Technical Resources

Video Tutorials

Watch all on-demand sessions from the AI Cyber Readiness Summit (available through September 25, 2026): https://www.infosecinstitute.com/events/ai-cybersecurity-summit/?utm_source=youtube&utm_medium=video&utm_campaign=aisummit AI is changing both sides of cybersecurity: the tools attackers use and the systems defenders need to secure. In this keynote from the AI Cyber Readiness Summit, Keatron Evans, Vice President, AI Enablement & Strategy at Cengage, explores what it takes to build an AI-ready cybersecurity team as attacks accelerate, AI adoption expands and new risks emerge. Keatron breaks down how AI-enabled attacks, deepfakes, shadow AI and governance gaps are reshaping cyber risk. He then outlines a practical path for security leaders to gain visibility into AI use, establish ownership and governance, develop the right team capabilities and turn AI readiness into action. Whether you're leading a cybersecurity program or building your own AI security capabilities, this session offers practical steps you can start taking now. In this session, you'll discover: 0:00 — What AI cyber readiness means 1:04 — Attack speed and shrinking response windows 3:00 — AI-enabled attacks and malware-free intrusions 4:39 — The rise of AI-run cyberattacks 6:55 — Why adversaries scaled faster 8:39 — Deepfakes and AI as a new attack surface 11:14 — GenAI data policy violations and shadow AI 15:12 — AI policy and accountability gaps 16:56 — Why cyber readiness starts with visibility 18:16 — Three moves: See it, own it and staff it 19:38 — Four AI readiness actions to start now 21:32 — AI skills cybersecurity practitioners need 23:25 — How AI can improve security operations 25:07 — A 90-day AI cyber readiness plan 27:09 — Building an AI-ready cyber program Explore the AI Cyber Readiness Summit and additional sessions from cybersecurity leaders and Infosec instructors: https://www.infosecinstitute.com/events/ai-cybersecurity-summit/?utm_source=youtube&utm_medium=video&utm_campaign=aisummit About Infosec Infosec Institute makes cyber workforce readiness a reality. Through role-based training that spans certification boot camps, skills development, security awareness and human risk management, we develop the capabilities your entire workforce needs to stay ahead of today's threats. The result: SOC analysts defending the perimeter, security engineers building secure systems and front-desk employees spotting advanced phishing attempts. 70% of the Fortune 500 have trusted Infosec for more than two decades. Learn more at infosecinstitute.com.
Is Your Cybersecurity Team Ready for AI? | Keatron Evans | AI Cyber Readiness Summit Keynote
Watch all on-demand sessions from the AI Cyber Readiness Summit (available through September 25, 2026): https://www.infosecinstitute.com/events/ai-cybersecurity-summit/?utm_source=youtube&utm_medium=video&utm_campaign=aisummit Get the free AI Cyber Readiness Pulse report: https://www.infosecinstitute.com/resources/research/ai-cyber-readiness-pulse/?utm_source=youtube&utm_medium=video&utm_campaign=aisummit Where do organizations really stand on AI readiness? Infosec surveyed cybersecurity leaders and practitioners about AI use, risk, governance and training — then brought the findings to James Stanger of CompTIA and Theo Nasser of Right-Hand Cybersecurity for their perspective during the AI Cyber Readiness Summit. The results reveal a growing challenge for security teams: 45.9% of respondents cited employee AI use as their biggest source of AI-related urgency, while AI phishing, deepfakes, shadow AI and data leakage ranked among their top concerns. Nearly 70% also reported that their organizations have not implemented required baseline AI training. Moderated by Infosec’s Sam D’Antonio, the discussion explores what these findings mean for organizations trying to adopt AI quickly without losing visibility, control or security. In this session, you’ll discover: 0:00 — What the AI readiness poll revealed 0:21 — Who participated in the research 0:42 — Why employee AI use is driving urgency 1:20 — The pressure to adopt AI across organizations 3:50 — Moving from AI experimentation to ROI 5:09 — Top AI risks: Phishing, deepfakes and shadow AI 5:54 — How AI is changing social engineering attacks 7:53 — Shadow AI, technical debt and data leaks 10:39 — Why AI policies and employee behavior matter 13:19 — The AI cybersecurity training gap 14:26 — Why formal AI training matters 16:09 — Practical controls for safer AI use 18:43 — How security teams can move at the speed of AI 19:29 — Practical next steps for organizations Explore the AI Cyber Readiness Summit and additional sessions from cybersecurity leaders and Infosec instructors: https://www.infosecinstitute.com/events/ai-cybersecurity-summit/?utm_source=youtube&utm_medium=video&utm_campaign=aisummit About Infosec Infosec Institute makes cyber workforce readiness a reality. Through role-based training that spans certification boot camps, skills development, security awareness and human risk management, we develop the capabilities your entire workforce needs to stay ahead of today's threats. The result: SOC analysts defending the perimeter, security engineers building secure systems and front-desk employees spotting advanced phishing attempts. 70% of the Fortune 500 have trusted Infosec for more than two decades. Learn more at infosecinstitute.com.
