The early bird gets the exploit.

Amazon spots PHP exploits before disclosure. GitLab patches a critical flaw. Meta faces a $25 billion penalty. Autonomous AI agents power new cyberattacks. Hackers breach a Japanese cloud provider. CyberCartel unleashes AI against Latin American banks. Tor exit nodes are hijacked. OpenAI coding agents disable security monitoring. Interpol dismantles thousands of cybercrime networks across Africa. Our guest is Danny Manimbo, ISO and AI Practice Leader at Schellman, explaining why companies waiting for AI regulatory clarity may already be behind. Spotify hits the skip button on AI slop. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today we are joined by Danny Manimbo, ISO & AI Practice Leader at Schellman, discussing why companies waiting for AI regulatory clarity are already behind. If you enjoyed this conversation, check out the full interview on Caveat.

Selected Reading

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot (AWS Security Blog)

GitLab warns of new max severity code execution vulnerability (Bleeping Computer)

Meta ordered to pay $25 billion penalty in New Mexico Cambridge Analytica case (CNBC)

CrowdStrike Uncovers New Agentic AI Campaigns (CrowdStrike)

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected (Bleeping Computer)

CARLIY0S: CyberCartel's AI Attacks on Latin American Banks (Straiker)