Hackers Begin to Leak Novo Nordisk's Stolen Data

Marianne Kolbasuk McGee • June 16, 2026

Cybercrime gang FulcrumSec has begun leaking what it claims are samples from 1.3 terabytes of data stolen from pharmaceutical giant Novo Nordisk. The hackers claim the trove contains clinical trial information and intellectual property, including AI models used in drug development.

3rd Party Risk Management

How AI Governance Protects Patient Care and Sensitive Data

Latest

Endpoint Security

Rokarolla Android Banking Trojan Enables Device Takeover

Greg Sirico • June 16, 2026

Newly surfaced Android-based banking Trojan gives threat actors near-total control over infected devices, letting them steal user credentials for direct access to financial accounts, says researchers. Rokarolla tricks users into side-loading malicious versions of popular, high traffic apps.

Government

Trump Memo Overhauls Cyber Rules for Classified Networks

Chris Riotta • June 16, 2026

A new White House directive rescinds a 1990 policy and a 2022 Biden memo, setting binding cybersecurity baselines for systems that process classified data and gives the director of the National Security Agency emergency directive authority across federal agencies.

Cyberwarfare / Nation-State Attacks

Chinese Espionage Actor Abuses Email Rules to Steal Research Data

Tiffany Wang • June 16, 2026

Google says Chinese espionage group UNC6508 compromised REDCap environments at North American research institutions, deployed custom malware, stole credentials and covertly forwarded strategically relevant emails through abused compliance rules to support long-term intelligence collection.

Agentic AI

The AI Accountability Gap CIOs Can't Ignore

Jennifer Lawinski • June 16, 2026

A new IBM Institute for Business Value survey finds two-thirds of CIOs and CTOs are accountable for AI systems they don't fully control. The survey of 2,000 tech executives details rising AI agent incidents and recommends infrastructure, governance and financial fixes.

Artificial Intelligence & Machine Learning

Restore Fable and Mythos Access, Cybersecurity Leaders Urge

Mathew J. Schwartz • June 16, 2026

New export controls on artificial intelligence startup Anthropic's Fable 5 and Mythos large language models, over their vulnerability-discovery capabilities, must be lifted, not least because Chinese models will soon offer equal capabilities, cybersecurity experts warned the Trump administration.

Fraud Management & Cybercrime

Chinese Hacking Firm Upgrades With New Windows Backdoor

Tiffany Wang • June 16, 2026

Eset uncovered two previously undocumented Windows variants of the China-linked SprySocks backdoor tied to FishMonger and iSoon, revealing expanded espionage capabilities, rootkit-based stealth and continued targeting of government organizations across Asia and Central America.

Identity & Access Management

Hacker: 'I Could Have Rickrolled the World Cup'

Anviksha More • June 16, 2026

A white-hat hacker discovered a now-fixed authorization flaw in a FIFA World Cup 2026 platform that allowed users to access a World Cup camera feed and other restricted resources. "An attacker could have rickrolled the entire FIFA World Cup," wrote Bobdahacker.

Incident & Breach Response

South Korea Fines Coupang $409M Over Massive Data Breach

Tiffany Wang • June 16, 2026

South Korea's privacy regulator fined Coupang a record 624.7 billion won after concluding that weak authentication controls, insider access abuse, evidence destruction and unauthorized data collection contributed to the exposure of personal information belonging to 33.7 million people.

Advanced SOC Operations / CSOC

Cyber Resilience Summit Dallas Prioritizes Risk Management

Poulami Kundu • June 16, 2026

From boardroom persuasion to AI-powered SOCs, ISMG's Cyber Resilience Summit Dallas gave senior security and risk leaders a playbook for the age of inevitable disruption, with sessions spanning zero trust, human risk reduction, threat preemption and governance as a foundation of resilience.

Endpoint Security

US FCC Eases Router Ban for Cable ISPs

Greg Sirico • June 15, 2026

The U.S. Federal Communications Commission approved a cable industry lobbying group's request to grant large scale internet service providers with a waiver from Trump administrations' current ban on consumer grade foreign-made routers.

Artificial Intelligence & Machine Learning

Mythos Shutdown Contains a Message: Don't Wait for Mythos

Shaun Waterman • June 15, 2026

The abrupt, government-ordered cut-off of access to Mythos 5, the most cyber-capable of Anthropic's large language models, has underlined a message security experts have been trying to get out to the operational technology community: You don't need Mythos.

Agentic AI

The Next Enterprise AI Challenge Is Agent Sprawl

Jennifer Lawinski • June 15, 2026

AI is evolving from a productivity tool into a system of execution capable of making decisions and taking action. Hitachi Digital Services CTO Prem Balasubramanian explains why governance, reliability and agent management will determine enterprise AI success.