What Security Teams Say About AI Readiness | James Stanger & Theo Nasser
Infosec’s free AI Cyber Readiness Summit on August 26 will feature seven sessions covering AI adoption, governance, enterprise generative AI security, deep learning for anomaly detection and the changing role of cybersecurity teams. Learn more here: https://www.infosecinstitute.com/events/ai-cybersecurity-summit/ #AISecurity #Cybersecurity #ArtificialIntelligence About Infosec Infosec Institute makes cyber workforce readiness a reality. Through role-based training that spans certification boot camps, skills development, security awareness and human risk management, we develop the capabilities your entire workforce needs to stay ahead of today's threats. The result: SOC analysts defending the perimeter, security engineers building secure systems and front-desk employees spotting advanced phishing attempts. 70% of the Fortune 500 have trusted Infosec for more than two decades. Learn more at infosecinstitute.com.
What to Expect at the AI Cyber Readiness Summit
CyberNines CISO James Ahern advanced his career with Infosec Institute's CMMC Boot Camps. Are you ready to do the same? Seats are limited for our CMMC Certified Assessor Boot Camp starting on 8/10. Register today and become a CCA: https://www.infosecinstitute.com/courses/schedule/?Boot+camps=CMMC+Certified+Assessor+%28CCA%29+Boot+Camp&StartDate=Aug+2026/?utm_source=youtube&utm_medium=video&utm_campaign=cmmc Get your free CMMC ebook: https://www.infosecinstitute.com/form/cmmc-ebook/?utm_source=youtube&utm_medium=video&utm_campaign=cmmc Learn more about CMMC training: https://www.infosecinstitute.com/solutions/government/cmmc/?utm_source=youtube&utm_medium=video&utm_campaign=cmmc About Infosec Institute Infosec Institute makes cyber workforce readiness a reality. Through role-based training that spans certification boot camps, skills development, security awareness and human risk management, we develop the capabilities your entire workforce needs to stay ahead of today's threats. The result: SOC analysts defending the perimeter, security engineers building secure systems and front-desk employees spotting advanced phishing attempts. 70% of the Fortune 500 have trusted Infosec for more than two decades. Learn more at infosecinstitute.com.
CMMC Training While Working Full Time
How is AI changing security teams and cybersecurity workflows? Take Infosec’s new AI Cyber Readiness Pulse Poll, then join us for the free half-day virtual AI Cyber Readiness Summit on August 26. We’ll discuss the poll results with CompTIA’s James Stanger, Right-Hand Cybersecurity’s Theo Nasser, and Infosec Institute’s Sam D’Antonio. — Take the poll: https://infosec.involve.me/cyber-readiness-pulse-poll — Join the AI Cyber Readiness Summit: https://www.infosecinstitute.com/events/ai-cybersecurity-summit/?utm_source=youtube&utm_medium=video&utm_campaign=aisummit About Infosec Infosec Institute makes cyber workforce readiness a reality. Through role-based training that spans certification boot camps, skills development, security awareness and human risk management, we develop the capabilities your entire workforce needs to stay ahead of today's threats. The result: SOC analysts defending the perimeter, security engineers building secure systems and front-desk employees spotting advanced phishing attempts. 70% of the Fortune 500 have trusted Infosec for more than two decades. Learn more at infosecinstitute.com.
How Is AI Changing Security Teams?
How many companies may need CMMC Level 2 certification? This clip explains the difference between the broader Defense Industrial Base and organizations seeking certification under specific contract requirements. Get the free CMMC ebook: https://www.infosecinstitute.com/form/cmmc-ebook/?utm_source=youtube&utm_medium=video&utm_campaign=cmmc #CMMC #DefenseIndustrialBase #Cybersecurity
Who Needs CMMC Level 2?
