CISA warns that pro-Russia hacktivist groups are targeting US critical infrastructure. Google patches three new Chrome zero-day vulnerabilities. North Korean actors exploit React2Shell to deploy a new backdoor.  Researchers claim Docker Hub secret leakage is now a systemic problem. Attackers exploit an unpatched zero-day in Gogs, the self-hosted Git service. IBM patches more than 100 vulnerabilities across its product line. Storm-0249 abuses endpoint detection and response tools. The DOJ indicts a former Accenture employee for allegedly misleading federal customers about cloud security. Our guest is Kavitha Mariappan, Chief Transformation Officer at Rubrik, talking about understanding & building resilience against identity-driven threats. A malware tutor gets schooled by the law.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, <a href="https://thecyberwire.com/newsletters/daily-briefing">Daily Briefing</a>, and you’ll never miss a beat. And be sure to follow CyberWire Daily on <a href="https://www.linkedin.com/company/10454826/admin/feed/posts/">LinkedIn</a>.
CyberWire Guest
On today’s Industry Voices segment, we are joined by <a href="https://www.linkedin.com/in/kmariappan/">Kavitha Mariappan</a>, Chief Transformation Officer at Knowledge Partner <a href="https://www.rubrik.com/">Rubrik</a>, talking about understanding and building resilience against identity-driven threats. Tune into Kavitha’s full conversation <a href="https://explore.thecyberwire.com/rubrik">here</a>. 
<ul>
 <li>
<a href="https://www.rubrik.com/company/newsroom/press-releases/25/new-rubrik-research-finds-identity-resilience-is-imperative-as-ai-wave-floods-the-workplace-with-ai-agents">New Rubrik Research Finds Identity Resilience is Imperative as AI Wave Floods the Workplace with AI Agents</a> (Press release)
</li>
 <li>
<a href="https://zerolabs.rubrik.com/reports/the-identity-crisis">The Identity Crisis: Understanding and Building Resilience Against Identity-Driven Threats</a> (Report) 
</li>
 <li>
<a href="https://www.thecyberwire.com/podcasts/data-security-decoded/39/notes">Agentic AI and Identity Sprawl</a> (Data Security Decoded podcast episode) Host Caleb Tolin and guest ⁠Joe Hladik⁠, Head of Rubrik Zero Labs, to unpack the findings from their the report Kavitha addresses. 
</li>
</ul>
Resources: Rubrik’s <a href="https://www.thecyberwire.com/podcasts/data-security-decoded">Data Security Decoded</a> podcast airs semi-monthly on the N2K CyberWire network with host Caleb Tolin. You can catch new episodes twice a month on Tuesdays on your favorite podcast app. 
Selected Reading
<a href="https://www.darkreading.com/threat-intelligence/hactivists-target-critical-infrastructure">CISA: Pro-Russia Hacktivists Target US Critical Infrastructure</a>
<a href="https://cyberscoop.com/ai-cybersecurity-guidance-critical-infrastructure-op-ed/">New cybersecurity guidance paves the way for AI in critical infrastructure | CyberScoop</a>
<a href="https://www.infosecurity-magazine.com/news/google-chrome-security-update/">Google Releases Critical Chrome Security Update to Address Zero-Days - Infosecurity Magazine</a>
<a href="https://www.scworld.com/news/north-korea-linked-etherrat-backdoor-used-in-react2shell-attacks">North Korea-linked ‘EtherRAT’ backdoor used in React2Shell attacks | SC Media</a>
<a href="https://flare.io/learn/resources/docker-hub-secrets-exposed/">Thousands of Exposed Secrets Found on Docker Hub - Flare</a>
<a href="https://www.bleepingcomputer.com/news/security/unpatched-gogs-zero-day-rce-flaw-actively-exploited-in-attacks/">Hackers exploit unpatched Gogs zero-day to breach 700 servers</a>
<a href="https://www.securityweek.com/ibm-patches-over-100-vulnerabilities/">IBM Patches Over 100 Vulnerabilities - SecurityWeek</a>
<a href="https://www.bleepingcomputer.com/news/security/ransomware-iab-abuses-edr-for-stealthy-malware-execution/">Ransomware IAB abuses EDR for stealthy malware execution</a>
<a href="https://www.nextgov.com/cybersecurity/2025/12/us-charges-former-accenture-employee-misleading-feds-cloud-platforms-security/410085/">US charges former Accenture employee with misleading feds on cloud platform’s security - Nextgov/FCW</a>
<a href="https://www.channelnewsasia.com/singapore/malaysian-malware-android-phones-129-victims-singapore-32-million-5569846">Man gets jail for filming malware tutorials for syndicate; 129 Singapore victims lost S$3.2m - CNA</a>
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our <a href="https://www.surveymonkey.com/r/NCFFCZJ">brief listener survey</a>. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at <a href="http://sponsor.thecyberwire.com/">sponsor.thecyberwire.com</a>.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit <a href="https://megaphone.fm/adchoices">megaphone.fm/adchoices</a>

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

Weak passwords meet strong motives

CyberWire Daily

AI Chapters

AI Insights

Reviews