place? Maybe Are my vendors secure? Or the one that really keeps you up at night? How do I get out from under these old tools and manual processes? That's where Vanta comes in. Vanta automates the manual work so you can stop sweating over spreadsheets, chasing audit evidence, and filling out endless questionnaires. Their trust management platform continuously monitors your systems, centralizes your data, and simplifies your security at scale. And it fits right into your workflows, using AI to streamline evidence collection, flag risks, and keep your program audit ready all the time. With Vanta, you get everything you need to move faster, scale confidently, and finally get back to sleep. Get started@vanta.com cyber that's V A N-T A.com cyber and now a word from our sponsor. The Johns Hopkins University Information Security Institute.
Dave Bittner
Is seeking qualified applicants for its innovative.
Co-host/Reporter
Master of Science in Security Informatics degree.
Sponsor/Advertisement Voice
Program, study alongside world class interdisciplinary experts and gain unparalleled educational research and professional experience in information security and assurance. Interested U.S. citizens should consider the Department of Defense's Cyber Service Academy program, which covers tuition, textbooks and a laptop, as.
Co-host/Reporter
Well as providing a $34,000 additional annual stipend.
Dave Bittner
Apply for the fall 2026 semester and.
Sponsor/Advertisement Voice
For this scholarship by February 28th.
Co-host/Reporter
Learn more at CS JHU.
Sponsor/Advertisement Voice
Edu MSSI.
Dave Bittner
Lauren Zabrack and Camille Stewart.
Co-host/Reporter
Gloucester are co founders of the Share the Mic in Cyber initiative. I recently caught up with them for.
Dave Bittner
The latest on the next evolution of that initiative. Well, Camille, Lauren, it's so great to have both of you back. We go back quite a ways with Share the Mic in Cyber. Before we dig into some of the exciting changes that you're going to share.
Co-host/Reporter
With our audience today, can we look.
Dave Bittner
Back at some of the history of this initiative. Camille, let me start with you.
Camille Stewart Gloucester
Yes. First of all, thanks for having us share. The mic in Cyber started in 2020. It was launched to respond to an urgent need from the cyber community to be a collaborator, an ally, an open ecosystem that welcomed all members of the cyber community in response to, you know, the tragedies, the murders that were happening in the black community. And it started with a social media campaign where allies were giving their platforms to black practitioners and an exchange of dialogue and insights on how different communities were experiencing. The cyber ecosystem became very clear and really honed this robust community that we have continued to cultivate and grow and. And one of the things that was most exciting to Lauren and I is that everyone that came to it brought something we had. We started a scholarship fund because Rachel Toback from WISP said, oh, well, I want to help figure out how folks get the training and the resources they need. There was a cyberbase, which was a database of diverse talent that got created out of R Street because Tatiana Bolton was there. We had a number of senior leaders across cyber give their time and talent, whether it was to lead a session or to engage in one of the campaigns. And our goal is always to be responsive to the needs of the moment. And so it evolved to a fellowship that we partnered with New America on. And that fellowship really focused on research, both in the technical spaces and in the policy space, with some professional development for mid career talent. And we spent the last three years focused on those candidates who came through the fellowship, as well as continuing to hone the original community.
Dave Bittner
Lauren, you've been involved with this really.
Co-host/Reporter
From the get go.
Dave Bittner
What motivated you to share your time.
Co-host/Reporter
With this program.
Lauren Zabrick
At that moment in 2020? I remember when I was serving as the executive director of the Cyber Project at the Belfer center, it really struck me that I now had a platform, and to me, that also came with a lot of responsibility. And so when I saw what was going on, but then when I also saw this example of Share the mic now that I think both Camille and I had seen on Instagram and at that point, Twitter, where prominent women in media, entertainment and politics were sharing their platforms with black women in those industries that weren't getting the recognition that they deserved. And so I saw that and I thought, oh my gosh, this could really work, I think, in the cybersecurity community. And at the same time, Camille was having the same thoughts. And, you know, I love our story because I saw her post on Twitter and then I slid into her DMs and I was like, hey, girl, what if we did this? And literally in the next two weeks, this. This amazing campaign was born. And then also, I'd be remiss if I didn't mention Caitlin Ringrose, who also reached out and wanted to build something too. So what? The beautiful thing about this is that it was so grassroots, and as Camille said, so many people came together to build this. And we had five campaigns, five social media campaigns, and at the height, I remember, we had over 100 million impressions on Twitter.
Camille Stewart Gloucester
Right?
Lauren Zabrick
We had Congresswoman Lauren Underwood speak. We had former CISA director Jen Easterly share her platform. Former NSA Cyber Director Rob Joyce share his platform. Dave, you shared your platform. We just got so many people in the community to come together and uplift the voices of these black cyber professionals that hadn't gotten this recognition. And then, of course, what came out of that were things like new jobs and new opportunities, and I think most of our importantly, new connections.
Dave Bittner
Well, five years is a long time, and yet it seems like just yesterday that you all were spinning this up, but you have some exciting new information to share with our audience. What's the latest?
