Caveat

This week, we are joined by US Congressional candidate from Oklahoma, Madison Horn, who is speaking with Ben Yelin about national security and cyberwarfare. Ben's story has an update on TikTok’s lawsuit against the federal government. Dave looks at the latest ruling on privacy rights at the border. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: TikTok’s Chinese owner built search tool for users’ views on abortion, gun control, DOJ claims US border agents must get warrant before cell phone searches, federal court rules Caveat Briefing A companion weekly newsletter is available CyberWire Pro members on the CyberWire's website. If you are a member, make sure you subscribe to receive our weekly wrap-up of privacy, policy, and research news, focused on incidents, techniques, tips, compliance, rights, trends, threats, policy, and influence ops delivered to you inbox each Thursday. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

This week, Danny Allan, Snyk's CTO, discusses how AI regulations are influencing both the security of AI tools and the broader software ecosystem and the emphasis on compliance with security standards. This comes on the heels of a recent report which found that the majority of security leaders have begun contemplating banning the use of AI in coding due its security risks. Ben dives into policy changes we might expect from the next FCC chairman. Dave's got the story of a school shut down over deepfake nudes. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: Trump Picks Brendan Carr to Lead F.C.C. Explicit deepfake scandal shuts down Pennsylvania school Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers the story of Chinese President Xi Jinping meeting with outgoing U.S. President Joe Biden at the APEC summit in Peru, discussing key issues like Taiwan, cybercrime, and trade while emphasizing China's desire for stable U.S.-China relations as Donald Trump prepares to assume office. Both leaders highlighted the importance of managing differences, though tensions remain over Taiwan, military provocations, and U.S. trade restrictions on Chinese technology. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

On today’s show, Ben and Dave share their reactions to the presidential election and what we might expect moving forward into a second term with President Trump. And later in the show, Dave has a conversation Sarah Hutchins, Partner at Parker Poe, to talk about the growing number of state data privacy laws, litigation trends related to targeted advertising and wiretapping, and key takeaways for companies on cybersecurity practices and risk reporting. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

This week, we are joined by Brad Auerbach from Outside GC, who is talking about their research on "Trailblazing Tennessee Legislation – the ELVIS Act." Ben has the story of parents suing over a bad grade their kid got after using AI. Dave looks at bias in AI evaluations of resumés. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: Parents Sue School That Gave Bad Grade to Student Who Used AI to Complete Assignment AI overwhelmingly prefers white and male job candidates in new test of resume-screening bias Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers the story of how Chinese researchers have repurposed Meta's open-source Llama AI model for military applications. The researchers, linked to China's People's Liberation Army, developed "ChatBIT," an AI tool fine-tuned for military intelligence, outperforming some models similar to OpenAI's ChatGPT-4. Despite Meta's restrictions against military use, the PLA's efforts raise concerns about the global implications of open-source AI availability and U.S. national security. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

This week, we are joined by Joseph Jarnecki from RUSI, who is talking about their work on "What Next for the UK–Japan Cyber Partnership?" Ben takes a deep dive into the particulars of a cell phone search warrant and seizure. While Dave looks at a lawsuit challenging online surveillance. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: Left to Their Own Devices? A Conversation With Carrie Cohen The Global Surveillance Free-for-All in Mobile Ad Data Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers how Chinese hackers allegedly targeted the phones of Republican presidential nominee Donald Trump and running mate Sen. JD Vance, along with other high-ranking U.S. officials, as part of a broad espionage campaign compromising multiple telecommunications providers. The FBI and CISA are investigating, with concerns over potential data leaks, including sensitive communications and location data, which highlights ongoing risks of foreign surveillance on U.S. infrastructure. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

This week, Ben Yelin is joined by Eoin Hinchy, Tines Co-Founder and CEO, sharing his perspective about straddling EU and US regulations as the AI guardrail conversation boils over. Ben's story looks into the doctrine of preemption and how it might impact efforts to regulate data privacy. While Dave look's at a major grocery chain getting pushback on its facial recognition program. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: Big Tech is Trying to Burn Privacy to the Ground–And They’re Using Big Tobacco’s Strategy to Do It Kroger’s facial recognition plans draw increasing concern from lawmakers Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers how the U.S. Justice Department has proposed new rules to prevent foreign adversaries like China, Russia, and Iran from accessing sensitive American data, including genomic, health, and financial information, through business transactions. These regulations, part of an executive order by President Biden, would restrict the transfer of data to "countries of concern" and impose penalties for non-compliance, with specific limits on the types and amounts of data that can be shared. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

Katie Bowen, VP & GM Global Public Sector and Defense at Synack is sharing her thoughts on CISA's new guidance on Federal Civilian Executive Branch (FCEB) Operational Cybersecurity Alignment (FOCAL) Plan & federal vulnerability management practices. Ben does a deep dive into one of the biggest misconceptions about the First Amendment. Dave looks at the fallout from an alleged Chinese hack of a US telecom surveillance program. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: Yes, Tim Walz, You Can Shout 'Fire' In A Crowded Theatre Lawmakers press agencies, telecoms for more details on Salt Typhoon hacks Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers the growing collaboration between Russia, China, and Iran with criminal networks for cyberespionage and hacking against the U.S. Microsoft’s report highlights instances where these state-sponsored activities blur the lines with criminal motives, raising concerns among national security officials as adversaries leverage cybercriminals for enhanced cyber capabilities. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

Josh Rosenzweig, Senior Director of AI & Innovation at Morgan Lewis, joins to discuss tackling security and compliance in the age of genAI. Ben has the story of California Governor Gavin Newsom vetoing a bill that would have regulated artificial intelligence. Dave looks at a Virginia court shutting down the use of license plate readers. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: California Gov. Newsom vetoes AI bill in a win for Big Tech An Unexamined Life – Virginia Court Strikes Down Automated License Plate Readers (ALPRs) Neal v. Fairfax County Police Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers the International Longshoremen’s Association (ILA) strike, which raises concerns about automation replacing jobs at U.S. ports. While the ILA fights to limit the introduction of new technologies, proponents argue that automation could enhance efficiency and safety, reflecting a broader conflict between labor and technological advancement across various industries. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

This week, we are joined by Jen Roberts and Nitansha Bansal, both Assistant Directors of the Cyber Statecraft Initiative, from the Atlantic Council, as they are sharing their report "Mythical Beasts and Where to Find Them: Mapping the Global Spyware Market and its Threats to National Security and Human Rights." Ben discusses new election-related deep fake laws coming out of California. Dave looks at an FTC report on social media platforms. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: California Passes Election ‘Deepfake’ Laws, Forcing Social Media Companies to Take Action FTC Staff Report Finds Large Social Media and Video Streaming Companies Have Engaged in Vast Surveillance of Users with Lax Privacy Controls and Inadequate Safeguards for Kids and Teens Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers California Governor Gavin Newsom's recent signing of three AI-related bills aimed at preventing the misuse of sexually explicit deepfakes. These new laws target AI developers and social media platforms, establishing regulations to prevent irresponsible use of the technology, while larger discussions around broader AI regulation continue as Newsom considers a major AI regulation bill pending his decision by September 30. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

This week, we are joined by Dmitri Alperovitch, author and Chairman of Silverado Policy Accelerator, as he is talking with Ben Yelin about his book, "World on the Brink: How America Can Beat China in the Race for the Twenty-First Century." Ben reviews oral arguments in the TikTok case against the U.S. Government. Dave looks at the hunt for Stingrays at the DNC convention. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: TikTok faces skeptical judges in court fight over looming national ban We Hunted Hidden Police Signals at the DNC Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers covers the FDIC's proposed rules for banks working with fintech companies, requiring the identification of beneficial owners and ensuring consumer access to funds after the Synapse Financial bankruptcy. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

This week, Shane Fry from RunSafe Security joins us to discuss his work supporting the space industry with cybersecurity, as the Spacecraft Cybersecurity Act, introduced by Congressmen Frost and Beyer, aims to require NASA-approved cybersecurity plans from manufacturers using federal funds, in response to increasing threats from China and Russia. Ben discusses the latest anti-trust case against Google. Dave looks at Las Vegas police refusing the NFL’s mandate for facial recognition security. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: DOJ claims Google has “trifecta of monopolies” on Day 1 of ad tech trial Las Vegas police refuse to comply with NFL facial recognition tech at games Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers the launch of the first legally binding international AI treaty, designed to manage AI risks and promote responsible innovation while protecting human rights, with the treaty set to be signed by countries including EU members, the US, and Britain, though some critics raise concerns about its broad principles and exemptions. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

This week, Ben delves into the escalating clash between Elon Musk and a Brazilian judge, centered around the contentious issue of content moderation on X/Twitter. Meanwhile, Dave explores a looming challenge to Section 230 immunity, which could redefine the legal landscape for online platforms. Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: Brazil Blocks X After Musk Ignores Court Orders TikTok isn't protected by Section 230 in 10-year-old’s ‘blackout challenge’ death Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers the UK Labour government's new AI strategy, which emphasizes cost-cutting and public sector adoption over direct industry investment. The approach includes scrapping previous funding plans and focusing on using AI to improve public services while facing criticism for potentially scaling back on innovation. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

Adam Darrah, Vice President of Intelligence at ZeroFox, is discussing how recent high-profile events have intensified the spread of false narratives and how the role of social media platforms may play in amplifying these issues, especially after the recent SCOTUS decision in Murthy vs. Missouri. Ben discusses the arrest of Telegram founder Pavel Durov in France. Dave looks at the possibility of police officers using AI to write police reports. Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: Arrest of Telegram’s Durov inflames debate over online crime and free speech Police officers are starting to use AI chatbots to write crime reports. Will they hold up in court? Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing covers the Department of Justice's lawsuit against RealPage, a property management software company, for allegedly using its pricing algorithm to facilitate unlawful coordination among landlords, raising rents, and limiting competition. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

This week, Michael Listner joins us to discuss the Supreme Court's ruling in Loper Bright Enterprises v. Raimondo, which overturned Chevron Deference and now requires courts to independently review agency interpretations of ambiguous statutes. Ben discusses a new Appeals Court case holding that geofence warrants are unconstitutional. Dave looks at the democrat’s proposed platform on cyber. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: Taking the thumb off the scale: Chevron Deference, its repeal, and the effect on regulation of orbital debris US appeals court rules geofence warrants are unconstitutional GOP platform says protecting critical infrastructure from hackers is a ‘national priority’  Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our Caveat Briefing, a weekly newsletter available exclusively to N2K Pro members on N2K CyberWire's website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s Caveat Briefing features a significant story about the U.S. accusing Iran of cyber attacks and influence operations targeting presidential campaigns. Curious about the details? Head over to the Caveat Briefing for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices

Michael Razeeq, 2024 New America #SharetheMicinCyber Fellow, is discussing his research on the ways that laws governing civilian cyber corps (C3s) in states like Maryland, Michigan, Ohio, and others can help or hinder those organizations. Ben covers the groundbreaking anti-trust Court decision against Google. Dave looks at a new bill that would elevate ransomware to a terrorist threat. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Please take a moment to fill out an audience survey! Let us know how we are doing! Links to the stories: ‘Google Is a Monopolist,’ Judge Rules in Landmark Antitrust Case Intelligence bill would elevate ransomware to a terrorist threat Caveat Briefing A companion weekly newsletter is available CyberWire Pro members on the CyberWire's website. If you are a member, make sure you subscribe to receive our weekly wrap-up of privacy, policy, and research news, focused on incidents, techniques, tips, compliance, rights, trends, threats, policy, and influence ops delivered to you inbox each Thursday. Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices