CyberWire Daily — March 12, 2026
Episode Title: Oops, those were the FBI files.
Host: Dave Bittner (N2K Networks)
Overview
This episode delivers a fast-paced round-up of the latest in cybersecurity news, highlighting global cyber tensions, high-profile breaches, the politicization of AI in state decisions, data protection regulations, and a deep-dive preview of the RSAC 2026 Innovation Sandbox with industry experts. The episode underscores the increasing complexity and speed of cyber threats, the challenges and opportunities driven by AI, and the crucial role of innovation in cybersecurity.
Key Discussion Points
1. Cyber Threats Escalating Amid Middle East Conflict
[01:06–03:15]
- Iranian Retaliation Warnings: Iran explicitly named major US tech companies (Google, Microsoft, Amazon, Nvidia, IBM, Oracle, Palantir) as potential cyber targets tied to their involvement in regional tensions and alleged military uses.
- Warning Scope: Civilians advised to avoid tech-linked infrastructure; signals expansion beyond traditional military targets to critical technology and financial sites.
2. Stryker Cyberattack and Attribution
[03:15–04:45]
- Incident Summary: Stryker, a major medical device manufacturer, confirmed a cyberattack disrupting their global Microsoft ecosystem. No ransomware found so far.
- Alleged Attackers: The "Handela" hacking group, linked to Iranian actors and wiper campaigns, claimed to have wiped 200,000 systems and stolen 50TB of data, citing geopolitical retaliation.
3. IRGC-linked Influence Operations
[04:46–06:15]
- Fake Personas on Social Media: Clemson researchers uncovered 62 fake accounts on X, Instagram, and BlueSky impersonating Scottish, Irish, and Latina personas to spread pro-Tehran messages and sow division in Western societies.
- Shift in Content: Accounts rapidly pivoted to spreading disinformation post US/Israeli airstrikes in Iran, leveraging AI-generated imagery.
4. European Digital Sovereignty
[06:16–07:48]
- Euro3C Initiative: EU announces a €75 million project to develop a federated telco edge cloud infrastructure, aiming to reduce dependence on non-EU tech, foster AI/cyber innovation, and advance digital sovereignty.
5. FBI Files on Epstein Compromised
[07:49–09:10]
- Breach Details: A foreign hacker accidentally accessed FBI child exploitation forensic lab servers housing Jeffrey Epstein case files (Feb 2023).
- Incident Aftermath: FBI contained the breach quickly, deemed it an isolated event; the hacker was a criminal, not a state actor, and reportedly only realized the server’s sensitivity after contact with agents.
“The hacker appeared to be a cyber criminal rather than a government actor and reportedly did not realize the server belonged to the FBI until agents confirmed their identity during a video call.”
— Dave Bittner [08:56]
6. AI Used to Cull Humanities Grants (DOGE Case)
[09:11–11:13]
- DOGE and NEH: Elon Musk’s Department of Government Efficiency (DOGE) used ChatGPT to identify and recommend canceling over 1,400 humanities grants by scanning for projects linked to DEI (diversity, equity, inclusion) using online summaries—not full proposals.
- Political Fallout: Cuts totaled $100 million; academic groups claimed discrimination, targeting of marginalized topics, and violation of constitutional protections.
7. Meta Claims Crackdown on Scam Ads
[11:15–12:17]
- Reported Action: Meta reported removal of 159 million scam ads and shutdown of 10.9 million accounts in 2025, largely through automated systems. Scrutiny remains over Meta’s ad revenue sources.
- Ongoing Risks: Organized Southeast Asian “pig-butchering” scams and persistent criticism of social platform vulnerabilities.
8. Massive Data Breach at Bell Ambulance
[12:18–13:19]
- Scope: Wisconsin’s largest ambulance provider breached by Medusa Group, compromising 237,000+ records (SSNs, driver’s licenses, medical data).
- Response: Ransom demand ($400,000) refused; data leaked on dark web; credit monitoring offered to victims.
9. CISA’s SolarWinds Emergency Directive
[13:20–14:15]
- Patch Deadline Accelerated: Immediate remediation required for SolarWinds Web Help Desk vulnerability exploited by attackers, exposing sensitive organizational data—third such directive in a month.
In-Depth Segment: RSAC 2026 Innovation Sandbox Preview
[15:25–24:39]
Background and Purpose
- Cecilia Marinier (RSAC Strategy, Innovation & Scholars):
- “RSAC Innovation Sandbox Contest is the leading contest that helps identify the future of where the industry is going.... The whole industry's eyes are on you.” [15:25/16:41]
- Crosspoint Capital awarded $5 million each to the top 10 finalists, allowing them to execute real innovations in market.
Judging and Industry Shifts
- Paul Kocher (Judge, Cryptography Expert):
- “I like seeing what technical approaches the companies are taking, how they're going about trying to stand out in a market that's just incredibly crowded.” [17:30]
- “This year... basically all [finalists] have AI as a big part of what they're doing... AI is no longer kind of a differentiator by itself. It's assumed that everybody's going to have AI as part of their fundamental strategy.” [18:26]
- “It's an impossible problem [judging]... security is one of the places where innovators have the greatest opportunities.... The quality of the competition is just spectacularly high.” [19:36]
Trends and Conference Experience
- AI Dominates, Crypto Fades: Nearly all arena entrants now leverage AI; cryptocurrency companies play a small role this year.
- Judge’s Criteria: Strong teams and technical differentiation matter; performance under pressure during pitches is crucial.
- Market Dynamics: The virtualization of offense/defense with AI is reshaping industry; the pace and uncertainty are higher than ever.
Memorable Quotes
“This is the first place to come and to take a look at those kind of companies that are cutting edge. That will be the names that you will know tomorrow.”
— Cecilia Marinier [15:53]
“It's my annual chance to really see both how the technology and the industry are shifting.”
— Paul Kocher [17:56]
“AI is no longer kind of a differentiator by itself. ... It’s really a question of how companies are using this technology, how they're adapting to it.”
— Paul Kocher [18:28]
Audience Experience
- Bigger and Bolder: 1,500-seat venue; high excitement and immersion. Attendees encouraged to arrive early.
- New Gamified Elements: Enhanced interactivity and “FOMO” for attendees.
“We're doing something different ... trying to gamify and to make something really interesting for people who are actually in the room.”
— Cecilia Marinier [21:32]
- Backstage Insight: Judges’ perceptions of companies can shift dramatically after live pitches; consensus required but difficult due to high caliber of entrants and fast-moving industry.
“My feeling of having kind of a sense of what the future looks like is cloudier than it's been in past years. So will I. I'm cautiously optimistic we can continue the trend of picking the strongest companies. We'll see what happens.”
— Paul Kocher [24:32]
Final Note: Digital Diets—AI Falls Short for Teens
[28:10–29:05]
- Study Findings: Turkish researchers tested five AI systems’ meal plans for teens, finding calorie deficits (700 short), unsound recommendations, and risks to growth and health.
- Expert Conclusion: “AI might help write an essay, but when it comes to feeding a teenager, a real dietitian still beats a chatbot with a calorie counter.”
- Takeaway: Technology is versatile, but some tasks—like adolescent nutrition—are best left to knowledgeable professionals.
Notable Quotes & Memorable Moments
-
On Innovation Sandbox:
“Once you get named one of these finalists, the whole industry's eyes are on you.”
— Cecilia Marinier [16:41] -
On AI’s Industry Impact:
“It's clear that the way things were being done a couple years ago is not the way that they're going to be done a year or two from now.”
— Paul Kocher [18:19]
Timestamps for Key Segments
| Topic | Timestamp | |------------------------------------------------------------------------------------|--------------| | Iran’s Cyber Warnings, US Tech Companies Named | 01:06–03:15 | | Stryker Ransomware/Handela Group Details | 03:15–04:45 | | IRGC Influence Campaign on Social Media | 04:46–06:15 | | Euro3C/EU Digital Sovereignty Initiative | 06:16–07:48 | | FBI’s Epstein Files Exposed; Containment Details | 07:49–09:10 | | DOGE, ChatGPT, and Grant Cancellations at NEH | 09:11–11:13 | | Meta’s Scam Ad Removals, Industry Criticism | 11:15–12:17 | | Bell Ambulance Data Breach—Medusa Ransom Group | 12:18–13:19 | | CISA SolarWinds Emergency Patch Directive | 13:20–14:15 | | RSAC 2026 Innovation Sandbox Background/Trends/Participant Experience | 15:25–24:39 | | Study: AI Chatbots Give Unsafe Meal Guidance for Teens | 28:10–29:05 |
Language & Tone
- Concise, authoritative, fast-moving. Host Dave Bittner uses an informative but approachable voice, and the RSAC interview segments add lively, engaging expert perspectives full of candor and industry insight.
- Balance of hard news, analysis, and practical advice—the podcast maintains a professional, forward-looking, and energetic atmosphere.
Conclusion
This episode demonstrates how international events, cutting-edge technology, regulatory action, and innovation intersect in cybersecurity today, while offering up-to-the-minute news and an exclusive window into major industry events like RSAC. From high-level state action and criminal missteps to frontline innovation and the pitfalls of AI, it’s a dense but rewarding listen for anyone seeking to keep up with the evolving security landscape.