Latest

Card Not Present Fraud

Cops Cuff 18 Suspects Over $345M Credit Card Fraud Scheme

Mathew J. Schwartz  •  November 5, 2025

Police have arrested 18 suspects as part of a global crackdown targeting fraud and money laundering networks tied to the theft of $345 million by using 4.3 million cardholders' stolen data to sign them up to fake dating, pornography or streaming sites that billed monthly.

Artificial Intelligence & Machine Learning

Malware Developers Test AI for Adaptive Code Generation

Rashmi Ramesh  •  November 5, 2025

Malware authors are experimenting with a new breed of artificial intelligence-driven attacks, with code that could potentially rewrite itself as it runs. Large language models are allowing hackers to generate, modify and execute commands on demand, instead of relying on static payloads

Cyberwarfare / Nation-State Attacks

'It's Been a Mess': Shutdown Slows Federal F5 Hack Response

Chris Riotta  •  November 4, 2025

Current and former federal officials tell Information Security Media Group furloughs and leadership gaps across the federal cyber ecosystem have hindered the U.S. government's ability to coordinate response efforts after a nation-state actor exploited flaws in F5’s BIG-IP systems amid the shutdown.

Identity & Access Management

Cloud Identity Exposure Is 'a Critical Point of Failure'

Mathew J. Schwartz  •  November 4, 2025

Attackers keep hammering cloud-based identities to help them bypass endpoint and network defenses, logging in using inadvertently exposed credentials - or ones harvested through infostealers - then escalating access thanks to over-permissioned accounts, experts warn.

Cyberwarfare / Nation-State Attacks

Hypervisors, the Next Big Target for Hackers

Akshaya Asokan , David Perera  •  November 4, 2025

The virtualized layer of technology underpinning modern IT deployments is transforming from a strength to a cybersecurity vulnerability, warns Google in a report extrapolating current trends. A confluence of factors are converting virtualized environments into a "critical blind spot."

Agentic AI

AI and the Changing Nature of Work

Sudhir Tiku  •  November 4, 2025

The future of work is no longer speculative, it is already being coded. From automated writing assistants to robotic warehouse employees, artificial intelligence is entering every part of the modern workforce faster than regulations or social frameworks can adapt.

Artificial Intelligence & Machine Learning

Zscaler Purchases SPLX to Strengthen GenAI Model Protection

Michael Novinson  •  November 3, 2025

The SPLX acquisition gives Zscaler new tools for red-teaming, AI governance and pre-deployment risk analysis. The deal will strengthen Zscaler's push to provide comprehensive GenAI protection, from cloud model discovery to runtime guardrails and ongoing compliance reporting.

Cyberwarfare / Nation-State Attacks

BadCandy Implant Hits Cisco Devices Across Australia

Prajeet Nair  •  November 3, 2025

The Australian cyber defense agency warned that hackers are attacking unpatched Cisco IOS XE enterprise devices to leave behind a web shell the networking manufacturer calls "BadCandy." At least 150 Cisco devices in Australia carry the implant as of late October.

Cybercrime

Nation-State, Cyber and Hacktivist Threats Pummel Europe

Mathew J. Schwartz  •  November 3, 2025

Cyberattacks targeting European organizations continue to shape and be shaped by geopolitical events, whether they involve nation-state hackers, financially motivated cybercriminals or opportunistic hacktivists, says a new report from cybersecurity firm CrowdStrike.

Artificial Intelligence & Machine Learning

OpenAI Signs $38B Deal With Amazon for Compute

David Perera  •  November 3, 2025

Loss-making OpenAI added to a string deals with a $38 billion commitment on Monday to using compute resources provided by Amazon Web Services. The AI giant said AWS will build out server clusters using Nvidia flagship Blackwell chips for the next seven years.

3rd Party Risk Management

Chainguard Banks $280M for Global Open-Source Security Play

Michael Novinson  •  October 31, 2025

Backed by $280 million in growth financing from General Catalyst, Chainguard plans to scale global go-to-market efforts and invest in its open-source security platform. The non-dilutive funding structure allows for targeted investment based on customer acquisition.

Cyber Insurance

Searchlight Cyber Buys Intangic to Help Quantify Cyber Risk

Michael Novinson  •  October 31, 2025

The acquisition of Intangic enhances Searchlight Cyber's ability to quantify and price cyber risk by using AI and dark web intelligence. The combined platform will offer actionable third-party risk data for CISOs, CFOs and insurance providers to better understand and manage cyber exposure.