Lauren Zabrick
So, essentially, we are closing the chapter on the fellowship at New America. And first, let me just say how proud of the work that we've done there. We worked together with Peter Singer at New America. He kind of came in super early and helped us with this idea and to hone it. And then we brought in our project manager, Bridget Chan, who really took this idea and brought it to life. And so over three years, we worked with and supported 21 different fellows in their research. And it really sparked, I think, and Camille thinks as well, these meaningful conferences, conversations that ultimately proved our founding thesis, which is that diverse voices strengthen cybersecurity and national security and some of those topics that came out. So we actually just released a paper yesterday that really focused on the rise of youth, cybercrime and why that is. And then some interventions that go. That don't necessarily veer into, say, traditional law enforcement. So what are some other interventions that people can take, but other things that we've published? You know, look at the human impacts of augmented and virtual reality devices, brain computer interfaces, artificial intelligence, kind of nutrition labels, legal frameworks for civilian cyber corps, and then even the gendered impacts of cyber. So what happens to the people who do the most care in society when those services are actually disrupted? Camille, I'd love for you to jump into and provide some thoughts on the impact that the fellowship made and how we saw it.
Camille Stewart Gloucester
Yeah, I mean, the incredible policy and operational frameworks, the in depth research, but you kind of captured that. But I want to make sure to mention the professional development we saw. Most of our fellows had very little exposure to public speaking or to media. Some have been on your show, they've been on other podcasts, they've gotten opportunities to speak at conferences and to share their research in new venues and spaces. We've seen them get new jobs and their work join larger initiatives. And so we're really proud of what we were able to build and demonstrate. The innovation that comes from elevating, including different lived experiences and perspectives. Right. Those new takes, those cutting edge takes on some of the challenges our industry has been facing are going to have long term impact. And so we're grateful for that time. We came into it knowing that we had fundraised for three years and so that time is ending now, which is crazy to think that we spent three years pouring into people. But now we're going to think about, we thought about what would need to happen to meet this moment. And based on what we've observed and the shifts in the industry and the shift in the industries that cyber practitioners serve, we really want to focus on cyber threat intelligence. We want to refine and hone the skill set of understanding how intel informs policy, how intel informs operations, and really help practitioners transition into that space if they want to, or in the space that they're in, leverage that to be a stronger practitioner. There has long been somewhat of a disconnect there. And so we partnered with the Cyber Threat alliance with Michael Daniel and supported by CAS Strategies to launch the Share the Mic in Cyber Catalyst Fellowship for Cyber Intelligence. So we're really excited about that and more information to come on how to apply, but we want to put it out there because this is kind of returning to our grassroots roots and we are pulling this together with community members. They will host the professional development sessions, they will host some of the other content that goes into investing in the fellows, while CTA and the member companies will collaborate with these fellows to produce analytic products and host webinars and things like that.
Lauren Zabrick
Yeah, and I'll say from my perspective too, that I'm particularly excited about this. Obviously I've been very excited about the other iterations too, as someone who's into cyber policy and things like that. But going back to my roots as a former intelligence analyst, as someone who is literally on the front lines developing, developing actionable insights and information to drive operations, this is actually really cool. So I'm super excited about it. And we hope that the rest of the community is really excited about it and you know, might offer their support. Whether it's financial support, we would love. If any companies or individuals are interested in supporting this initiative, but also if you have skills that you want to share with the community, such as analytic tradecraft in writing and things like that, so that we can really just pour this development into the fellows in order to help them with, say, job transitions or growing in their current careers. Because that's the whole point of this, is to help people and especially in this particular environment.
Dave Bittner
Well, I think it's fair to say.
Co-host/Reporter
That the need is as great as ever. As you mentioned, Camille, this particular moment brings its own particular challenges and I.
Dave Bittner
Wish you both the best and glad to be a continued part of it.
Lauren Zabrick
Thank you so much, Dave.
Dave Bittner
That's Lauren Zabrick and Camille Stewart Gloucester from Share the Mic in Cyber. We'll have a link to their organization in the show.
Co-host/Reporter
Notes.
WhatsApp Advertiser
When did making plans get this complicated? It's time to streamline with WhatsApp, the secure messaging app that brings the whole group together. Use polls to settle dinner plans, send event invites and pin messages so no one forgets mom 60th and never miss a meme or milestone. All protected with end to end encryption. It's time for whatever WhatsApp message privately with everyone.
Indeed Advertiser
Learn more@WhatsApp.com this episode is brought to you by Indeed. When your computer breaks, you don't wait for it to magically start working again. You fix the problem. So why wait to hire the people your company desperately needs? Use Indeed's sponsored jobs to hire top talent fast. And even better, you only pay for results. There's no need to wait. Speed up your hiring with a $75 sponsored job credit@ Indeed.com podcast. Terms and conditions apply.
Dave Bittner
And finally, in a move equal parts mission impossible and petty genius, a TikTok user named Kernel Dump shared how he discovered a company's data breach, and when no one at customer service would listen, he applied for a job there.
Co-host/Reporter
After breezing through multiple interviews, he finally sat down with the chief information security.
