What changed and why it matters

CU InfoSecurity Unknown date Hidden

McLaren Health Will Pay $14M to Settle Lawsuits in 2 Attacks

- McLaren Health Care settled ransomware attack lawsuits involving 2.5 million patients and employees for $14 million. - The attacks occurred in 2023 and 2024 by different ransomware groups.

Open brief Source

CU InfoSecurity Unknown date Guidance

Admin Rights Are a Vulnerability, Not an Enabler

The article discusses the benefits of an identity-first model over traditional admin rights, emphasizing reduced risk and improved business operations. It also promotes a webinar session by CyberArk on practical endpoint control techniques.

Open brief Source

CU InfoSecurity Unknown date Hidden

Orion Secures $32M to Target DLP's False Positive Problem

- Orion Security raises $32M for AI-based DLP solutions targeting false positives and policy sprawl. - CEO Nitay Milner claims large language models provide real-time context that legacy DLP tools cannot achieve at scale.

Open brief Source

CU InfoSecurity Unknown date Hidden

Ivanti Zero-Days Likely Deployed in EU and Dutch Hacks

The European Commission detected a cyberattack on its central infrastructure managing mobile devices; Ivanti's Endpoint Manager Mobile has known flaws under active exploitation.

Open brief Source

CU InfoSecurity Unknown date Guidance

How Banks Can Limit Losses From First-Party Fraud

• Financial institutions should implement risk-based controls to limit initial trust for new customers during online account opening. • Effective strategies include establishing customer behavior before full trust is granted.

Open brief Source

CU InfoSecurity Unknown date Hidden

EU: WhatsApp Likely Broke Antitrust Law by Blocking Rival AI

The European Commission intends to force Meta to open WhatsApp to third-party AI assistants; this could set a precedent for other platforms and potentially impact data privacy regulations.

Open brief Source

CU InfoSecurity Unknown date Hidden

Banks Face Dual Authentication Crisis From AI Agents

Experts advise moving from verifying identities to knowing agent intentions; AI agents creating a 'dual authentication crisis' that traditional security frameworks cannot address.

Open brief Source

CU InfoSecurity Unknown date Hidden

Moltbook Gave Everyone Control of Every AI Agent

Moltbook misconfigured their database, exposing 1.5 million API tokens and 35,000 email addresses; unauthenticated access was possible within days of launch.

Open brief Source

CU InfoSecurity Unknown date Hidden

Docker AI Bug Lets Image Metadata Trigger Attacks

A vulnerability in Docker's Ask Gordon AI assistant allows attackers to execute malicious commands by hiding them in the container application development platform’s image metadata; this can be exploited through a failure across Docker's...

Open brief Source

CU InfoSecurity Unknown date Hidden

Zscaler Purchases SquareX to Secure Browsers Without Agents

Zscaler has acquired SquareX to provide browser security through extensions; this approach aims to secure unmanaged devices and accelerate deployment by up to a year.

Open brief Source

CU InfoSecurity Unknown date Hidden

EU Envisions Military Data Sharing Sans US Tech

- Europe is planning a secure military data-sharing platform without U.S.-made technology. - Discussions about European tech sovereignty have accelerated, but there's debate on replacing U.S. hyperscalers.

Open brief Source

CU InfoSecurity Unknown date Hidden

Radicl Brings In $31M to Push AI-Driven SOC Toward Autonomy

Radicl secures $31M for AI-driven security operations; aims to improve detection accuracy and enable automated responses at scale. The company focuses on midmarket organizations.

Open brief Source

CU InfoSecurity Unknown date Hidden

Can a Cardiac Pacemaker Help Find a Missing Person?

Medical device cyber experts doubt the feasibility of using a pacemaker to locate an abducted person; one researcher suggested limited signal transmission. No explicit mention of Texas, TX, TCUD, or Texas-specific entities.

Open brief Source

CU InfoSecurity Unknown date Hidden

Russia Hacked the Polish Electricity Grid. Now What?

• Poland's online defenses thwarted a Russian cyberattack on the energy grid, but the incident raises questions about how to respond since it crossed legal and strategic lines. • The attack is considered more...

Open brief Source

CU InfoSecurity Unknown date Hidden

Bug Hunting With LLMs: Expert Tool Seeks More 'True' Flaws

Vulnhalla uses LLMs to reduce false positives in code vulnerability detection; it guides researchers with questioning techniques for faster triage.

Open brief Source

CU InfoSecurity Unknown date Hidden

Who's Liable When Embedded AI Goes Wrong?

• Organizations using embedded AI need to understand the application of AI governance, product liability, data protection, and security laws. • Chief Privacy Officer Chiara Rustici emphasizes the importance of understanding these laws as...

Open brief Source

CU InfoSecurity Unknown date Hidden

ISMG Editors: Notepad++ Supply Chain Attack Raises Alarm

The article discusses the Notepad++ supply-chain compromise and its implications for cybersecurity, as well as healthcare cyber risks and AI security trends. Varonis's acquisition of AllTrue.ai is highlighted as a signal towards integrating artificial...

Open brief Source

CU InfoSecurity Unknown date Hidden

Ex-Nuance IT Worker Faces More Charges in Geisinger Breach

A former Nuance IT worker faces additional charges for stealing over 1 million patient records after being terminated. The incident involves a Nuance client, Geisinger.

Open brief Source

CU InfoSecurity Unknown date Security

Live Webinar | When AI Moves Faster Than Security: Enabling a Cyber-Resilient AI-Native Enterprise

The webinar discusses the challenges of implementing AI in a secure manner and emphasizes the need for a cyber-resilient approach. It highlights the importance of balancing innovation with robust security measures.

Open brief Source

CU InfoSecurity Unknown date Hidden

Ex-Nuance IT Worker Face More Charges in Geisinger Breach

A former Nuance Communications IT worker faces additional charges for stealing over 1 million patient records. The incident occurred two days after his termination in 2023.

Open brief Source

CU InfoSecurity Unknown date Security

Why Good Cyber Defense Rarely Stops Attackers

• Cybercrime outcomes continue to worsen despite stronger controls and broader collaboration among security teams. • AI-based attacks are increasingly challenging cyber defenders, according to Brian Cute of the Global Cyber Alliance.

Open brief Source

CU InfoSecurity Unknown date Hidden

Breach Roundup: Italy Thwarts Russian Olympic Hacks

Italy blocked Russian cyberattacks targeting the Olympics; APT28 ramped up attacks in Ukraine and Europe via supply chain vulnerabilities in SolarWinds, Ivanti, and Microsoft Office.

Open brief Source

CU InfoSecurity Unknown date Hidden

Varonis Acquires AllTrue.ai to Extend Security for AI Agents

Varonis has acquired AllTrue.ai to enhance AI security by addressing misconfigurations and visibility gaps. The CEO warns of the risks associated with unsecured AI agents accessing large datasets.

Open brief Source

CU InfoSecurity Unknown date Hidden

CISA Directs Federal Agencies to Update Edge Devices

U.S. Cybersecurity and Infrastructure Security Agency requires U.S. federal agencies to inventory and replace network appliances running past their vendor support cutoff date within 12 months; this directive does not explicitly mention Texas, TX,...

Open brief Source

CU InfoSecurity Unknown date Hidden

Microsoft Brings Back Google's Hayete Gallot to Run Security

Microsoft appoints Hayete Gallot as EVP of security and reassigns Charlie Bell to an engineering quality role; no explicit mentions of Texas or Texas-specific entities.

Open brief Source