Why is ISACA involved in CMMC? This clip explains how the CMMC ecosystem is scaling trained and certified professionals to support Level 2 assessments across the Defense Industrial Base. Get the free CMMC ebook: https://www.infosecinstitute.com/form/cmmc-ebook/?utm_source=youtube&utm_medium=video&utm_campaign=cmmc #CMMC #Cybersecurity #ISACA
Why ISACA Is Involved in CMMC
Get your free CMMC ebook: https://www.infosecinstitute.com/form/cmmc-ebook/?utm_source=youtube&utm_medium=video&utm_campaign=cmmc The Cybersecurity Maturity Model Certification (CMMC) program is evolving, and organizations across the Defense Industrial Base need qualified professionals to support implementation and assessments. In this webinar, recorded on May 19, 2026, Infosec sits down with Todd Gagnon, Director of the CMMC Assessor and Instructor Certification Organization (CAICO) at ISACA, to discuss what these changes mean for current and aspiring CMMC professionals. Learn how ISACA's role as the CAICO impacts the CMMC ecosystem, certification pathways and opportunities for those pursuing the CMMC Certified Professional (CCP) and CMMC Certified Assessor (CCA) credentials. Whether you're preparing for a CMMC certification, supporting compliance initiatives or looking to advance your cybersecurity career, this discussion provides valuable insights into the future of the CMMC program. In this session, you'll discover: 0:00 — Intro and CMMC resources 1:08 — What CMMC protects 2:59 — CMMC levels 1, 2 and 3 6:11 — Why CMMC matters 8:59 — CMMC timeline and phases 10:51 — Flow-down requirements 12:50 — ISACA’s CAICO role 14:24 — CMMC ecosystem players 17:30 — What C3PAOs do 19:28 — In-house vs. third-party CMMC support 22:16 — CMMC beyond defense contracts 23:28 — CCP certification overview 25:52 — CCA certification overview 28:09 — Lead CCA requirements 29:42 — CMMC instructor role 30:54 — CMMC training providers 31:42 — CCP and CCA exams 34:12 — Maintaining CMMC credentials 37:47 — Q&A: U.S. citizenship requirement 39:28 — Q&A: Best cert for beginners 40:40 — Q&A: CCP and CCA timeline 42:05 — Q&A: Becoming a Lead CCA 43:14 — Q&A: Sponsoring organization 44:11 — Q&A: Exam prep and study guides 45:21 — Q&A: CMMC career demand 46:21 — Closing and next steps Learn more about CMMC training and certification opportunities with Infosec. — Free CMMC ebook: https://www.infosecinstitute.com/form/cmmc-ebook/?utm_source=youtube&utm_medium=video&utm_campaign=cmmc — CMMC CCP training: https://www.infosecinstitute.com/courses/cmmc-certified-professional-boot-camp/?utm_source=youtube&utm_medium=video&utm_campaign=cmmc — CMMC CCA training: https://www.infosecinstitute.com/courses/cmmc-certified-assessor-boot-camp/?utm_source=youtube&utm_medium=video&utm_campaign=cmmc About Infosec Infosec Institute makes cyber workforce readiness a reality. Through role-based training that spans certification boot camps, skills development, security awareness and human risk management, we develop the capabilities your entire workforce needs to stay ahead of today's threats. The result: SOC analysts defending the perimeter, security engineers building secure systems and front-desk employees spotting advanced phishing attempts. 70% of the Fortune 500 have trusted Infosec for more than two decades. Learn more at infosecinstitute.com.
CMMC Is Changing: What ISACA's New CAICO Role Means for CCP & CCA Candidates
Can you spot the vishing attempt before the reveal? This social engineering test from Infosec HRM uses urgency, supplier payment changes and pressure to bypass approval. Watch the full webinar here: https://www.youtube.com/watch?v=UFVodmhkWvk ABOUT INFOSEC Infosec Institute makes cyber workforce readiness a reality. Through role-based training that spans certification boot camps, skills development, security awareness and human risk management, we develop the capabilities your entire workforce needs to stay ahead of today's threats. The result: SOC analysts defending the perimeter, security engineers building secure systems and front-desk employees spotting advanced phishing attempts. 70% of the Fortune 500 have trusted Infosec for more than two decades. Learn more at infosecinstitute.com.
Can You Spot the AI Vishing Attempt?
Subscribe
This video is a comprehensive overview of the latest version of Security Onion. We start with an introduction to the platform, its components, capabilities, and how it fits in to your security architecture. We continue with a demonstration of an alert-driven investigation that includes both network and endpoint log analysis, perform some detection engineering, and then wrap up with an ad hoc threat hunt. We hope you find it useful and informative! If you have words of encouragement to share with the Security Onion team, please post them in the comments below. If you have questions or problems, please start a new discussion on our community discussion forum at https://securityonion.com/discuss. Thanks!
Introduction to Security Onion 3
In this video, we discuss and demonstrate the Manager of Managers (MoM), a feature in Security Onion Pro that we introduced in version 2.4.150. The Manager of Managers allows for a single console to remotely connect to and interact with the data in one or more independent subgrids. Perfect for MSSPs, parent organizations managing subsidiary security teams, and more! If you'd like more information about Security Onion Pro, check out our website at https://securityonion.com/pro If you have questions or problems with your Security Onion deployment, please start a new discussion at https://securityonion.net/discuss If you have words of encouragement for the Security Onion team, please feel free to comment below.
