Researchers crack Apple’s M5 memory protections with a kernel exploit. An IBM Security executive emerges as a possible CISA pick. Researchers uncover four malicious npm packages.  AI-generated “slop” floods bug bounty programs. Major healthcare breaches hit the HHS tracker, 7-Eleven confirms a breach, and chained OpenClaw AI flaws could enable full host compromise. Santa Clara County sues Meta over alleged scam ads on Facebook and Instagram. Monday business breakdown. Our guest is Jason Madigan, Director of Commercial Cloud Security at Booz Allen, discussing the tension between resilience and data residency laws. A fond farewell for a security pioneer. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

On today’s Industry Voices segment we are joined by Jason Madigan, Director of Commercial Cloud Security at Booz Allen, discussing the tension between resilience and data residency laws. If you enjoyed this conversation, check out the full interview here.

Selected Reading

First public macOS kernel memory corruption exploit on Apple M5 (Calif)

IBM executive floated for CISA director as concerns persist for agency (SC Media)

Former CISA nominee Sean Plankey named US CEO of defense startup (CyberScoop)

New Actors Deploy Shai-Hulud Clones: TeamPCP Copycats Are Here (OX Security)

‘Never-ending’ AI slop strains corporate hacking reward schemes (Financial Times)

Millions Impacted Across Several US Healthcare Data Breaches (SecurityWeek)

7-Eleven Data Breach Confirmed After ShinyHunters Ransom Demand (SecurityWeek)

'Claw Chain' OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery (SecurityWeek)

Santa Clara County sues Meta over alleged scam ads (San José Spotlight)

Exaforce raises $125 million in Series B funding. (N2K Pro Business Briefing)

Peter G. Neumann, Who Warned of Computer Security Risks, Dies at 93 (The New York Times)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices