Latest

Quantum Threats Demand Crypto Agility and Root-Level Reform

Michael Novinson  •  July 4, 2025

Crypto agility, non-human identity sprawl and outdated root certificates are pushing enterprises to overhaul their infrastructure. DigiCert's Lakshmi Hanspal outlines how to prioritize resilience, visibility and automation.

Artificial Intelligence & Machine Learning

AI Accelerates Security Risks in Broken Data Environments

Michael Novinson  •  July 4, 2025

Artificial intelligence has become a rapid accelerator for existing security flaws. Dana Simberkoff, chief risk, privacy and information security officer at AvePoint, says that organizations must double down on data governance and cyber hygiene to avoid accelerating AI risks.

Application Security

Editors' Panel: Pro-Iran Hackers Threaten to Leak Trump Data

Anna Delaney  •  July 4, 2025

In this week's update, ISMG editors discussed Iran-linked hackers claiming to steal emails from Trump's inner circle, how to refine application development in the age of AI, and a U.S. Medicare data breach amplifying concerns over the safety, security and privacy of federal health systems.

Artificial Intelligence & Machine Learning

Faster Not Bigger: New R1T2 LLM Combines DeepSeek Versions

Rashmi Ramesh  •  July 4, 2025

Say hello to DeepSeek-TNG R1T2 Chimera, a large language model built by German firm TNG Consulting, using three different DeepSeek LLMs. The goal of R1T2 is to provide a faster LLM with more predictable performance that maintains full reasoning accuracy.

Artificial Intelligence & Machine Learning

AI Is Outpacing Security Controls Amid Talent Shortage

Michael Novinson  •  July 4, 2025

AI is moving faster than security teams can respond. Bob Huber, chief security officer at Tenable, said companies need governance frameworks and technical controls to manage AI use - especially as employees experiment with consumer tools such as ChatGPT and Gemini.

Network Firewalls, Network Access Control

Static Credentials Flaw Patched in Cisco Systems

Prajeet Nair  •  July 3, 2025

Cisco released urgent security updates to fix a critical vulnerability in Unified Communications Manager that could allow unauthenticated attackers gain root access to affected systems. The maximum-severity vulnerability allows unauthenticated remote attackers to log in using static credentials.

Cybercrime

Breach Roundup: Phony Chinese Sites Mimic Retail Brands

Anviksha More  •  July 3, 2025

This week, Chinese sites mimicked brands, Spain arrested data leak hackers, Swiss health nonprofit ransomware attack, ICC probed a cyberattack, UNFI restored systems, a flaw in smart tractors, RomCom RAT. A U.K. man sentenced for locking employer out of network. A WordPress hack installs a Trojan.

Fraud Management & Cybercrime

Medical Device Maker Surmodics Recovering From Attack

Marianne Kolbasuk McGee  •  July 3, 2025

A Minnesota maker of catheters notified federal regulators it is recovering from a cyberattack discovered in early June that rendered a portion of its IT systems and data inaccessible. Threat actors gained unauthorized access to some IT systems making certain systems and data unavailable.

Fraud Management & Cybercrime

Ransomware Group Hunters International Announces Exit

Akshaya Asokan  •  July 3, 2025

Hunters International said Thursday it closed shop, provoking skepticism among cybercrime experts who said it's more likely the Russian-speaking hackers behind the ransomware group will start up again under a new brand name. "Ransomware groups often rebrand themselves."

Blockchain & Cryptocurrency

Cryptohack Roundup: Inside the $100M Nobitex Breach

Rashmi Ramesh  •  July 3, 2025

This week, a peek into Iran's largest crypto exchange blending privacy, scale and sanctions evasion, Europol and Spanish police dismantled a crypto fraud network, $9.5M Resupply hack, sentencing in a $40M ponzi scheme and a North Korean crypto theft and employment fraud ring.

Data Governance

Sovereign by Design: Data Control in a Borderless World

Rahul Neel Mani  •  July 3, 2025

From Schrems II to TikTok fines, data sovereignty is redefining the rules of digital engagement. It is no longer an option for enterprises. CIOs must navigate a maze of data laws and tech strategies to stay compliant and competitive in a world without digital borders.

Healthcare

Why the HIPAA Security Rule Proposal Draws Expert Concerns

Marianne Kolbasuk McGee  •  July 3, 2025

While many of the proposed updates to the HIPAA security rule are reasonable expectations, others will be extremely onerous to implement if federal regulators finalize the rule's overhaul as it's written today, said Samantha Jacques of McLaren Health and Stephen Goudreault of security firm Gigamon.