Security Onion Pro: Manager of Managers
In this session, Matt Gracie introduces Security Onion 2.4.190. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Introduction
In this video, we discuss and demonstrate the Onion AI Assistant, a popular feature in Security Onion Pro that we introduced in version 2.4.190. The Onion AI Assistant can gather context, dig through logs, generate timelines, and otherwise act as a tremendous aid to your analysts during an investigation. If you'd like more information about Security Onion Pro, check out our website at https://securityonion.com/pro If you have questions or problems with your Security Onion deployment, please start a new discussion at https://securityonion.net/discuss If you have words of encouragement for the Security Onion team, please feel free to comment below.
Security Onion Pro: Onion AI Assistant
In this session, Matt Gracie downloads and checks the ISO in preparation for installing Security Onion 2.4.190. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Installation Part One
In this session, Matt Gracie completes the installation and setup of Security Onion 2.4.190. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Installation Part Two
In this session, Matt Gracie demonstrates how to update Security Onion to the latest version in either a traditional or airgap deployment. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Updating Security Onion
In this session, Matt Gracie introduces the Alerts and Cases tools in Security Onion, demonstrating how to pivot between datasets to investigate an alert and track the investigation in our case management tool. If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Alert Triage and Case Creation
In this session, Matt Gracie introduces the analyst tools built into Security Onion 2.4.190, including Alerts, Hunt, Dashboards, and more! If you have words of encouragement for the Security Onion team, please comment below. Don't forget to like and subscribe! If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. For more training, please see https://securityonion.com/training. For enterprise features, check out Security Onion Pro at https://securityonion.com/pro. For hardware appliances, please see https://securityonion.com/hardware.
Security Onion Essentials 2026 – Introduction to Analyst Tools
Subscribe
Please enjoy this encore of Word Notes. A passwordless authentication protocol based on the FIDO2 standard. CyberWire Glossary link: ⁠https://thecyberwire.com/glossary/passkey⁠ Audio reference link: Summers, J., 2023. Google Passkeys Have Arrived (here’s how to use them) [All Things Secured Channel]. YouTube. URL ⁠https://www.youtube.com/watch?v=oFO7JgUx-bU⁠.
passkey (noun)
Could an AI kill switch create more problems than it solves? A critical Rails flaw is under active attack. Malicious browser extensions steal cryptocurrency. Fire Ant targets trusted network infrastructure. Claude Code gets tricked into running attacker-controlled code. MyChart phishing scams spread malware. Two alleged sextortionists face U.S. charges. A former DIA insider walks into an FBI sting. Monday business briefing. Our guest is Tim Starks from CyberScoop discussing a controversial retail security bill. Getting local with Nigerian scammers. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing (https://thecyberwire.com/newsletters/daily-briefing) , and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn (https://www.linkedin.com/company/10454826/admin/feed/posts/) . CyberWire Guest Today we are joined by Tim Starks (https://www.linkedin.com/in/tstarks/) from CyberScoop (https://www.linkedin.com/company/cyberscoop/) as he is discussing a controversial retail security bill (https://cyberscoop.com/corca-retail-theft-bill-ice-surveillance/) . Selected Reading The AI Kill Switch Act is repeating the Clipper Chip’s mistakes (https://cyberscoop.com/ai-kill-switch-act-clipper-chip-mistakes-op-ed/) (CyberScoop) Critical Ruby on Rails Vulnerability in Attackers' Crosshairs (https://www.securityweek.com/critical-ruby-on-rails-vulnerability-in-attackers-crosshairs/) (SecurityWeek) Chrome Web Store extensions caught stealing crypto, browser data (https://www.bleepingcomputer.com/news/security/chrome-web-store-extensions-caught-stealing-crypto-browser-data/) (Bleeping Computer) China-linked Fire Ant Hides Inside Trusted Infrastructure (https://securityaffairs.com/198183/apt/china-linked-fire-ant-hides-inside-trusted-infrastructure.html) (SecurityAffairs) Researcher shows how Claude Code can be tricked simply by asking it to summarize a website (https://www.theregister.com/research/2026/08/28/researcher-shows-how-claude-code-can-be-tricked-simply-by-asking-it-to-summarize-a-website/5293372) (The Register) Fake MyChart emails can show alarming test results, trick patients into installing malware (https://www.wmar2news.com/matterformallory/fake-mychart-emails-can-show-alarming-test-results-trick-patients-into-installing-malware) (WMAR) Nigerians extradited to US for sextortion, deaths of two teens (https://www.bleepingcomputer.com/news/security/nigerians-charged-US-over-sextortion-deaths-of-us-teens/) (Bleeping Computer) US government snitch-finder pleads guilty to leaking state secrets to foreign spies (https://www.theregister.com/security/2026/08/28/us-government-snitch-finder-pleads-guilty-to-leaking-state-secrets-to-foreign-spies/5293248) (The Register) AI safety and security company Alice raises $140 million. (https://thecyberwire.com/newsletters/business-briefing/8/34) (N2K Pro Business Briefing) How Cyber Sleuths Tracked a Nigerian Scammer to His Doorstep (https://www.404media.co/how-cyber-sleuths-tracked-a-nigerian-scammer-to-his-doorstep/) (404 media) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NCFFCZJ) . Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com (http://sponsor.thecyberwire.com/) . The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Let’s kill the kill switch.
