Latest / Daily Cyber Briefing / Daily Cyber & AI Briefing — 2026-06-26

Transcript

Daily Cyber & AI Briefing — 2026-06-26 · Daily Cyber Briefing

• 0:07
  SPEAKER_00: Grab your coffee or Red Bull or whatever your morning vice is, and this is your daily cyber and AI briefing, and I am your host, Michael Hoosh.
• 0:16
  SPEAKER_00: Today's landscape of cyber and AI risk is defined by relentless innovation on both sides of the security equation.
• 0:23
  SPEAKER_00: As organizations accelerate digital transformation, threat actors are evolving just as quickly, exploiting new vulnerabilities and targeting the most critical business assets.
• 0:34
  SPEAKER_00: In this briefing, we'll break down the latest developments shaping enterprise risk, from major breaches and zero-day exploits to shifts in AI governance and the security workforce.
• 0:46
  SPEAKER_00: Let's start with one of the most impactful incidence-making headlines, the Shiny Hunters Breach of Oracle PeopleSoft.
• 0:53
  SPEAKER_00: Shiny Hunters, a group well known for targeting enterprise software, has successfully compromised Oracle PeopleSoft systems at over a hundred organizations.
• 1:03
  SPEAKER_00: This is not just another breach, it's a stark reminder of how deeply interconnected our digital supply chains are, and how vulnerable even the most established platforms can be.
• 1:15
  SPEAKER_00: Attackers in this case leverage a combination of known vulnerabilities and zero-day exploits, gaining access to sensitive enterprise data across sectors.
• 1:24
  SPEAKER_00: The scale of this breach highlights the persistent risk posed by third-party and supply chain software.
• 1:30
  SPEAKER_00: For risk leaders, the implications are clear.
• 1:33
  SPEAKER_00: It's no longer enough to secure your own environment.
• 1:36
  SPEAKER_00: You have to rigorously manage third-party risk, continuously monitor your critical business applications, and ensure that your vendors are upholding the same security standards you expect internally.
• 1:47
  SPEAKER_00: This incident also brings into focus the challenge of visibility.
• 1:51
  SPEAKER_00: Many organizations rely on PeopleSoft for core business functions, HR, finance, supply chain management.
• 1:58
  SPEAKER_00: When a breach like this occurs, it's not just about data loss.
• 2:03
  SPEAKER_00: It's about the potential for operational disruption, regulatory exposure, and long-term reputational damage.
• 2:10
  SPEAKER_00: The lesson here is that continuous monitoring and robust third-party risk management aren't optional.
• 2:16
  SPEAKER_00: They're foundational to enterprise resilience.
• 2:19
  SPEAKER_00: Moving from supply chain risk to infrastructure, let's talk about the ongoing exploitation of vulnerabilities in Cisco Unified Communications Manager.
• 2:29
  SPEAKER_00: The Cybersecurity and Infrastructure Security Agency, or CISA, has issued multiple alerts about active attacks targeting flaws in Cisco's Unified Communications Manager and Session Management Edition.
• 2:41
  SPEAKER_00: These vulnerabilities are now part of CISA's known exploited vulnerabilities catalog, a clear signal that exploitation is happening in the wild, not just in theoretical lab scenarios.
• 2:54
  SPEAKER_00: What's particularly concerning about these Cisco vulnerabilities is their potential to enable remote code execution and lateral movement within enterprise networks.
• 3:06
  SPEAKER_00: In practical terms, that means an attacker could gain a foothold in your communications infrastructure and then pivot to other critical systems.
• 3:15
  SPEAKER_00: For organizations running Cisco Unified CM, the guidance is straightforward.
• 3:20
  SPEAKER_00: Prioritize patching immediately, review your deployment configurations, and monitor for indicators of compromise.
• 3:28
  SPEAKER_00: The window between vulnerability disclosure and exploitation is shrinking, and attackers are moving faster than ever.
• 3:35
  SPEAKER_00: We're also seeing the first confirmed exploitation of a vulnerability in PTC Windchill, a widely used product lifecycle management platform.
