Latest

Data Privacy

Feds Fine Surgery Practice $250K in Ransomware Breach

Marianne Kolbasuk McGee  •  July 24, 2025

A HIPAA breach investigation into a 2021 attack involving a variant of Pysa ransomware resulted in a $250,000 fine for an upstate New York specialty surgery practice, which also agreed to a corrective action plan that will be monitored by federal regulators for the next two years.

►

Agentic AI

Vectra CEO: SOCs Need AI Agents to Keep Up With Attacks

Michael Novinson  •  July 24, 2025

President and CEO Hitesh Sheth details how Vectra AI uses triage, stitching and prioritization agents to enhance SOC performance and curb alert fatigue. The network detection and response vendor is expanding AI Analyst via AWS Bedrock and integrations with Zscaler and CrowdStrike.

Cybercrime

Breach Roundup: Suspected XSS Cybercrime Forum Admin Arrested

Anviksha More  •  July 24, 2025

This week, XSS forum admin arrested, Clorox sued Cognizant, Lumma Stealer is back, NY regulates water, U.S. maritime cybersecurity rules in effect, new Coyote banking Trojan, a hacker nabbed details of Mexico City auxiliary police, Latin America cyberattacks, and World Leaks stole synthetic data.

►

3rd Party Risk Management

BlueVoyant Tightens Third-Party Defenses With SBOM Upgrade

Michael Novinson  •  July 24, 2025

BlueVoyant unveiled a new SBOM tool to detect software embedded in third-party products, expanding its supply chain defense. Co-founder and CEO Jim Rosenthal said proactive remediation and deeper insight into data flows are key to combatting AI-powered attacks.

Blockchain & Cryptocurrency

Cryptohack Roundup: Krygyzstan a Crypto Conduit for Russia

Rashmi Ramesh  •  July 24, 2025

This week, Russia crypto laundering in Krygyzstan, CoinDCX lost $44M in a hack, the U.S. sought $7.1M in crypto linked to oil tank investment scam, Ex-NCA officer was jailed for stealing seized bitcoin, crypto thefts hit $2.17B in the first half of 2025 and Trump Media revealed $2B bitcoin holdings.

Cloud Security

Quantum Data Centers Await Use Cases and Tech Maturity

Brian Pereira  •  July 24, 2025

Quantum data centers could become viable if business use cases emerge, says Lawrence Gasman, founder, Communications Industry Researchers. Technical hurdles, such as physical form factor, environment, cost and photonic interconnects, must be addressed for enterprise adoption.

Critical Infrastructure Security

Critical Infrastructure Leaders: Threat Level Remains High

Matthew Perry  •  July 24, 2025

OT environments have long been bereft of their traditional shelter from cyberattacks made from hacker ignorance or disinterest. Industrial environments are forefronts for nation-state hacking, the risk heightened by global tensions and the convergence of operational technology with IT counterparts.

Agentic AI

Vanta Secures $150M at $4.15B Valuation to Advance AI Trust

Michael Novinson  •  July 23, 2025

With $150 million in new Series D funding at a $4.15 billion valuation, Vanta plans to accelerate its AI-powered trust platform across new markets including government compliance. The company’s tools automate evidence collection, risk management and policy enforcement in real time.

Agentic AI

Can ChatGPT Agent Actually Deliver on Its Promises?

Rashmi Ramesh  •  July 23, 2025

OpenAI's new ChatGPT Agent can code, browse and send email. The agent excels at tightly scoped, well-structured workflows, such as finding names, drafting content or automating click-heavy tasks, but struggles with ambiguity, creativity or judgment-heavy assignments.

Fraud Management & Cybercrime

Feds Warn Health, Other Sectors of Interlock Threats

Marianne Kolbasuk McGee  •  July 23, 2025

U.S. authorities are warning of threats posed by double-extortion gang Interlock, which has been hitting an assortment of businesses across many industries, including healthcare and other critical infrastructure sectors, with a ransomware variant first seen in September 2024.

Critical Infrastructure Security

Honeywell Smart Building Middleware Vulnerable

Prajeet Nair  •  July 23, 2025

Vulnerabilities in Honeywell smart building middleware could allow hackers to manipulate physical systems or disable security alarms, warn security researchers. Hackers would already need access to the network. An attack would also depend on the Tridium Niagara customer not encrypting Syslog data.

Identity & Access Management

New Entrust CEO Tony Ball Aims for Identity Life Cycle Shift

Michael Novinson  •  July 23, 2025

Tony Ball, the incoming CEO of Entrust, plans to shift the company's digital identity strategy beyond onboarding to support full life cycle use cases. He also plans to expand Entrust's post-quantum efforts and streamline customer delivery under one platform.