In this episode, Maria Varmazis (https://www.linkedin.com/in/varmazis) and Dave Bittner (https://www.linkedin.com/in/dave-bittner-27231a4) from N2K Cyberwire get back together to discuss the evolution of advanced persistent threats (APTs), threat actor landscape, attribution changes, and the future of cyber espionage over the past decade. Join Dave and Maria as they explore how geopolitical factors, organizational professionalism, and emerging technologies like AI are shaping cybersecurity threats. Together, they talk about: • The shift in attribution practices over the last 10 years. • The role of nation states and organized crime in cyber threats. • The impact of AI and emerging technologies on cyber warfare. • The challenges of naming and shaming threat groups. • The professionalization and organizational evolution of APT groups.
CyberWire Daily at 10: A decade of emerging threat actors and APTs. [Special Edition]
Despite the space sector's consistent growth and greater importance as a critical infrastructure sector, finding cybersecurity talent is still proving to be a challenge. Host Maria Varmazis and Nick Cohen (https://www.linkedin.com/in/nicholas-cohen-6940048b/) , Principal Engineer at the Aerospace Corporation (https://aerospace.org/) , sat down to discuss the current state of space's cybersecurity workforce. The two look at how the existing workforce is not large enough to effectively cover the industry and its infrastructure and how solutions like the Aerospace Village (https://www.aerospacevillage.org/) at DEF CON 34 have been aiming to address expertise shortcomings. Key sources: • The SPARTA Framework (https://sparta.aerospace.org/) • SpaceCOP (https://github.com/the-aerospace-corporation/spacecop-ce) • SpaceTrail (https://sparta.aerospace.org/spacetrail/) • StarPWN (https://www.aerospacevillage.org/general-9) • The Aerospace Village (https://www.aerospacevillage.org/event-details-registration/defcon-2026-08-06-19-00) • SPARTA 4.0 Debut (https://aerospace.org/kickstage/sparta-40-makes-its-debut-def-con) • Experience the convergence of space and cyber threats at DEF CON 34 (https://aerospace.org/kickstage/experience-convergence-space-and-cyber-threats-def-con-34) • SPARTA v4.0 — Breaking New Ground (https://medium.com/the-aerospace-corporation/sparta-v4-0-breaking-new-ground-b2d3b7ab832f) Like what you heard? Be sure to subscribe to our free Signals and Space Briefing⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, our Sunday newsletter covering the intersection of cybersecurity and space. Subscribe at: ⁠⁠⁠⁠https://thecyberwire.com/newsletters/signals-and-space⁠⁠⁠⁠ Is there a topic or person you’d like to hear on our show? You can send your questions and feedback to ⁠⁠⁠⁠space@n2k.com⁠⁠⁠⁠ (https://space@n2k.com) ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. You can also fill our our audience survey: ⁠⁠⁠⁠https://www.surveymonkey.com/r/NJYCN2P ⁠⁠⁠⁠ (https://www.surveymonkey.com/r/NJYCN2P%20) T-Minus: Space-Cyber Briefing is a production of N2K CyberWire. ⁠⁠⁠⁠N2K⁠⁠⁠⁠ (https://www.n2k.com/) is your nexus for discovery and connection for people, technology, and ideas shaping the future of secure innovation. Learn how at ⁠⁠⁠⁠n2k.com⁠⁠⁠⁠ (https://n2k.com) .
Closing the space-cyber workforce gap.
