The guest nobody invited.

This CyberWire Daily episode provides a concise roundup of current cyber threats and advisories: CISA-mandated patching for actively exploited TrueConf Server flaws, LockBit's ransom/leak threats against banking data, a critical type-confusion RCE in an isolated-vm Node.js library, a new Agent Tesla v4 campaign with enhanced evasion, a novel malware delivery method abusing FTP server banners, Apple patching a critical image-processing flaw, a reported North Korean supply-chain attack against the Rust ecosystem, and a major Latvian breach exposing data on 1.2 million people, along with industry commentary on contractor compliance and extortion trends.