What changed and why it matters

CU InfoSecurity Unknown date Security TX

How GenAI Is Aiding a Rise in Identity-Based Threats

- Combining employee training with behavioral monitoring and AI guardrails is essential for mitigating identity risk. - The shift from brute-force attacks to AI-powered phishing poses tougher challenges for credit unions.

Open brief Source

CU InfoSecurity Unknown date Security TX

Threat Actors Launch Mass Reconnaissance of AI Systems

- Over 91,000 attacks targeted exposed LLM endpoints from October to January. - Threat actors probed more than 70 model endpoints from major AI providers like OpenAI, Anthropic, and Google.

Open brief Source

CU InfoSecurity Unknown date Enforcement

UK Probes X Over AI Deepfake Porn

- British communications regulator Ofcom is formally investigating social media network X over its use of Grok AI for virtual undressing. - The investigation stems from concerns about compliance with the Online Safety Act,...

Open brief Source

CU InfoSecurity Unknown date Guidance TX

Webinar | Improving Visibility and Response With a Unified Platform

The webinar discusses the benefits of using a unified platform for enhancing visibility and response in compliance operations; it highlights how such platforms can streamline processes and improve overall efficiency.

Open brief Source

CU InfoSecurity Unknown date Commentary TX

Instagram Confirms Password-Reset Spam Flood, Denies Breach

Security Experts See Coincidental Timing After Leak of Scraped Instagram User Data; No System Breach Confirmed by Instagram

Open brief Source

CU InfoSecurity Unknown date Security TX

CrowdStrike Adds Real-Time Identity Control With SGNL Deal

- CrowdStrike acquired SGNL for $740M to enhance dynamic access control for both human and nonhuman identities. - The acquisition aims to support zero standing privilege and agentic workforce security.

Open brief Source

CU InfoSecurity Unknown date Security TX

Key Areas of Convergence for IT-OT Security in Energy Sector

- Security teams can use common tools and practices to protect both IT and OT environments. - Hitachi Energy designated a single leader for IT-OT environments years ago.

Open brief Source

CU InfoSecurity Unknown date Security TX

ISMG Editors: Lack of MFA Keeps Fueling Cloud Data Breaches

• Basic security failures, such as lack of multi-factor authentication (MFA), are contributing to cloud data breaches. • Researchers are exploring new methods for data protection in the age of artificial intelligence.

Open brief Source

CU InfoSecurity Unknown date Security TX

Illinois Notifies 700,000 of Misconfiguration Breach

• More than 700,000 Illinois residents notified of a breach due to incorrect privacy settings exposing personal and medical information. • The breach involved data related to Medicare, Medicaid, and rehabilitation services recipients.

Open brief Source

CU InfoSecurity Unknown date Security TX

Salt Typhoon Hackers Hit Congressional Emails in New Breach

• Sensitive discussions exposed in a suspected Chinese cyber campaign targeting congressional staff emails. • Concerns raised about the security of unclassified federal networks.

Open brief Source

CU InfoSecurity Unknown date Commentary TX

Healthcare Chatbots Provoke Unease in AI Governance Analysts

AI failures can be subtle and potentially harmful; AI chatbots may provide advice that could be dangerous for certain individuals.

Open brief Source

CU InfoSecurity Unknown date Security TX

No Rest in 2026 as Patch Alerts Amass for Cisco, HPE and n8n

- Cisco has patched a critical Identity Services Engine bug. - HPE OneView is being actively exploited and requires immediate attention. - Proof-of-concept exploits have been released for n8n automation software.

Open brief Source

CU InfoSecurity Unknown date Security TX

Breach Roundup: Firewalls Headed for Obsolescence

- Moody's predicts that firewalls will become obsolete due to evolving cyber threats. - Various breaches and security incidents have been reported including a Sedgwick breach, Romanian power firm hack, D-Link flaw exploitation, and...

Open brief Source

CU InfoSecurity Unknown date Security TX

Cyera Secures $400M Series F to Lead in Agentic AI Security

Cyera secured $400 million in funding to expand R&D and partnerships for AI security; the company aims to create a control plane for enterprise AI use.

Open brief Source

CU InfoSecurity Unknown date Security TX

Cyber Retaliation Risks Rise After US-Venezuela Operation

- Warning from U.S. cybersecurity officials about potential cyber retaliation from China and Russia-linked threat actors after the U.S. military raid in Venezuela. - Infrastructure operators are advised to prepare for probing and disruptive...

Open brief Source

CU InfoSecurity Unknown date Security TX

Detect and Respond Faster with Elastic & Tines

SOC teams face increasing pressure from evolving threats and limited resources; tools like Elastic and Tines can help detect and respond faster.

Open brief Source

CU InfoSecurity Unknown date Commentary TX

ChatGPT Health: Top Privacy, Security, Governance Concerns

- OpenAI is developing a new version of ChatGPT for health that will connect with users' medical records and wellness apps. - More than 230 million people each week ask ChatGPT wellness and health-related...

Open brief Source

CU InfoSecurity Unknown date Security TX

Breach Roundup: Firewalls Headed for Obsolesce

- Moody's predicts firewalls will become obsolete, highlighting the need for updated cybersecurity measures. - Sedgwick confirms a breach and Romanian critical infrastructure was hacked, emphasizing potential threats to credit unions.

Open brief Source

CU InfoSecurity Unknown date Security

Webinar | Securing AI and Cloud in OT: Why IT/OT Convergence Is Mission-Critical for Smart Manufacturing

The webinar discusses the importance of securing AI and cloud in operational technology (OT) environments for smart manufacturing. It emphasizes that IT/OT convergence is mission-critical for effective security measures.

Open brief Source

CU InfoSecurity Unknown date Commentary|security

Britain Debuts Early Revamp of Government Cyber Action Plan

• The British government has unveiled a new cybersecurity plan aimed at improving protections and resilience. • While experts commend the increased accountability, concerns remain over funding and enforcement.

Open brief Source

CU InfoSecurity Unknown date Security TX

Webinar | The Invisible Threat: How Polymorphic Malware is Outsmarting Your Email Security

• Polymorphic malware can change its code while maintaining the same functionality, making it difficult for traditional security measures to detect and block. • Credit unions need to implement advanced email security solutions that...

Open brief Source

CU InfoSecurity Unknown date Security TX

Cryptohack Roundup: Alleged Fraud Kingpin Deported to China

An alleged fraud kingpin was deported to China; Unleash Protocol experienced a $3.9M hack; TRM linked crypto thefts to the LastPass breach.

Open brief Source

CU InfoSecurity Unknown date Guidance

JumpCloud Grows Presence in Brazil With MSP MacSolution Buy

- JumpCloud acquired MSP MacSolution to enhance global service delivery and IT modernization capabilities. - Sao Paulo, Brazil, is now a strategic hub for the company.

Open brief Source

CU InfoSecurity Unknown date Guidance TX

FDA Takes Hands-Off Approach to AI Devices and Software

• The FDA will not regulate low-risk AI-enabled health wearable devices and clinical decision support software. • This hands-off approach is intended to promote market innovation.

Open brief Source

CU InfoSecurity Unknown date Security TX

Orca, Wiz End Dueling Lawsuits Over Cloud Security Patents

- Federal board invalidated three of Orca's asserted patents. - Wiz and Orca Security have agreed to dismiss all claims in their cloud security patent dispute after 30 months of legal proceedings.

Open brief Source