Today we are joined by Crystal Morin (https://www.linkedin.com/in/crystal-morin/) , Senior Cybersecurity Strategist, and Michael Clark (https://www.linkedin.com/in/michaelclarkinpa/) , Senior Director of Threat Research, at Sysdig (https://www.sysdig.com/) , sharing their work on "LLMjacking evolved: Attackers are using stolen AI compute to build offensive agentic tools." The Sysdig Threat Research Team observed an attacker abusing an exposed, unauthenticated Ollama server as the “brain” for an automated offensive security tool. The AI-powered framework can fingerprint services, identify vulnerabilities, craft exploits, extract credentials, and orchestrate attacks toward command execution, with researchers capturing the tool while it was still under active development. The activity highlights how LLMjacking is evolving from simply stealing AI compute for profit into using stolen model capacity to build increasingly autonomous offensive capabilities. The research and executive brief can be found here: • LLMjacking evolved: Attackers are using stolen AI compute to build offensive agentic tools (https://www.sysdig.com/blog/llmjacking-evolved-attackers-are-using-stolen-ai-compute-to-build-offensive-agentic-tools)
Who let the AI hack? [Research Saturday]
Today we are joined by Crystal Morin (https://www.linkedin.com/in/crystal-morin/) , Senior Cybersecurity Strategist, and Michael Clark (https://www.linkedin.com/in/michaelclarkinpa/) , Senior Director of Threat Research, at Sysdig (https://www.sysdig.com/) , sharing their work on "LLMjacking evolved: Attackers are using stolen AI compute to build offensive agentic tools." The Sysdig Threat Research Team observed an attacker abusing an exposed, unauthenticated Ollama server as the “brain” for an automated offensive security tool. The AI-powered framework can fingerprint services, identify vulnerabilities, craft exploits, extract credentials, and orchestrate attacks toward command execution, with researchers capturing the tool while it was still under active development. The activity highlights how LLMjacking is evolving from simply stealing AI compute for profit into using stolen model capacity to build increasingly autonomous offensive capabilities. The research and executive brief can be found here: • LLMjacking evolved: Attackers are using stolen AI compute to build offensive agentic tools (https://www.sysdig.com/blog/llmjacking-evolved-attackers-are-using-stolen-ai-compute-to-build-offensive-agentic-tools)
Who let the AI hack?
A judge rules the Trump administration illegally labeled Anthropic a national security risk. The White House moves to keep foreign technology out of U.S. power systems. OpenAI rallies a global cyber defense push as its own AI agents exploit a Linux vulnerability. Researchers uncover a new speculative-execution attack and hidden implants in Chinese-made routers. A fake voicemail campaign slips past email defenses. PaperCut faces an exploited zero-day. And ServiceNow patches three maximum-severity flaws in its AI Platform. Maria Varmazis and I look back at a decade of emerging threat actors and APTs. NSA sends out a covert save-the-date. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing (https://thecyberwire.com/newsletters/daily-briefing) , and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn (https://www.linkedin.com/company/10454826/admin/feed/posts/) . CyberWire Guest Today, as we continue celebrating the CyberWire Daily’s 10th anniversary (https://thecyberwire.com/podcasts/special-edition/101/notes) , Maria Varmazis (https://www.linkedin.com/in/varmazis/) and Dave Bittner look back at a decade of emerging threat actors and APTs. Enjoyed the conversation? Be sure to tune in Sunday for a special edition (https://thecyberwire.com/podcasts/special-edition) featuring the full discussion. Selected Reading Trump Administration’s Blacklisting of Anthropic Was Illegal, Judge Rules (https://www.nytimes.com/2026/08/27/technology/anthropic-government-blacklisting-ruling.html) (The New York Times) White House bans foreign-made equipment for power generation over cyber backdoor concerns (https://therecord.media/trump-cyber-electricity-parts) (The Record) Tech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge (https://www.securityweek.com/tech-cybersecurity-giants-unite-behind-openai-led-cyber-defense-pledge/) (SecurityWeek) A call for collective action on cyber defense (https://openai.com/collective-cyberdefense/) (OpenAI) New type of attack can slip past the defenses in your computer’s processor (https://news.mit.edu/2026/new-type-of-attack-can-slip-past-computer-processor-defenses-0827) (MIT News) Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign (https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/) (Infosecurity Magazine) OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems (https://www.securityweek.com/openai-agents-exploited-linux-kernel-flaw-on-companys-own-systems/) (SecurityWeek) Hundreds of AI agents went rogue in OpenAI’s Hugging Face hack (https://www.politico.com/news/2026/08/26/hundreds-of-ai-agents-went-rogue-in-openais-hugging-face-hack-01052139) (POLITICO)  PaperCut Releases Emergency Patch for Exploited Zero-Day (https://www.securityweek.com/papercut-releases-emergency-patch-for-exploited-zero-day/) (SecurityWeek) ServiceNow warns of three max severity security vulnerabilities (https://www.bleepingcomputer.com/news/security/servicenow-warns-of-three-max-severity-security-vulnerabilities/) (Bleeping Computer) Chinese Implants in the Supply Chain (http://vulncheck.com/blog/zbt-darklantern-speakingstone) (VulnCheck) Exclusive: NSA to host a hacker reunion in bid to rebuild secretive unit (https://therecord.media/nsa-to-host-hacker-reunion-in-bid-to-rebuild-secretive-unit) (The Record) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NCFFCZJ) . Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com (http://sponsor.thecyberwire.com/) . The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
The blacklist boomerang.
