The bugs are piling up faster than the fixes.

About this episode

The episode discusses various cybersecurity issues including vulnerabilities, malware, and features an interview with Laure Lydon on digital health security.

A federal watchdog questions NIST over its vulnerability database backlog. Google patches an Android zero-day. Citizen Lab exposes a powerful location-tracking platform. Malware hides commands in Steam comments. Researchers spot AI-assisted malware development. Attackers compromise Red Hat’s npm namespace. DriveSurge spreads malware through ClickFix and fake updates. FreePBX patches a critical flaw. And Dashlane responds to a brute-force attack. Our guest is ⁠Laure Lydon⁠, Opening Chair for Infosecurity Europe and VP of Security and Infrastructure, Flo Health, sharing her expertise on digital health platforms. Meta’s AI support bot proves a bit too eager to help. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today, Maria Varmazis speaks with ⁠Laure Lydon⁠, Opening Chair for Infosecurity Europe and VP of Security and Infrastructure, Flo Health, sharing her expertise on privacy, security, and trust in digital health platforms, especially in sensitive areas like women's health…

People in this episode

Guest: Laure Lydon

Topics covered

• vulnerability management
• cybersecurity
• malware
• digital health
• AI in security
• privacy

Keywords

• NIST
• Android zero-day
• location-tracking
• malware development
• Red Hat
• ClickFix
• FreePBX
• brute-force attack
• digital health

Mentioned in this episode

Organizations: NIST, Google, Citizen Lab, Red Hat, FreePBX, Dashlane, Flo Health, Meta

More episodes of CyberWire Daily

• The court calls Google’s bluff. · June 11, 2026 · 31 min
• The patch pile reaches new heights. · June 10, 2026 · 32 min
• A checkmark for trust, a payload for theft. · June 9, 2026 · 27 min
• Meta’s recovery plan needed recovery. · June 8, 2026 · 29 min
• Spoofing ships, jamming drones: how GPS manipulation confuses and compromises. [T-Minus: Space-Cyber Briefing] · June 7, 2026 · 27 min
• You've been muted...permanently. [Research Saturday] · June 6, 2026 · 21 min