• 3:45
  SPEAKER_00: This is significant, especially for organizations in engineering and manufacturing, where windchill is often central to managing sensitive design and production data.
• 3:54
  SPEAKER_00: Security researchers have observed attackers leveraging this flaw to gain unauthorized access to proprietary information, potentially putting intellectual property and competitive advantage at risk.
• 4:07
  SPEAKER_00: If your organization uses windchill, now is the time to act.
• 4:11
  SPEAKER_00: Patch the vulnerability as soon as possible and review your access controls to ensure that only authorized users have access to sensitive data.
• 4:20
  SPEAKER_00: This is another example of how attackers are expanding their focus beyond traditional IT targets to include operational technology and engineering platforms.
• 4:30
  SPEAKER_00: The threat landscape is also being reshaped by a surge in advanced malware.
• 4:35
  SPEAKER_00: Three strains in particular, Quina Extractor, Sharkloader, and Miasma, are making waves for their sophisticated evasion techniques.
• 4:43
  SPEAKER_00: These tools are designed to slip past traditional defenses using methods like sandbox detection, user account control bypass, and novel dropper mechanisms to avoid detection and deliver their payloads.
• 4:57
  SPEAKER_00: Quina Extractor, for example, uses encrypted channels such as Telegram to exfiltrate data, making it harder for defenders to spot malicious activity.
• 5:07
  SPEAKER_00: Shark Loader is being deployed in targeted attacks against government agencies and software development firms, enabling stealthy delivery of secondary payloads.
• 5:18
  SPEAKER_00: Miasma, meanwhile, is part of a broader trend of malware leveraging supply chain weaknesses to reach their targets.
• 5:25
  SPEAKER_00: For security teams, the takeaway is clear.
• 5:28
  SPEAKER_00: Endpoint detection and response solutions must go beyond signature-based detection.
• 5:34
  SPEAKER_00: Behavioral analytics, anomaly detection, and continuous monitoring are essential to catch these advanced threats before they can do real damage.
• 5:43
  SPEAKER_00: It's also critical to review your software supply chain controls.
• 5:47
  SPEAKER_00: Attackers are increasingly targeting the links between organizations, partners, vendors, and service providers, knowing that a single weak point can open the door to a much larger breach.
• 5:58
  SPEAKER_00: The market is responding to these challenges with significant investment in fraud prevention and cloud security.
• 6:05
  SPEAKER_00: ENCODE's recent acquisition of Identic for$100 million is a case in point.
• 6:10
  SPEAKER_00: This move underscores the growing importance of identity verification and privacy preserving solutions, especially as more business moves to the cloud and digital transactions become the norm.
• 6:22
  SPEAKER_00: Identix technology focuses on enabling organizations to verify identities without sharing sensitive personal data, a key capability for reducing fraud risk while maintaining privacy.
• 6:34
  SPEAKER_00: For financial services, e-commerce, and any sector dealing with high value transactions, these kinds of solutions are becoming indispensable.
• 6:44
  SPEAKER_00: The acquisition is expected to accelerate innovation in this space, giving organizations new tools to combat fraud and identity theft.
• 6:53
  SPEAKER_00: Cloud risk is another area seeing increased attention and investment.
• 6:57
  SPEAKER_00: Arian, a security startup, has raised$29 million to develop solutions that identify and mitigate cloud risk before deployment.
• 7:06
  SPEAKER_00: This reflects a broader industry shift toward proactive cloud security, moving away from reactive incident response and toward automated risk assessment and policy enforcement.
• 7:18
  SPEAKER_00: As organizations accelerate their adoption of cloud infrastructure, the complexity of managing risk grows.
• 7:25
  SPEAKER_00: Misconfigurations, excessive permissions, and unvetted third-party integrations can all introduce vulnerabilities.
• 7:33
  SPEAKER_00: Arian's approach is to catch these issues before workloads go live, reducing the attack surface and helping organizations maintain compliance with regulatory requirements.
• 7:44
  SPEAKER_00: The need for proactive cloud risk management is only going to increase as more organizations embrace multi-cloud and hybrid environments.
• 7:54
  SPEAKER_00: Automated tools that can assess risk and enforce policy at scale are quickly becoming a must-have for any organization serious about security.
• 8:04
  SPEAKER_00: Let's circle back to the malware landscape for a moment.
• 8:08
  SPEAKER_00: The Sharkloader dropper in particular is being used in targeted attacks against governments and software development firms.
• 8:15
  SPEAKER_00: This tool enables attackers to deliver secondary payloads in a stealthy manner, often as part of a broader supply chain attack.
• 8:24
  SPEAKER_00: The use of droppers like Sharkloader highlights the importance of monitoring for anomalous activity, not just at the endpoint, but across the entire software development and deployment pipeline.
• 8:35
  SPEAKER_00: Security teams should be reviewing their supply chain controls, validating the integrity of software updates, and monitoring for unexpected changes in system behavior.
• 8:46
  SPEAKER_00: The goal is to catch malicious activity early, before attackers can escalate privileges or move laterally within the network.
• 8:55
  SPEAKER_00: CESA's decision to add Cisco Unified Communications Manager vulnerabilities to its known exploited vulnerabilities catalog is another indicator of the urgency surrounding these flaws.
• 9:06
  SPEAKER_00: Organizations are urged to prioritize remediation and to monitor for indicators of compromise.
• 9:12
  SPEAKER_00: Exploitation is ongoing, and the longer these vulnerabilities remain unpatched, the greater the risk of a successful attack.
• 9:20
  SPEAKER_00: Shifting gears to AI governance, we're seeing new challenges emerge as organizations deploy agentic AI workspaces, particularly in the Asia Pacific region.
• 9:32
  SPEAKER_00: Agentic AI refers to systems that can act autonomously, making decisions and taking actions on behalf of users or organizations.
• 9:40
  SPEAKER_00: While these capabilities can drive efficiency and innovation, they also introduce new risks around security, privacy, and regulatory compliance.
• 9:49
  SPEAKER_00: Ensuring the secure deployment and operation of AI agents requires robust access controls, continuous monitoring, and alignment with evolving regulatory requirements.
• 10:00
  SPEAKER_00: For risk leaders, this means evaluating and updating AI governance frameworks to address the unique risks posed by autonomous systems.
• 10:10
  SPEAKER_00: It's not just about preventing unauthorized access, it's about ensuring that AI agents act in accordance with organizational policy and ethical standards.
• 10:21
  SPEAKER_00: The financial sector in particular is feeling the pressure to enhance AI governance.
• 10:27
  SPEAKER_00: As AI-driven decision making becomes more common in banking and financial services, the need for transparent and auditable controls is paramount.
• 10:37
  SPEAKER_00: Industry voices are calling for stronger frameworks to maintain trust, both with regulators and with customers.
• 10:43
  SPEAKER_00: Without proper governance, AI systems can introduce risks of bias, fraud, and regulatory noncompliance.
• 10:51
  SPEAKER_00: Transparent decision-making processes, regular audits, and clear accountability are essential to safeguarding trust.
• 10:59
  SPEAKER_00: For organizations in regulated sectors, investing in robust AI governance isn't just a best practice.
• 11:05
  SPEAKER_00: It's a business imperative.
• 11:07
  SPEAKER_00: Leadership changes at major firms are reflecting the increasing complexity and strategic importance of the CISO role.
• 11:14
  SPEAKER_00: Uber has appointed Philip Martin as its new chief information security officer, while SoCure has named Mark Carter to the same position.
• 11:23
  SPEAKER_00: These appointments underscore the evolving demands placed on security leaders as organizations navigate heightened cyber and AI risks.
• 11:31
  SPEAKER_00: Today's CISOs are expected to be more than just technical experts.
• 11:35
  SPEAKER_00: They're strategic partners, responsible for aligning security with business objectives, managing risk across complex digital ecosystems, and responding to incidents that can have far-reaching consequences.
