What changed and why it matters

CU InfoSecurity Unknown date Enforcement TX

$12B Scam Market Tudou Guarantee Shuts Down

- Telegram marketplace Tudou Guarantee, which processed over $12 billion in fraudulent transactions, has ceased operations after the arrest of its chairman. - The company was the third-largest illicit marketplace globally.

Open brief Source

CU InfoSecurity Unknown date Security TX

Fraud Tops Ransomware in WEF's 2026 Cybersecurity Outlook

- Cyber-enabled fraud has become the top cybersecurity concern for CEOs in 2026. - AI is reshaping both cyber risk and defense strategies.

Open brief Source

CU InfoSecurity Unknown date Security TX

Aikido Gets $60M Series B to Scale, Automate AI Pen Testing

- Aikido raises $60M for global expansion and AI security tools. - CEO claims their autonomous pen testing and code remediation outperforms humans.

Open brief Source

CU InfoSecurity Unknown date Security TX

Over-the-Air Software Updates Pose Risks to Vehicles

- Over-the-air updates can pose significant security risks if not properly secured, including data theft and vehicle theft. - Standardization is crucial to prevent breaches in software-defined vehicles.

Open brief Source

CU InfoSecurity Unknown date Guidance|security TX

HHS Urges Health Sector to Harden Security of PHI, Devices

• Federal regulators advise HIPAA-regulated entities and third-party vendors to strengthen security measures for protecting patient health information. • Hardening of systems, software, and medical devices is crucial for both data privacy and patient...

Open brief Source

CU InfoSecurity Unknown date Enforcement|security TX

Ransomware 'Most Wanted': Cops Seek Head of Black Basta

- Police raided two suspected members of the Black Basta ransomware group in Ukraine and issued an international arrest warrant for the Russian national believed to be the founder. - The Black Basta group...

Open brief Source

CU InfoSecurity Unknown date Security TX

Anthropic's Cowork Shipped With Known Vulnerability

• AI agent can steal user files and upload them to an attacker's account via a known vulnerability. • Security researchers have demonstrated the exploit of Anthropic's Claude Cowork productivity agent.

Open brief Source

CU InfoSecurity Unknown date Security TX

ISP Sinkholes Kimwolf Servers Amid Eruption of Bot Traffic

- Lumen has blocked over 550 command and control servers related to the Kimwolf and Aisuru botnets since October. - This action is aimed at mitigating bot traffic that could compromise credit union systems.

Open brief Source

CU InfoSecurity Unknown date Enforcement TX

Epic Lawsuit Targets Alleged ‘Sham’ Providers in Data HIE

- Epic Systems sues Health Gorilla for enabling 'sham' entities to improperly access patient records from national health data exchanges. - The lawsuit alleges that these entities are masquerading as healthcare providers and are...

Open brief Source

CU InfoSecurity Unknown date Security TX

Penetration Testing Startup Novee Exits Stealth With $51.5M

Novee, an Israeli startup, has launched with $51.5 million in funding to develop AI agents for scalable penetration testing; its approach combines human-led research and simulations to address the increasing threat of AI-fueled cyber...

Open brief Source

CU InfoSecurity Unknown date Guidance|security TX

Pentagon’s Use of Grok Raises AI Security Concerns

• AI model Grok lacks compliance with key federal AI risk frameworks. • Pentagon must implement containment measures and restrict access during adversarial testing.

Open brief Source

CU InfoSecurity Unknown date Security TX

ISMG Editors: Why Digital Skimming Is Still Thriving

• Digital skimming remains a significant threat despite technological advancements. • AI's integration into personal health data is raising new security concerns.

Open brief Source

CU InfoSecurity Unknown date Guidance TX

Reduce Cloud Risk in Healthcare with Security by Default

- Discusses how CIS SecureSuite® Platform and CIS Hardened Images® assist healthcare organizations in meeting HIPAA compliance responsibilities. - Highlights the importance of security by default for strengthening cloud security.

Open brief Source

CU InfoSecurity Unknown date Security

European States Spin Wheels on Cybersecurity Directive

- Fewer than two-thirds of EU member countries have fully implemented the NIS2 Directive 15 months after its supposed implementation date. - The lag in adoption and implementation of the Network and Information Security...

Open brief Source

CU InfoSecurity Unknown date Enforcement|security

Coupang and the Horrible, No Good, Very Bad Data Breach

- South Korea's data protection watchdog ordered Coupang to stop publishing self-investigation findings and demanded the interim CEO return for a police meeting. - The incident has drawn criticism from U.S. Republican lawmakers.

Open brief Source

CU InfoSecurity Unknown date Security TX

Webinar | Securing AI in Practice: What’s Working, What’s Failing, and What to Do Next

The webinar discusses the current state of AI security in financial institutions, highlighting successful practices and areas that need improvement. It also provides recommendations for future steps to enhance cybersecurity measures.

Open brief Source

CU InfoSecurity Unknown date Guidance TX

CIO Playbook for Post-Quantum Security

Quantum security migrations are multi-year projects that require cross-functional collaboration; CIOs should follow practical steps for successful implementation.

Open brief Source

CU InfoSecurity Unknown date Security TX

Torq Gets $140M Series D to Fuel AI-Powered SOC Capabilities

Torq secured $140 million in Series D funding at a $1.2 billion valuation to expand its generative AI-powered security operations platform; plans include growing internationally, deepening AI research, and pursuing U.S. federal opportunities including...

Open brief Source

CU InfoSecurity Unknown date Security TX

Breach Roundup: Software Update Caused Verizon Outage

- Software flaw in a software update caused an outage at Verizon. - A cyberattack was reported in Venezuela and Endesa confirmed a data breach. - Telegram users are facing privacy risks due to...

Open brief Source

CU InfoSecurity Unknown date Guidance|security TX

CISA, Allies Sound Alarm on OT Network Exposure

- Insecure operational technology connectivity is identified as a major threat vector by US and UK cyber agencies. - The guidance highlights risks from remote access, third-party vendors, and IT integration.

Open brief Source

CU InfoSecurity Unknown date Security TX

Infoblox Buys Axur to Expand Cyberthreat Takedown Power

- Infoblox is acquiring Axur to enhance its cyberthreat defense capabilities. - Axur uses AI for automated phishing and rogue site takedowns with a 99% takedown rate.

Open brief Source

CU InfoSecurity Unknown date Guidance TX

MDR Built for State, Local, Tribal, and Territorial Government

- CIS MDR adapts to the specific environment of state, local, tribal, and territorial government entities. - It extends team capabilities and provides actionable insights rather than just alerts.

Open brief Source

CU InfoSecurity Unknown date Security TX

For-Profit Monroe University Notifies 321,000 of Data Theft

• A for-profit university has notified 321,000 individuals of a December 2024 data theft incident that compromised personal and health information. • The breach highlights the ongoing cybersecurity risks faced by educational institutions.

Open brief Source

CU InfoSecurity Unknown date Security TX

Trump Renominates Sean Plankey to Lead CISA

• Sean Plankey has been renominated to lead CISA despite Senate holds and demands for a report on telecom sector threats linked to China. • The agency continues to operate without a permanent director...

Open brief Source

CU InfoSecurity Unknown date Security TX

Ransomware by the Numbers: Count of Victims and Groups Surge

- The number of ransomware victims and criminal groups has increased over the past 12 months. - Despite law enforcement disruptions and competition, fewer victims are paying ransoms.

Open brief Source