Latest

Cyberwarfare / Nation-State Attacks

Chinese Data Leak Reveals Salt Typhoon Contractors

Akshaya Asokan  •  July 8, 2025

The Chinese nation-state threat actor tracked as Salt Typhoon is operated by a clutch of private firms whose clients include multiple Chinese government agencies, finds analysis of leaked data by Spy Cloud. Researchers found a spreadsheet listing buyers, sellers and financial transaction details.

Artificial Intelligence & Machine Learning

Hg Purchases A-Lign to Accelerate Cyber Compliance Growth

Michael Novinson  •  July 8, 2025

Cybersecurity compliance firm A-LIGN has received a majority investment from Hg, a top tech-focused private equity firm. The deal supports A-LIGN's global ambitions to deliver SOC 2 and other compliance audits and leverages Hg’s expertise in scaling data and AI-driven services.

Cyberwarfare / Nation-State Attacks

Italian Police Arrest Alleged Chinese Hacker Wanted by FBI

David Perera , Mathew J. Schwartz  •  July 8, 2025

Italian police arrested Chinese national Xu Zewei, 33, based on a U.S. arrest warrant charging the Shanghai resident with participating in "Silk Typhoon" cyberespionage attacks, including targeting novel coronavirus vaccine development information from the University of Texas.

Cyberwarfare / Nation-State Attacks

Looking Tough: Russia Trumpets Pro-Ukraine Hacker Arrests

Mathew J. Schwartz  •  July 8, 2025

Russian authorities regularly trumpet the arrest and sentencing of citizens who offer hacking support to Ukrainian forces. Experts say the extent to which official crime reports can be trusted remains unclear, especially as officials need to look tough on the "Ukrainian threat."

Artificial Intelligence & Machine Learning

Enterprises Are Prioritizing Generative AI Spending in 2025

Brian Pereira  •  July 8, 2025

Generative AI is now a top budget priority over security for many enterprises, but AI talent gap continues to hinder progress on AI projects. A recent AWS report recommends redefining AI leadership roles and strengthening third-party partnerships to unlock gen AI's full potential.

Governance & Risk Management

Attackers Actively Exploit 'Citrix Bleed 2' Vulnerability

Mathew J. Schwartz  •  July 7, 2025

Administrators of Citrix Netscaler devices are being urged to immediately patch their devices to fix two actively exploited vulnerabilities. One, dubbed Citrix Bleed 2, can be abused by hackers to bypass multifactor authentication, hijack user sessions and gain unauthorized access to the equipment.

Fraud Management & Cybercrime

Ransomware Attack Halts Ingram Micro Operations

Prajeet Nair  •  July 7, 2025

Global tech distributor and service provider Ingram Micro confirmed days after a widespread IT outage that a ransomware attack disrupted internal systems. The firm disclosed the incident following reports that extortion demands associated with SafePay ransomware appeared on employee devices.

Artificial Intelligence & Machine Learning

Will AI Gut the Cybersecurity Talent Pipeline?

Rashmi Ramesh  •  July 7, 2025

Time travel can seem like an unofficial requirement for cybersecurity job seekers, with would-be employers demanding mid-tier chops for entry-level positions. Come back in a few years, they say, after you've gained experience. But organizations can't assume the pipeline will fix itself.

Government

Why SEC, SolarWinds Agreed to Settle Cyberfraud Lawsuit

Michael Novinson  •  July 7, 2025

The SEC and SolarWinds told a federal judge they’ve reached a tentative agreement to resolve a first-of-its-kind fraud case over cybersecurity disclosures. Federal regulators alleged that SolarWinds misled investors about its cybersecurity, and the settlement hinges on SEC commissioner approval.

Cryptocurrency Fraud

Cybersecurity Operations and AI Carry Hidden Climate Costs

Maryam Shoraka  •  July 7, 2025

As security monitoring, crypto mining protection and data centers fuel cybersecurity's energy demands, new regulations, such as Australia's National Greenhouse and Energy Reporting Act 2007, signal a global shift toward holding the industry accountable for its environmental impact.

Quantum Threats Demand Crypto Agility and Root-Level Reform

Michael Novinson  •  July 4, 2025

Crypto agility, non-human identity sprawl and outdated root certificates are pushing enterprises to overhaul their infrastructure. DigiCert's Lakshmi Hanspal outlines how to prioritize resilience, visibility and automation.

Artificial Intelligence & Machine Learning

AI Accelerates Security Risks in Broken Data Environments

Michael Novinson  •  July 4, 2025

Artificial intelligence has become a rapid accelerator for existing security flaws. Dana Simberkoff, chief risk, privacy and information security officer at AvePoint, says that organizations must double down on data governance and cyber hygiene to avoid accelerating AI risks.