Latest

Mercor Breach Linked to LiteLLM Supply-Chain Attack

Michael Novinson  •  April 3, 2026

A LiteLLM supply-chain compromise enabled attackers to harvest credentials and access internal environments at scale at Mercor. The firm was the first to confirm a LiteLLM breach, and researchers are warning about growing AI system exposure and limited visibility.

Account Takeover Fraud

One-Time Passcodes Are Gateway for Financial Fraud Attacks

Suparna Goswami  •  April 3, 2026

Financial institutions have historically relied on one-time passcodes as a primary authentication control for their accountholders. But OTP verification is less reliable as fraudsters increasingly exploit SMS-based verification weaknesses to carry out account takeover and payment fraud schemes.

Stryker Tells Customers Manufacturing Systems Restored

Marianne Kolbasuk McGee  •  April 3, 2026

Medical tech maker Stryker said it has restored its systems and is operational across its global manufacturing network three weeks after a wiper attack by Iranian hacktivist group Handala led to a worldwide outage at the company. The firm is continuing to investigate the incident.

►

3rd Party Risk Management

ISMG Editors: Vendor Breaches Expose Healthcare Risk

Anna Delaney  •  April 3, 2026

In this week's panel, four ISMG editors discussed growing cyber risks in healthcare following recent vendor breaches, key takeaways from RSAC Conference and whether the Pentagon's zero trust push is delivering real security benefits or just checking off boxes.

3rd Party Risk Management

AI's Achilles Heel is an Oil Shipping Strait

Rashmi Ramesh  •  April 3, 2026

The Strait of Hormuz crisis is amplifying a supply crunch in the specialist memory chips that power AI, and analysts say the industry's concentration in South Korea makes the timing particularly uncomfortable.

Agentic AI

The Theranos Playbook Is Quietly Returning in Cybersecurity

Maryam Shoraka  •  April 3, 2026

The fall of health tech company Theranos exposed how hype can outpace reality. In cybersecurity, similar pressures are emerging as vendors compete with bold claims and buyers struggle to verify outcomes. The result: a market where narrative can overshadow measurable operational value.

Cybercrime

ShinyHunters Claims Rebooted BreachForums Now More Secure

Mathew J. Schwartz  •  April 3, 2026

Drama continues to come fast and furious in BreachForums land, as the ShinyHunters group announced that it's rebooted the long-running and oft-disrupted forum yet again, just weeks after it got hacked and its databases dumped, leading the previous admin to allegedly exit scam and steal $4,000.

Cryptocurrency Fraud

Cryptohack Roundup: Charges in Uranium Finance Case

Rashmi Ramesh  •  April 2, 2026

This week, charges filed in Uranium Finance hack, indictment of Chinese firms in fentanyl supply case, a class action lawsuit against Nvidia, Drift Protocol exploit, KuCoin operational barriers in the United States and a U.K. sanction filed against Xinbi.

Cybercrime

Breach Roundup: Feds Confirm 'Major' Hack of FBI System

Pooja Tikekar  •  April 2, 2026

This week, Lloyds data leak hits 450K, Dutch treasury breach, Citrix flaw exploited, Iran-linked ransomware ops, TrueConf zero-day, Russian fraud ring sentenced, Romania targeted, patch gaps persist, and U.S. hospital breach affects 257K.

Artificial Intelligence & Machine Learning

Startup Linx Secures $50M as Identity Threats Intensify

Michael Novinson  •  April 2, 2026

Linx Security secured $50 million to expand its artificial intelligence-driven identity platform as enterprises struggle with identity-based attacks. CEO Israel Duanis highlights real-time visibility automation and risk reduction as key to addressing growing threats from AI agents.

Data Privacy

State AG Sues Change Healthcare in 2024 Ransomware Attack

Marianne Kolbasuk McGee  •  April 2, 2026

Iowa's state attorney general is seeking financial damages, civil penalties and improvements to UnitedHealth Group's data security practices for alleged violations of state and federal laws and other claims involving the 2024 ransomware attack on its Change Healthcare unit.

Anti-Money Laundering (AML)

Reengineering AML in the Era of Instant Payments

Suparna Goswami  •  April 2, 2026

When the Federal Reserve lifted FedNow's transaction limit from $1 million to $10 million last November, the regulatory change transformed instant payments from a retail convenience to a corporate treasury rail. AML decisions on high-value instant wire transfers must now be made in real time.