Meta settles. Australian police arrest two alleged TeamPCP members. The White House moves to shore up water utility cybersecurity. ATF reports a major cyber incident. The Navy tells sailors to lock down social media. The FBI warns of a prolific Chinese hacking operation. Bill Gates sounds the alarm on AI. A purported think tank tries to influence chatbot answers. And attackers focus less on individual vulnerabilities and more on the vendors behind them. Our guest is Tim Springston, Principal Product Manager at Semperis, on achieving hybrid identity resilience in the age of agentic AI. Meta pumps the brakes on going AI native.  Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing (https://thecyberwire.com/newsletters/daily-briefing) , and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn (https://www.linkedin.com/company/10454826/admin/feed/posts/) . CyberWire Guest On today’s industry voices segment, we are joined by Tim Springston (https://www.linkedin.com/in/tim-springston/) , Principal Product Manager at Semperis (https://www.semperis.com/) , discussing how to achieve hybrid identity resilience in the age of agentic AI. If you enjoyed this conversation, check out the full interview here (https://explore.thecyberwire.com/semperis) . Selected Reading Meta agrees to pay $18 billion to settle US lawsuits over children's social media addiction (https://www.reuters.com/world/us/meta-settles-with-us-states-over-social-media-harms-2026-08-26/) (Reuters) Two Alleged ‘TeamPCP’ Hackers Arrested in Australia (https://krebsonsecurity.com/2026/08/two-alleged-teampcp-hackers-arrested-in-australia/) (Krebs on Security) White House to unveil program to protect water systems against hackers (https://www.politico.com/news/2026/08/26/white-house-program-private-companies-water-hacks-01050315) (POLITICO) DOJ firearms agency says hackers breached system containing investigation targets (https://therecord.media/doj-atf-cyberattack-qilin-ransomware) (The Record) US Navy tells sailors and their families: scrub your social media, enemies are watching (https://www.bitdefender.com/en-us/blog/hotforsecurity/us-navy-sailors-families-scrub-social-media-enemies-watching) (Bitdefender) Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns (https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/) (Infosecurity Magazine) Bill Gates diagnoses problems with AI, but an expert questions his prescription (https://abcnews.com/Business/bill-gates-diagnoses-problems-ai-expert-questions-prescription/story?id=135966993&utm_source=flipboard&utm_medium=activitypub) (ABC News) Fake US thinktank set up and funded by Israel sought to game AI for propaganda (https://www.theguardian.com/world/2026/aug/26/fake-thinktank-israel-ai-propaganda) (The Guardian) SentinelOne and Tenable Find Cyber Attackers Routinely Target Edge-Device Vendor Ecosystems Rather Than Individual Vulnerabilities (https://www.sentinelone.com/press/sentinelone-and-tenable-find-cyber-attackers-routinely-target-edge-device-vendor-ecosystems-rather-than-individual-vulnerabilities/) (SentinelOne) AI agents meant to replace Meta workers made “large-scale, disruptive actions” (https://arstechnica.com/ai/2026/08/metas-scrapped-plans-to-go-ai-native-included-slashing-teams-by-60-percent/) (Ars Technica) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NCFFCZJ) . Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com (http://sponsor.thecyberwire.com/) . The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Meta gets a Meta-sized bill.
Is your organization truly AI native, or did you just bolt AI onto existing infrastructure? Your answer could be an indicator to how much risk you’re carrying without realizing it.   Zach Evans, Chief Technology Officer at Xsolis, has a simple test for telling the difference: strip out the AI and see if your process still works. If it does, you may be exposing your organization to security blind spots and workflows that quietly erode organizational knowledge and skills.   Zach joins Johnny Hand and Dustin Childs to unpack what it actually takes to build an AI-native organization, and why the stakes of getting agentic AI wrong can be unforgiving for every organization, not just those in healthcare. You’ll learn: • What makes an organization truly AI-native and why it matters • How to design security, redundancy, and access controls into AI workflows from the start • Why you should onboard AI agents like a new hire • How to assess MCP servers as third-party vendors • Why both technical redundancy and having people who can still perform critical work manually can’t be an afterthought Why stick around:  Zach turns lessons from real hospital downtime into a practical mandate for every security leader: plan for when the agent fails, not only for when it works. Episode resources: • Zach Evans on LinkedIn (https://www.linkedin.com/in/zachevans/) • Learn more about Xsolis (https://www.xsolis.com/) • From Predictive to Generative to Agentic AI: Understanding Healthcare’s Next Evolution (https://www.xsolis.com/blog/agentic-ai-healthcares-next-evolution/) • The Cybercriminal Underground: Mapping the Healthcare Data Economy (https://www.trendaisecurity.com/en-us/resources-insights/deep-research/the-cybercriminal-underground-mapping-the-healthcare-data-economy) • Hunt Them All: An AI-Powered Vulnerability Sweep of 19,000 MCP Servers (https://www.trendmicro.com/vinfo/us/security/news/vulnerabilities-and-exploits/hunt-them-all-an-ai-powered-vulnerability-sweep-of-19-000-mcp-servers) • Dustin Childs on LinkedIn (https://www.linkedin.com/in/dustincchilds/) • ⁠Johnny Hand on LinkedIn (https://www.linkedin.com/in/johnny-hand-mba-74781855/) • TrendAI on LinkedIn (https://www.linkedin.com/company/trendai-security/) About AI Security Brief AI Security Brief is where security and technology leaders come to get ahead. Join us for real conversations on the AI trends, threats, and decisions that can't wait. About TrendAI™ TrendAI™ empowers organizations to lead the future of AI with proactive security designed to inspire innovation and eliminate risk. TrendAI™ (https://www.trendaisecurity.com/en/?utm_source=aisb&utm_medium=referral&utm_campaign=ent_corporate_aw_gl_int_showlinks_2026) . AI Fearlessly.
