What changed and why it matters

CU InfoSecurity Unknown date Hidden

Minimizing Attack Surface in IT-OT Converged Manufacturing Environments

The article discusses the importance of minimizing the attack surface in IT-OT converged manufacturing environments. It emphasizes the need for robust cybersecurity measures and regular risk assessments.

Open brief Source

CU InfoSecurity Unknown date Hidden

Cancer Center: Hackers Stole Research Files, Encrypted Data

• Ransomware hackers stole research files from the University of Hawaii Cancer Center in an incident in August 2025. • The hack highlights risks involving compromises of medical research data.

Open brief Source

CU InfoSecurity Unknown date Hidden

Overcoming Machine Identity Overload

Modernization through AI and cloud platforms has led to an increased attack surface due to identity sprawl; experts recommend addressing this issue to secure enterprise environments.

Open brief Source

CU InfoSecurity Unknown date Security

Magecart Hits Continue: Stripe Spoofing, Supply Chain Risks

Researchers detail an active Magecart campaign targeting WooCommerce and Stripe payment forms. ConnectPOS exposes its code repository for years, posing a supply-chain risk for customers.

Open brief Source

CU InfoSecurity Unknown date Hidden

Dark Patterns, Children's Data and Corporate Fiduciary Risk

CISOs must consider UX decisions as security and governance risks due to the convergence of privacy laws. Manipulative UX, consent flows, and retention practices can indicate a breach of fiduciary duty.

Open brief Source

CU InfoSecurity Unknown date Security

One Simple Trick to Knock Out the Wi-Fi Network

• A flaw in Broadcom chipsets used in wireless routers allows attackers to disrupt the 5 GHz band regardless of security settings. • Credit unions should be aware of this cybersecurity risk.

Open brief Source

CU InfoSecurity Unknown date Hidden

AI Supply Chain Risk: Will CIOs Be Held Accountable?

The article highlights the increasing risk from third-party breaches in AI environments and notes that traditional vendor risk management processes may not be sufficient. It suggests that CIOs will need to adapt their strategies...

Open brief Source

CU InfoSecurity Unknown date Hidden

Inside the Growing Problem of Identity Sprawl

Modern enterprises struggle with identity management as identities are created and discarded without proper oversight; this creates a larger attack surface for adversaries. The article highlights the need for better visibility and control over...

Open brief Source

CU InfoSecurity Unknown date Hidden

SAP Defense in Focus as Zerlang Takes Over at SecurityBridge

• SecurityBridge's new CEO Jesper Zerlang emphasizes SAP security as a weak link in enterprise risk strategies. • He plans global expansion and leveraging product differentiators, including focusing on SAP security.

Open brief Source

CU InfoSecurity Unknown date Hidden

NIST Calls for Public to Help Better Secure AI Agents

NIST is seeking public input on security threats from agentic AI; stakeholders may help identify vulnerabilities and mitigate risks in federal networks.

Open brief Source

CU InfoSecurity Unknown date Hidden

1Password Focuses on Identity Security in Agentic AI Era

1Password has appointed Nancy Wang, a former AWS executive, as chief technology officer to oversee the development of agentic AI security strategies. Agents are described as their own class of identities.

Open brief Source

CU InfoSecurity Unknown date Hidden TX

California Fines, Bans Data Broker in Privacy Crackdown

• California fined and banned a Texas data broker for selling sensitive health and demographic data. • The firm's activities, including targeting older adults with health condition lists, were part of a broader privacy...

Open brief Source

CU InfoSecurity Unknown date Security

How GenAI Is Aiding a Rise in Identity-Based Threats

• Combining employee training with behavioral monitoring and AI guardrails is essential for mitigating identity risk in the face of AI-driven phishing threats. • The shift from brute-force attacks to AI-powered phishing poses tougher...

Open brief Source

CU InfoSecurity Unknown date Hidden

Threat Actors Launch Mass Reconnaissance of AI Systems

Threat actors launched coordinated campaigns targeting over 91,000 AI infrastructure attacks between October and January. The attacks probed more than 70 model endpoints from major providers like OpenAI, Anthropic, and Google to build future...

Open brief Source

CU InfoSecurity Unknown date Hidden

UK Probes X Over AI Deepfake Porn

• UK communications regulator Ofcom is formally investigating social media network X over its AI Grok AI's ability to virtually undress users, including minors. • The investigation stems from concerns about compliance with the...

Open brief Source

CU InfoSecurity Unknown date Guidance

Webinar | Improving Visibility and Response With a Unified Platform

The webinar discusses the benefits of using a unified platform for improving visibility and response in compliance operations. Attendees learn about integrating various systems to enhance data management and streamline regulatory reporting.

Open brief Source

CU InfoSecurity Unknown date Hidden

Instagram Confirms Password-Reset Spam Flood, Denies Breach

• Instagram confirmed a massive wave of password reset emails was due to malicious abuse of a legitimate feature but denied any breach of its systems. • Security experts reported the leak of 6.2...

Open brief Source

CU InfoSecurity Unknown date Hidden

CrowdStrike Adds Real-Time Identity Control With SGNL Deal

CrowdStrike acquires SGNL for $740M to enhance dynamic access control; expands identity capabilities for both human and nonhuman identities.

Open brief Source

CU InfoSecurity Unknown date Hidden

Key Areas of Convergence for IT-OT Security in Energy Sector

• Security teams can use common tools and practices to protect both IT and OT environments. • Hitachi Energy designated a single leader for IT-OT environments years ago.

Open brief Source

CU InfoSecurity Unknown date Security

ISMG Editors: Lack of MFA Keeps Fueling Cloud Data Breaches

• The article highlights the ongoing issue of lack of Multi-Factor Authentication (MFA) contributing to cloud data breaches. • It also touches on how researchers are exploring new methods for data protection in an...

Open brief Source

CU InfoSecurity Unknown date Security

Illinois Notifies 700,000 of Misconfiguration Breach

• Over 700,000 Illinois residents notified of a data breach due to incorrect privacy settings on a mapping platform. • The breach exposed sensitive information related to Medicare, Medicaid, and rehabilitation services recipients.

Open brief Source

CU InfoSecurity Unknown date Hidden

Salt Typhoon Hackers Hit Congressional Emails in New Breach

• Suspected Chinese cyber campaign linked to Salt Typhoon breached congressional staff email systems. • Sensitive discussions related to China, intelligence, and military oversight were exposed.

Open brief Source

CU InfoSecurity Unknown date Hidden

Healthcare Chatbots Provoke Unease in AI Governance Analysts

AI failures can be subtle and potentially dangerous; safety tests may not catch all errors. Healthcare chatbots pose risks, especially for users with specific medical conditions.

Open brief Source

CU InfoSecurity Unknown date Hidden

No Rest in 2026 as Patch Alerts Amass for Cisco, HPE and n8n

Cisco has patched a critical Identity Services Engine bug; HPE OneView is being actively exploited with warnings from cybersecurity officials; proof-of-concept exploits have been released for n8n automation software.

Open brief Source

CU InfoSecurity Unknown date Security

Breach Roundup: Firewalls Headed for Obsolescence

Moody's predicts firewalls will become obsolete; Sedgwick confirms a data breach; Romanian power firm and D-Link devices were targeted by cyber attacks.

Open brief Source