What changed and why it matters

CU InfoSecurity Unknown date Hidden

European States Spin Wheels on Cybersecurity Directive

• Fewer than two-thirds of EU member states have fully implemented the NIS2 Directive 15 months after its deadline. • The lack of enthusiasm in adoption and implementation of the cybersecurity measure highlights potential...

Open brief Source

CU InfoSecurity Unknown date Hidden

Coupang and the Horrible, No Good, Very Bad Data Breach

• South Korea's data protection watchdog ordered Coupang to stop publishing self-investigation findings and demanded the interim CEO return for a police meeting. • The incident has drawn criticism from U.S. Republican lawmakers.

Open brief Source

CU InfoSecurity Unknown date Hidden

Webinar | Securing AI in Practice: What’s Working, What’s Failing, and What to Do Next

Key points include the importance of understanding AI risks and implementing effective security measures. The webinar also highlights successful practices in securing AI systems and identifies common failures.

Open brief Source

CU InfoSecurity Unknown date Hidden

CIO Playbook for Post-Quantum Security

Quantum security migrations are complex and multi-year projects; CIOs should follow practical steps to manage the project. The scope includes product, infrastructure, and supply chains.

Open brief Source

CU InfoSecurity Unknown date Hidden

Torq Gets $140M Series D to Fuel AI-Powered SOC Capabilities

Torq raised $140 million in Series D funding at a $1.2 billion valuation to expand its AI-powered security operations platform and pursue U.S. federal opportunities including FedRAMP certification.

Open brief Source

CU InfoSecurity Unknown date Hidden

Breach Roundup: Software Update Caused Verizon Outage

A software flaw caused a Verizon outage; Endesa confirms a data breach involving ICE identities; Telegram users face privacy risks due to an IP leak.

Open brief Source

CU InfoSecurity Unknown date Hidden

CISA, Allies Sound Alarm on OT Network Exposure

• Warning from US and UK cyber agencies about insecure OT network connectivity as a major threat vector. • Threats include remote access, third-party vendors, and IT integration leading to potential physical disruptions.

Open brief Source

CU InfoSecurity Unknown date Security

Infoblox Buys Axur to Expand Cyberthreat Takedown Power

Infoblox acquires Axur to enhance AI-driven cyberthreat defense; Axur offers 99% takedown rate for phishing and rogue sites.

Open brief Source

CU InfoSecurity Unknown date Hidden

MDR Built for State, Local, Tribal, and Territorial Government

CIS MDR adapts to the environment and extends team capabilities. It provides actionable insights through a real incident walkthrough.

Open brief Source

CU InfoSecurity Unknown date Hidden

For-Profit Monroe University Notifies 321,000 of Data Theft

A for-profit university notified 321,000 individuals of a data theft incident in December 2024. The breach compromised personal and health information.

Open brief Source

CU InfoSecurity Unknown date Hidden

Trump Renominates Sean Plankey to Lead CISA

• Sean Plankey has been renominated to lead CISA. • The nomination is stalled due to Senate holds and demands for a report on telecom sector threats linked to China.

Open brief Source

CU InfoSecurity Unknown date Security

Ransomware by the Numbers: Count of Victims and Groups Surge

• The number of ransomware victims and criminal groups has increased over the past 12 months. • Despite law enforcement efforts, competition among groups, and fewer victims paying, the trend remains concerning.

Open brief Source

CU InfoSecurity Unknown date Hidden

Cryptohack Roundup: UK Crypto Firms Tied to Iran Sanctions

UK crypto exchanges linked to Iranian sanctions evasion; NodeCordRAT malware spread via npm; FBI alert on North Korean QR-code phishing; illicit crypto hit $154 billion in 2025.

Open brief Source

CU InfoSecurity Unknown date Hidden

Trump's National Fraud Enforcement Plan Falls Short

• The new National Fraud Enforcement division focuses on public programs but lacks coordination with private sector entities. • This may not significantly impact fraud prevention in the private sector, including for Texas credit...

Open brief Source

CU InfoSecurity Unknown date Hidden

Incorporating Geopolitical Risk Into Your IT Strategy

Geopolitical risks should be included in scenario planning; strengthen cyber basics and build redundancy; IT organizations need to prepare for potential disruptions caused by geopolitical events.

Open brief Source

CU InfoSecurity Unknown date Hidden

Court Axes Investor Lawsuit Over CrowdStrike Software Update

• Judge dismissed most claims from investors accusing CrowdStrike of misrepresenting its software testing rigor before a July 2024 outage. • Two statements about federal compliance could plausibly be misleading, but plaintiffs failed to...

Open brief Source

CU InfoSecurity Unknown date Enforcement

PharMerica Will Pay at Least $5.2M to Settle Hack Lawsuit

PharMerica will pay at least $5.27 million as part of a preliminary class action settlement for a 2023 data theft incident affecting 5.8 million individuals; the company agreed to enhance its security measures.

Open brief Source

CU InfoSecurity Unknown date Hidden

Verizon Outage Felt Across United States

- Verizon experienced a mobile phone connectivity outage affecting the Eastern Seaboard and Southern parts of the U.S., peaking around 1 p.m. on Wednesday. - The cause of the outage was unknown but previous...

Open brief Source

CU InfoSecurity Unknown date Hidden

Seraphic Acquisition Arms CrowdStrike for AI Browser Threats

CrowdStrike acquires Seraphic for $420 million to enhance web detection and response capabilities; the technology secures AI workflows against browser-based threats such as data leakage and session hijacking.

Open brief Source

CU InfoSecurity Unknown date Hidden

The Difference Between Answering for and Owning It

• The article discusses the gap between influence and authority in cybersecurity roles, highlighting the importance of bridging this gap for effective leadership. • Strategies are provided on how individuals can enhance their influence...

Open brief Source

CU InfoSecurity Unknown date Hidden

Flaw in AI Libraries Exposes Models to Remote Code Execution

Vulnerabilities in AI libraries from Apple, Salesforce, and Nvidia expose models to remote code execution; Hugging Face researchers discovered these issues with tens of millions of downloads.

Open brief Source

CU InfoSecurity Unknown date Security

DeadLock Ransomware Group Utilizes Polygon Smart Contracts

- DeadLock ransomware group uses blockchain smart contracts for storing proxy server addresses. - This technique indicates the group's experience and sophistication in cybercrime.

Open brief Source

CU InfoSecurity Unknown date Hidden

Building a Solid IT Strategy in an Unstable World

CIOs need to develop strategies to avoid 'geopolitical lock-in' in AI, cloud, and supply chains; experts advise on managing risks in unstable global environments.

Open brief Source

CU InfoSecurity Unknown date Hidden

WitnessAI Secures $58M to Grow Global AI Security Reach

WitnessAI has raised $58 million to expand its AI security platform globally, focusing on MSSP and MDR vendors. The funding will enable the company to develop MSSP-ready offerings for detecting unauthorized AI agents and...

Open brief Source

CU InfoSecurity Unknown date Hidden

Lawmakers Urged to Let US Take on 'Offensive' Cyber Role

Analysts warned lawmakers about the failure of U.S. cyber deterrence efforts, allowing foreign adversaries like China to embed in critical infrastructure networks with minimal cost; they called for faster, coordinated offensive actions across federal...

Open brief Source