Dave Bittner
Officer, who cheerily asked what drew him to the company. His answer?
Co-host/Reporter
The dark web alert showing his data from their site for sale.
Dave Bittner
He wasn't there for the paycheck.
Co-host/Reporter
He was there to deliver the breach notice in person. Then he declined the job.
Dave Bittner
Cybersecurity might be an arms race, but.
Co-host/Reporter
Sometimes it takes one determined applicant to remind a company that defense in depth should include answering your emails.
Sponsor/Advertisement Voice
And that's the cyberwire for links to.
Dave Bittner
All of today's stories. Check out our daily briefing@thecyberwire.com we'd love to know what you think of this podcast.
Co-host/Reporter
Your feedback ensures we deliver the insights.
Dave Bittner
That keep you a step ahead in the rapidly changing world of cybersecurity.
Co-host/Reporter
If you like our show, please share a rating and review in your favorite podcast app.
Dave Bittner
Please also fill out the survey in.
Co-host/Reporter
The show notes or send an email.
Dave Bittner
To cyberwire2k.com N2K's senior producer is Alice Carruth. Our Cyberwire producer is Liz Stokes. We're mixed by Trey Hester with original.
Co-host/Reporter
Music by Elliot Peltzman.
Dave Bittner
Our executive producer is Jennifer Ibin. Peter Kilpe is our publisher and I'm Dave Bittner. Thanks for listening.
Co-host/Reporter
We'll see you back here tomorrow.
Liberty Mutual Advertiser
And Doug, here we have the Limu Emu in its natural habitat, helping people customize their car insurance and save hundreds with Liberty Mutual. Fascinating. It's accompanied by his natural ally, Doug.
Indeed Advertiser
Limu is that guy with the binoculars watching us.
Liberty Mutual Advertiser
Cut the camera, they see us. Only pay for what you need@libertymutual.com Liberty Liberty Liberty Liberty Savings Fairy underwritten by.
Sponsor/Advertisement Voice
Liberty Mutual Insurance Co. Affiliates excludes Massachusetts Cyber Innovation Day is the premier event for cyber startups, researchers and top VC FIR firms building trust into tomorrow's digital world. Kick off the day with unfiltered insights and panels on securing tomorrow's technology. In the afternoon, the 8th annual DataTribe Challenge takes center stage as elite startups pitch for exposure, acceleration and funding. The Innovation Expo runs all day, connecting founders, investors and researchers around breakthroughs in cybersecurity. It all happens November 4th in Washington, D.C. discover the startups building the future of cyber. Learn more at cid datatribe.
Lauren Zabrick
Com.
Date: October 23, 2025
Host: Dave Bittner, N2K Networks
Featured guests: Lauren Zabrick & Camille Stewart Gloucester (Share the Mic in Cyber)
This episode delivers a comprehensive rundown of the day’s most pressing cybersecurity news, featuring stories on U.S. federal cyber layoffs, emergency browser vulnerabilities, privacy and AI threats, as well as a deep dive interview with the co-founders of “Share the Mic in Cyber.” The conversation spotlights the evolution of this initiative toward new fellowships focused on cyber threat intelligence, ending with a memorable, real-world lesson in cybersecurity “customer service.”
[03:23–04:53]
[04:53–06:19]
[06:19–06:56]
[07:13–08:19]
[08:19–09:23]
[09:23–10:01]
[10:01–10:57]
[10:57–12:16]
With Lauren Zabrick & Camille Stewart Gloucester
[14:51–26:01]
[27:25–28:10]
A TikTok user “Kernel Dump” detected a company’s data breach. After repeated ignored warnings, he applied for a job, made it to the CISO interview, and delivered the breach notification in person—then declined the job.
“He wasn’t there for the paycheck. He was there to deliver the breach notice in person. Then he declined the job.” — Dave Bittner [27:59]
“Sometimes it takes one determined applicant to remind a company that defense in depth should include answering your emails.” — Co-host [28:10]
| Time | Segment/Topic | |-----------|-------------------------------------------------| | 03:23 | CISA Stakeholder Engagement layoffs | | 04:53 | Chrome emergency update & Privacy Sandbox | | 06:19 | Atlas browser & prompt injection | | 07:13 | Starlink disables scam operation devices | | 08:19 | Reddit sues data scrapers | | 09:23 | Blue Cross Blue Shield breach | | 10:01 | Android Termux infostealer | | 10:57 | Iranian Muddy Water espionage campaign | | 14:51 | Share the Mic in Cyber interview starts | | 20:00 | Closing New America fellowship, new directions | | 23:19 | New “Catalyst Fellowship” for Cyber Intelligence | | 27:25 | TikTok user delivers breach notice “in person” |
The episode retains an urgent, clear, and conversational tone, blending practical news delivery with engaging storytelling—especially noticeable in the “Share the Mic in Cyber” interview, which is lively, collaborative, and community-driven.
Listeners unfamiliar with this episode will come away with a solid grasp of major U.S. and global cyber developments, the transformation of a leading cyber diversity initiative, and the importance of persistence—and creativity—in cybersecurity advocacy.