Latest

Artificial Intelligence & Machine Learning

Outtake Gets $40M to Grow Automated Threat Response

Michael Novinson  •  January 29, 2026

Outtake will invest $40 million to grow its automated platform for digital risk protection and open-source threat intelligence. CEO Alex Dhillon says the New York-based startup's agent-led model stands apart by replacing manual labor with scalable AI workflows.

Cybercrime

Breach Roundup: Android RAT Hides Behind Hugging Face

Pooja Tikekar  •  January 29, 2026

This week, researchers exposed an Android RAT abusing Hugging Face. Attackers exploited a SmarterMail flaw. Automakers raised cyber spending. CISA flagged a VMware bug. Microsoft patched Office. An Empire Market co-creator pleaded guilty. Nike probed a breach.

Anti-Money Laundering (AML)

AI, Deepfakes Are Top Risks for Financial Crime Specialists

Jennifer Lawinski  •  January 29, 2026

The financial system has a trust problem driven by artificial intelligence, and CIOs looking to prevent fraud and other financial crimes will only face more challenges as criminals find new ways to use AI to swindle, according to an Association of Certified Anti-Money Laundering Specialists survey.

HIPAA/HITECH

Ambulance Billing Firm Pays $515K Fine to 2 States in Hack

Marianne Kolbasuk McGee  •  January 29, 2026

An ambulance billing and collections firm has agreed to pay $515,000 to Massachusetts and Connecticut regulators and implement a prescriptive information security program in the aftermath of a 2022 hacking incident affecting the sensitive information of nearly 350,000 residents in those states.

Blockchain & Cryptocurrency

Cryptohack Roundup: Probe Into Missing Seized Bitcoin

Rashmi Ramesh  •  January 29, 2026

This week, South Korean prosecutors probed missing seized bitcoin. CZ said a Trump pardon eased his conviction burden. A former Olympian arrested in a crypto-linked drug case. The U.S. SEC dropped litigation against Gemini Earn. Major hacks and a $37 million laundering prison sentence.

►

Next-Generation Technologies & Secure Development

Inside Arizona's Push to Modernize and Secure Campus IT

Jennifer Lawinski  •  January 28, 2026

The University of Arizona is advancing a campus-wide modernization and security agenda by centralizing a previously fragmented IT environment and unifying core platforms that support teaching, research and operations, said Elliott Cheu, CIO at the university.

Data Breach Notification

'AI-Powered' Services Firm Says Hack Affects 3.1M

Marianne Kolbasuk McGee  •  January 28, 2026

The victim count in a 2025 hack against a Maryland-based firm that provides "AI-powered" administrative and technology services to healthcare practices soared to nearly 3.1 million nationwide, according to an updated breach report from Healthcare Interactive.

Endpoint Security

Idis Surveillance Management Software Vulnerable to Hacking

Greg Sirico  •  January 28, 2026

Video camera surveillance management software made by South Korean manufacturer Idis is susceptible to a one-click attack giving hackers the power to execute arbitrary code. The vulnerability allows an attacker to escalate beyond the browser sandbox and achieve code execution on the host.

Fraud Management & Cybercrime

Social Engineering Hackers Target Okta Single Sign On

Mathew J. Schwartz  •  January 28, 2026

Security experts warn that "an active and ongoing campaign" being waged by ShinyHunters extortionists has at least 150 organizations in its sights across a range of sectors, with attackers using live voice phishing to bypass multifactor authentication, steal cloud data and hold it to ransom.

Identity & Access Management

Fortinet Locks Down FortiCloud SSO Amid Zero-Day Attacks

Mathew J. Schwartz  •  January 28, 2026

Network security giant Fortinet locked out cloud customers from its single sign-on service until they update device firmware with a patch against active attacks exploiting an improper access control zero day. Only Fortinet devices running the latest, patched firmware versions can use Fortinet SSO.

HIPAA/HITECH

Aligning Substance Use Privacy Regs With HIPAA Isn’t Simple

Marianne Kolbasuk McGee  •  January 28, 2026

Revisions to 42 CFR Part 2 that go into effect soon to better align federal regulations for the confidentiality of substance use disorder records with HIPAA require entities to adjust their compliance programs. But the changes aren't easy, said attorney David Holtzman, founder of HITprivacy LLC.

AI-Based Attacks

Memcyco Gets $37M to Fight AI-Powered Impersonation Attacks

Michael Novinson  •  January 27, 2026

With brand impersonation and account takeover attacks surging, Memcyco raised $37 million in Series A funding to scale its preemptive scam detection platform. The firm plans to grow its sales team, develop AI-based features and support new product launches in the coming year.