• 11:49
  SPEAKER_00: As the threat landscape evolves, so too must the leadership and governance structures that support effective risk management.
• 11:55
  SPEAKER_00: Workforce development is another critical piece of the puzzle.
• 11:59
  SPEAKER_00: CompTIA's new career pathway initiative highlights the growing demand for practical, employable cybersecurity skills.
• 12:08
  SPEAKER_00: For risk executives, this reinforces the importance of ongoing training and professional development.
• 12:14
  SPEAKER_00: The threat landscape is constantly changing, and organizations need teams that can adapt, learn, and respond to new challenges.
• 12:23
  SPEAKER_00: Building a pipeline of skilled cybersecurity professionals is essential for sustaining effective risk management.
• 12:30
  SPEAKER_00: This means investing in training, mentoring, and career development programs that equip employees with the skills they need to tackle today's and tomorrow's threats.
• 12:40
  SPEAKER_00: Let's take a step back and look at some of the strategic implications emerging from these developments.
• 12:47
  SPEAKER_00: First, supply chain and third-party software vulnerabilities remain a top risk vector.
• 12:53
  SPEAKER_00: The Shiny Hunter's Breach is just the latest example of how attackers are exploiting weaknesses in interconnected systems.
• 13:00
  SPEAKER_00: Enhanced due diligence, continuous monitoring, and strong contractual security requirements for vendors are essential.
• 13:08
  SPEAKER_00: Second, the rapid evolution of malware and exploitation techniques demands investment in advanced detection and response capabilities.
• 13:18
  SPEAKER_00: Traditional security tools are no longer sufficient.
• 13:22
  SPEAKER_00: Organizations need solutions that can identify and respond to novel threats in real time, leveraging behavioral analytics and automation to stay ahead of attackers.
• 13:32
  SPEAKER_00: Third, AI governance frameworks must keep pace with the deployment of agentic AI and automation, especially in regulated sectors like banking and healthcare.
• 13:44
  SPEAKER_00: This means developing policies and controls that address not just technical risks, but also ethical and regulatory considerations.
• 13:52
  SPEAKER_00: Finally, leadership and workforce development are critical to sustaining effective risk management in a complex dynamic threat environment.
• 14:01
  SPEAKER_00: Organizations need leaders who can think strategically about risk, and teams that are equipped with the skills and knowledge to execute on that vision.
• 14:10
  SPEAKER_00: So, what matters most today?
• 14:12
  SPEAKER_00: First and foremost, dream immediate patching of Cisco Unified Communications Manager and PTC Wind Chill vulnerabilities is essential to prevent exploitation.
• 14:23
  SPEAKER_00: These are active threats and the window for remediation is closing fast.
• 14:28
  SPEAKER_00: Second, supply chain security and third-party risk management should be at the top of every organization's agenda.
• 14:36
  SPEAKER_00: Recent large-scale breaches have shown just how quickly vulnerabilities can cascade across interconnected systems.
• 14:44
  SPEAKER_00: Third, proactive investment in AI governance and cloud risk mitigation will be key to maintaining trust and compliance as organizations accelerate digital transformation.
• 14:55
  SPEAKER_00: The risks are real, but so are the opportunities for those who take a proactive strategic approach.
• 15:02
  SPEAKER_00: As we move forward, the convergence of advanced malware, supply chain attacks, and AI-driven risks will continue to challenge even the most mature organizations.
• 15:13
  SPEAKER_00: So staying ahead requires a layered defense strategy, combining technology, process, and talent to build resilience against an ever-evolving threat landscape.
• 15:23
  SPEAKER_00: That's the briefing for today.
• 15:25
  SPEAKER_00: Stay vigilant, keep learning, and make sure your defenses are as dynamic as the threats you face.
• 15:31
  SPEAKER_00: That's a wrap, peeps.
• 15:32
  SPEAKER_00: Stay secure, stay sharp, and don't forget to hug your CISO.