OpenAI holds back its newest model over safety concerns. Kiteworks lifts its precautionary shutdown. Apple patches an exploited zero-day. Japanese rail operators disclose cyberattacks. An Anthropic authentication flaw opens the door to account takeover. Thousands of Supabase databases leak data. NeedyMantis targets telecoms and governments. A Vietnamese national faces charges in a multimillion-dollar crypto laundering scheme. James Winebrenner, CEO of Elisity, is sharing barriers to compliance and challenges for manufacturers as the EU Cyber Resilience Act is implemented. If you’re hoping for credit, be careful what you share.

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

James Winebrenner, CEO of Elisity, is sharing barriers to compliance and challenges for manufacturers as the EU Cyber Resilience Act (EU CRA) is implemented.

Selected Reading

OpenAI Says It Will Not Release Newest Astra A.I. Model Over Safety Concerns (The New York Times)

Florida asks for order to halt ChatGPT development (Axios)

Kiteworks Urges Customers to Restart Systems After Shutdown Notice (Infosecurity Magazine)

Apple patches CoreGraphics zero-day flaw exploited in attacks (Bleeping Computer)

Japanese Railway Operators Hit with Weekend Cyber Attacks (Infosecurity Magazine)

Cycode Uncovers Account Takeover in Anthropic's MCP Python SDK (Cycode)

Everything Everywhere: Systemic Data Exposure in Supabase Apps (UpGuard)

Daemon Tools Hackers' NeedyMantis Malware Dissected by Microsoft (SecurityWeek)

Vietnamese man charged in $16 million 'pig butchering' crypto scam (Bleeping Computer)

Did Anthropic’s A.I. Really Make a Scientific Discovery on Its Own? (The New York Times)

Share your feedback.

What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.

Want to hear your company in the show?

N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices