Episodes

  • The clock’s ticking and the bots are clicking.

    The clock’s ticking and the bots are clicking.
    Jul 24 2025
    This week, Ben's story is on the looming expiration of the Cybersecurity Information Sharing Act (CISA 2015), a widely supported but currently stalled law that enables cyber threat data sharing between the private sector and government, now at risk of lapsing by September 30 due to congressional inaction and conflicting priorities. Dave’s got the story of how a Georgia court's AI-fueled legal blunder has sparked growing concern that overworked judges nationwide could increasingly miss fake citations generated by AI, prompting urgent calls for better tech training, oversight, and ethical guidance to safeguard the integrity of the U.S. justice system. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney. Complete our annual ⁠⁠audience survey⁠⁠ before August 31. Links to today's stories: Time’s running out on a key cyber info-sharing law It’s “frighteningly likely” many US courts will overlook AI errors, expert says ⁠Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our ⁠⁠⁠⁠⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠⁠⁠⁠⁠, a weekly newsletter available exclusively to ⁠⁠⁠⁠⁠⁠⁠⁠N2K Pro⁠⁠⁠⁠⁠⁠⁠⁠ members on ⁠⁠⁠⁠⁠⁠⁠⁠N2K CyberWire's⁠⁠⁠⁠⁠⁠⁠⁠ website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week's ⁠⁠⁠Caveat Briefing⁠⁠⁠ covers a major cyber espionage campaign exploiting a zero-day flaw in Microsoft’s SharePoint server software, compromising about 100 organizations—mostly in the U.S. and Germany—including government entities. Researchers warn that thousands more servers could be at risk, and while Microsoft has issued patches, experts stress that full remediation requires more than just updating software, as a China-linked threat actor may be behind the ongoing intrusions. ⁠Curious about the details? Head over to the ⁠⁠⁠⁠⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠⁠⁠⁠⁠ for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to ⁠⁠⁠⁠⁠⁠⁠⁠caveat@thecyberwire.com⁠⁠⁠⁠⁠⁠⁠⁠. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices
    Show More Show Less
    41 mins
  • Cybersecurity in the states.

    Cybersecurity in the states.
    Jul 17 2025
    This week, we are joined by Gary Barlet, former Federal CIO and Air Force Cyber Operations Officer and current Public Sector CTO at Illumio, to discuss how this approach to cybersecurity leaves some states much more at risk than others. Ben has the story of a Virginia case relating to reverse key word searches. Dave's got a highly unusual move by the DOJ against Maryland’s district courts. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney. Complete our annual ⁠audience survey⁠ before August 31. Links to today's stories: ⁠EFF Tells Virginia Court That Constitutional Privacy Protections Forbid Cops from Finding out Everyone Who Searched for a Keyword DOJ launches unusual lawsuit against entire federal district court in Maryland ⁠Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our ⁠⁠⁠⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠⁠⁠⁠, a weekly newsletter available exclusively to ⁠⁠⁠⁠⁠⁠⁠N2K Pro⁠⁠⁠⁠⁠⁠⁠ members on ⁠⁠⁠⁠⁠⁠⁠N2K CyberWire's⁠⁠⁠⁠⁠⁠⁠ website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week's ⁠⁠Caveat Briefing⁠⁠ covers BNPL apps and the privacy issues they found associated with them. Curious about the details? Head over to the ⁠⁠⁠⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠⁠⁠⁠ for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to ⁠⁠⁠⁠⁠⁠⁠caveat@thecyberwire.com⁠⁠⁠⁠⁠⁠⁠. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices
    Show More Show Less
    46 mins
  • Who’s the boss of AI?

    Who’s the boss of AI?
    Jul 10 2025
    This week on Caveat, Dave and Ben welcome back N2K’s own ⁠⁠Ethan Cook⁠⁠ for our latest policy deep dive segment. As our lead analyst, Ethan shares his knowledge of law, privacy, and surveillance on the latest policy developments shaping the cybersecurity and legal landscape. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney. Complete our annual ⁠audience survey⁠ before August 31. Policy Deep Dive In this Caveat Policy Deep Dive, our conversation and analysis revolve around preemption. Recently, Congress attempted to use preemption as a justification to pass a moratorium that would have overridden all current state AI legislation and prevented any new state AI bills from being passed. While the measure failed, this action is representative of a growing debate over how the government should regulate AI. Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our ⁠⁠⁠Caveat Briefing⁠⁠⁠, a weekly newsletter available exclusively to ⁠⁠⁠N2K Pro⁠⁠⁠ members on ⁠⁠⁠N2K CyberWire's⁠⁠⁠ website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s ⁠⁠⁠Caveat Briefing⁠⁠⁠ covers how the U.S. SEC has issued new guidance on crypto-based exchange-traded products, signaling the start of a broader regulatory framework that could accelerate the approval of dozens of crypto ETFs, including those tied to Solana, XRP, and even meme coins. While full rule changes are still in development, the guidance marks a shift in the agency’s stance under Republican leadership and could significantly streamline the listing process for new crypto products. Curious about the details? Head over to the ⁠⁠⁠Caveat Briefing⁠⁠⁠ for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to ⁠⁠⁠caveat@thecyberwire.com⁠⁠⁠. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices
    Show More Show Less
    50 mins
  • A nation divided can’t stand secure.

    A nation divided can’t stand secure.
    Jul 3 2025
    This week, Ben discusses some major Supreme Court decisions from the just concluded 2025 term. Dave's got the story of a license plate reader company dialing back access after media reports reveal potential oversharing. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney. Complete our annual audience survey before August 31. Links to today's stories: CERTIORARI TO THE UNITED STATES COURT OF APPEALS FOR THE FIFTH CIRCUIT TRUMP, PRESIDENT OF THE UNITED STATES, ET AL. v. CASA, INC., ET AL. ON APPLICATION FOR PARTIAL STAY Flock Removes States From National Lookup Tool After ICE and Abortion Searches Revealed ⁠Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our ⁠⁠⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠⁠⁠, a weekly newsletter available exclusively to ⁠⁠⁠⁠⁠⁠N2K Pro⁠⁠⁠⁠⁠⁠ members on ⁠⁠⁠⁠⁠⁠N2K CyberWire's⁠⁠⁠⁠⁠⁠ website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week's ⁠Caveat Briefing⁠ covers two major U.S. Supreme Court rulings that may shape the future of digital policy. The Court upheld both the FCC’s authority to fund the Universal Service Fund—preserving billions for internet access in underserved communities—and a Texas law requiring age verification for adult content, sparking renewed debate over online privacy, free speech, and regulatory reach. Curious about the details? Head over to the ⁠⁠⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠⁠⁠ for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to ⁠⁠⁠⁠⁠⁠caveat@thecyberwire.com⁠⁠⁠⁠⁠⁠. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices
    Show More Show Less
    42 mins
  • Cyber offense in the hot seat.

    Cyber offense in the hot seat.
    Jun 26 2025
    This week on Caveat, Dave and Ben sit down with Andy Boyd, former Director of the CIA’s Center for Cyber Intelligence (CCI) and now an operating partner at AE Industrial Partners, a private equity firm focused on national security and aerospace. With decades of experience leading cyber operations at one of the most secretive U.S. intelligence agencies, Andy shares candid insights on the state of offensive cyber operations in the United States. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney. ⁠Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our ⁠⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠⁠, a weekly newsletter available exclusively to ⁠⁠⁠⁠⁠N2K Pro⁠⁠⁠⁠⁠ members on ⁠⁠⁠⁠⁠N2K CyberWire's⁠⁠⁠⁠⁠ website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week's Caveat Briefing covers a contentious move in Congress as the Senate parliamentarian ruled that a provision banning state regulation of AI for 10 years can remain in President Trump’s tax and spending bill. The decision allows the measure—which ties AI regulation to federal broadband funding access—to proceed under budget reconciliation, despite bipartisan skepticism and growing concerns over federal overreach into states' rights. Curious about the details? Head over to the ⁠⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠⁠ for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to ⁠⁠⁠⁠⁠caveat@thecyberwire.com⁠⁠⁠⁠⁠. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices
    Show More Show Less
    37 mins
  • Answering the cybersecurity call.

    Answering the cybersecurity call.
    Jun 19 2025
    Please enjoy this encore of Caveat. Camille Stewart Gloster, Former Deputy National Cyber Director at the White House, is sharing a retrospective of her public service career. Ben discusses a new lawsuit in Illinois challenging automatic license plate readers. Dave's got the story of an AI hotline between the US and China. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney. Links to the stories: ⁠Illinois' use of cameras that read license plates amounts to 'dragnet surveillance,' lawsuit alleges⁠ ⁠The U.S. and China Need an AI Incidents Hotline⁠ Caveat Briefing A companion weekly newsletter is available CyberWire Pro members on the CyberWire's website. If you are a member, make sure you subscribe to receive our weekly wrap-up of privacy, policy, and research news, focused on incidents, techniques, tips, compliance, rights, trends, threats, policy, and influence ops delivered to you inbox each Thursday. Got a question you'd like us to answer on our show? You can send your audio file to ⁠caveat@thecyberwire.com⁠. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices
    Show More Show Less
    53 mins
  • The art of the breakup: Trump’s antitrust surge.

    The art of the breakup: Trump’s antitrust surge.
    Jun 12 2025
    This week on Caveat, Dave and Ben welcome back N2K’s own ⁠⁠⁠Ethan Cook⁠⁠⁠ for our latest policy deep dive segment. As our lead analyst, Ethan shares his knowledge of law, privacy, and surveillance on the latest policy developments shaping the cybersecurity and legal landscape. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney. Policy Deep Dive In this Caveat Policy Deep Dive, our conversation and analysis revisits antitrust policy. Throughout this conversation, we break down how President Trump has pursued one of the most aggressive initial antitrust policies in decades. Since taking office, the FTC and DOJ have continued to pursue many of the antitrust cases that the former Biden administration was pursuing targeting many Big Tech companies. However, these cases are not minor as in each of the cases, the Trump administration is actively pursuing major company breakups. Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our ⁠⁠Caveat Briefing⁠⁠, a weekly newsletter available exclusively to ⁠⁠N2K Pro⁠⁠ members on ⁠⁠N2K CyberWire's⁠⁠ website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s ⁠⁠Caveat Briefing⁠⁠ covers how Italy has cut ties with the Israeli spyware firm, Paragon after revelations that its technology was used to surveil government critics, including journalists and migrant rescue workers, sparking political outrage. A parliamentary report confirmed that Italian intelligence services had first paused, then terminated use of the spyware, though the timeline of the decision remains disputed. Curious about the details? Head over to the ⁠⁠Caveat Briefing⁠⁠ for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to ⁠⁠caveat@thecyberwire.com⁠⁠. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices
    Show More Show Less
    46 mins
  • Deep in the tech of Texas.

    Deep in the tech of Texas.
    Jun 5 2025
    This week on Caveat, Ben’s got the story of Texas becoming the second—and largest—state to pass a law requiring Apple and Google to verify users' ages on app stores and get parental consent before kids and teens can download apps or make purchases, signaling a broader push toward stricter online age checks. Dave dives into the story of President Trump’s 2026 budget proposal, which calls for slashing over 1,000 jobs at CISA and cutting the agency’s budget by nearly half a billion dollars, raising bipartisan concerns about the future of federal cybersecurity programs. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney. Links to stories: ⁠Trump budget proposal would slash more than 1,000 CISA jobs A new Texas law mandates age checks on phones. It may be just the start. ⁠Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our ⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠, a weekly newsletter available exclusively to ⁠⁠⁠⁠N2K Pro⁠⁠⁠⁠ members on ⁠⁠⁠⁠N2K CyberWire's⁠⁠⁠⁠ website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s ⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠ is on how a federal judge is weighing less aggressive remedies in the U.S. antitrust case against Google, suggesting limited data sharing and conditional changes to its deals with Apple rather than the sweeping 10-year plan proposed by regulators. The judge also noted that emerging AI tools like ChatGPT could disrupt traditional search, raising questions about how future competitors should factor into the case. Curious about the details? Head over to the ⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠ for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to ⁠⁠⁠⁠caveat@thecyberwire.com⁠⁠⁠⁠. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices
    Show More Show Less
    41 mins