What does hospital downtime teach us about building AI-native organizations?
Subscribe
Computer password inventor Fernando Corbato dies at 93, Serious Zoom security flaw could let websites hijack Mac cameras, Hackers' Operating System Kali Linux Released for Raspberry Pi 4, Over 1,300 Android Apps Caught Collecting Data Even If You Deny Permissions, and 25 Million Android Phones Infected With Malware That ‘Hides In WhatsApp’.
Cyber Security News Ending July 14 2019 – Android users be afraid, be very afraid. ransomware
Beware! Playing Untrusted Videos On VLC Player Could Hack Your Computer, U.S. Government Announces Critical Warning For Microsoft Windows Users, Florida city to pay $600K ransom to hacker who seized computer systems weeks ago, Confirmed: NASA Has Been Hacked and US 'launched cyber-attack on Iran weapons systems'.
Cyber Security News Ending June 23 2019 – Cyber War?
Microsoft says mandatory password changing is “ancient and obsolete”, Apple Just Patched a Modem Bug That's Been in Macs Since 1999, Unpatched Bug Let Attackers Bypass Windows Lock Screen On RDP Sessions, Google confirms that advanced backdoor came preinstalled on Android devices, and Quest Diagnostics data breach: Nearly 12 million patients had personal info exposed.
Cyber Security News ending June 8 2019
A laptop filled with six of the world’s most dangerous viruses is on sale for more than $1 million, Why you should never use phone charging stations at airports, Google Stored G Suite Users' Passwords in Plain-Text for 14 Years, Snapchat Employees Reportedly Spied on Private Snaps, and In Baltimore and Beyond, a Stolen N.S.A. Tool Wreaks Havoc.
Memorial Day Cyber Security News 2019
The Trade Secret: Firms That Promised High-Tech Ransomware Solutions Almost Always Just Pay the Hackers, Huawei has secret ‘backdoor’ into major European telecoms firm, spy agency reportedly says, Hackers breach Stack Overflow Q&A platform and compromise users' data, WhatsApp security breach may have targeted human rights groups, and What you need to know if you e-transfer money.
Cyber Security News Ending May 18 2019
How to stop Google from tracking web history, Baltimore City Hall Computer Network Infected With Ransomware Virus, Officials Say, Types of backup and five backup mistakes to avoid, Binance Security Breach Update, and Israel Neutralizes Cyber Attack by Blowing Up A Building With Hackers.
Cyber Security News Ending May 12 2019 Mothers Day Edition
Microsoft knows password-expiration policies are useless, Docker Hub Suffers a DataBreach, Asks Users to Reset Password, Over 23 million breached accounts used ‘123456’ as password, A 'Blockchain Bandit' Is Guessing Private Keys and Scoring Millions, and Fort Bragg Army cut power to thousands as cyber-attack test.
Cyber Security News ending April 27 2019
Experts: Breach at IT Outsourcing Giant Wipro, Don’t Acquire a Company Until You Evaluate Its Data Security, Microsoft reveals breachaffecting webmail users, Mueller Report Obama’s NSA Director Told U.S. CyberSecurity Team to “Stand Down” in Face of Russian Hackers, and CIA Offers Proof Huawei Has Been Funded By China's Military And Intelligence.
Cyber Security News ending April 21 2019
Mysterious safety-tampering malware infects a second critical infrastructure site, WikiLeaks Founder Julian Assange Arrested After Ecuador Withdraws Asylum, Samsung’s Galaxy S10 fingerprint sensor fooled by 3D printed fingerprint, Security Flaws in WPA3 Protocol Let Attackers Hack WiFi Password, and Secret Service agent inserted malware-infected USB drive into laptop.
Weekly Cyber Security News ending April 13 – From the Cyber Chronicle Cyber Security News Podcast
Subscribe