Microsoft sounds the alarm on a critical Exchange zero-day, OpenAI and Mistral AI deal with fallout from a widening supply-chain attack campaign, and researchers uncover a thriving underground market for unlocking stolen iPhones. A stealthy macOS infostealer spreads through ClickFix scams, healthcare braces for major HIPAA security changes, and hackers cash in big at Pwn2Own Berlin after burning through two dozen zero-days. Maria Varmazis joins us with the latest from the T-Minus space cyber podcast. Researchers roll their eyes at ransomware reassurances.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, ⁠Daily Briefing⁠, and you’ll never miss a beat. And be sure to follow CyberWire Daily on ⁠LinkedIn⁠.

CyberWire Guest

Today we are joined by Maria Varmazis, host of T-Minus: Space-Cyber Briefing, talking about the evolution of the show. Join us on Sunday, May 17th for the first episode of T-Minus and tune in each Sunday for new episodes. 

Selected Reading

⁠Microsoft Reports Severe Zero-Day Flaw in On-Prem Exchange Servers⁠ (Infosecurity Magazine)

⁠OpenAI Hit by TanStack Supply Chain Attack⁠ (SecurityWeek)

⁠Mustang Panda Linked to New Modular FDMTP Backdoor⁠ (BankInfo Security)

⁠TeamPCP hackers advertise Mistral AI code repos for sale⁠ (Bleeping Computer)

⁠What's Next for the Proposed HIPAA Security Rule Overhaul?⁠ (GovInfo Security)

⁠American Lending Center Data Breach Affects 123,000 Individuals⁠ (SecurityWeek)

⁠Why AMOS matters: The macOS malware stealing data at scale⁠ (SOPHOS)

⁠Inside the Underground Market That Unlocks Stolen iPhones⁠ (Infoblox)

⁠Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026⁠ (Bleeping Computer)

⁠Nobody believes the 'criminals and scumbags' who hacked Canvas really deleted stolen student data⁠ (The Register)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our ⁠brief listener survey⁠. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at ⁠sponsor.thecyberwire.com⁠.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices