War comes for the cloud.

The CyberWire Daily episode 'War comes for the cloud' delivers a sobering look at the escalating intersection of geopolitics and cybersecurity in 2026. Recent Iranian strikes on telecom and cloud infrastructure in Bahrain and the UAE mark a pivotal shift—commercial cloud data centers are now legitimate wartime targets, signaling a new era of cyber warfare. The episode details multiple high-impact incidents: a massive dark web intelligence database exposed with Chinese state-linked data, a zero-day exploit in TrueConf used to compromise government systems, and a widespread React2Shell attack targeting Next.js apps. On the domestic front, Iowa's lawsuit against UnitedHealth over the 2024 Change Healthcare breach underscores the legal and financial fallout of large-scale cyberattacks. Meanwhile, France moves toward banning social media for minors under 15, reflecting growing global concern over digital safety. A critical insider threat case involving a former engineer who locked out hundreds of systems highlights the persistent danger of privileged access abuse. The episode culminates in a powerful conversation with Brandon Karpf, who warns that U.S. critical infrastructure—especially water treatment plants—is under credible, ongoing threat from Iran, yet remains under-resourced and under-protected. He calls for urgent political will, increased funding for CISA, and a community-wide effort to support underfunded local cybersecurity clinics and infrastructure resilience. Key takeaways include: 1) Cloud infrastructure is now a strategic war asset and must be treated as such in national defense planning; 2) Insider threats and IoT vulnerabilities (like the espresso machine breach) remain critical blind spots; 3) The U.S. must prioritize hardening the 'soft underbelly' of critical infrastructure before investing in advanced tech; 4) Political and public pressure is essential to restore funding and staffing at agencies like CISA; 5) Cybersecurity is no longer just a technical issue—it’s a national security imperative requiring coordinated public-private action. The episode closes with a stark reminder: in the digital age, even a coffee machine can be the weakest link.