Latest

Cyberwarfare / Nation-State Attacks

France and Germany Grappling With Nation-State Hacks

Akshaya Asokan  •  December 12, 2025

The French Ministry of Interior is investigating a suspected nation-state cyberattack that targeted its email server. Additionally, the German government on Friday attributed a 2024 hacking incident on air traffic control systems to Russian nation-state hackers.

Data Breach Notification

Fieldtex, TriZetto Reveal New Healthcare Breaches

Marianne Kolbasuk McGee  •  December 12, 2025

New York-based medical supply fulfillment company Fieldtex is notifying its clients and more than 274,000 people about an August hack. Meanwhile, revenue cycle software firm TriZetto is also contacting its customer and patients about its own hacking incident.

US Military Cyber Budget Jumps to $15B in 2026 NDAA

Chris Riotta  •  December 12, 2025

Congress advanced a $15.1 billion military cyber budget in the fiscal year 2026 National Defense Authorization Act, boosting core operations, workforce recruitment and tech modernization as civilian cyber teams face sharp staffing losses and budget constraints.

Governance & Risk Management

Monitoring the Electric Grid Is Easier Said Than Done

Shaun Waterman  •  December 12, 2025

A new reliability standard for U.S. and Canadian electric grid tells major power companies to monitor and log traffic on their operational technology and industrial control systems networks. The rules will be a heavy lift for the electricity sector.

Black Hat

How the Hacking World Has Changed: 'All Tech is Political'

Mathew J. Schwartz  •  December 12, 2025

Technology doesn't exist in a vacuum, and by extension neither does cybersecurity. But in recent years, Black Hat founder Jeff Moss said he's been "struggling" with the "uncomfortable truth" that unlike the largely risk-free early days of hacking, today "all tech is political."

Agentic AI

Saviynt Gets $700M at $3B Valuation to Fuel Identity Defense

Michael Novinson  •  December 11, 2025

Backed by $700 million in funding from KKR at a $3 billion valuation, Saviynt plans to accelerate innovation in identity security for humans, machines and AI agents. The Series B investment supports global expansion and continued platform development to meet evolving enterprise needs.

Artificial Intelligence & Machine Learning

OpenAI Braces for AI Models That Could Breach Defenses

Rashmi Ramesh  •  December 11, 2025

OpenAI said Wednesday it is preparing for artificial intelligence models to reach "high" cybersecurity risk levels, marking an escalation in the dual-use capabilities that could strengthen defenses or enable sophisticated attacks.

Breach Roundup: DPRK-Linked EtherRAT Targets React2Shell

Pooja Tikekar  •  December 11, 2025

This week, likely North Korean hackers exploited React2Shell. The Dutch government defended its seizure of Nexperia. Prompt injection may be here to stay. Hikvision pushed back against a new U.S. crackdown. Qilin claimed it hacked Scientology, Microsoft Patch Tuesday and MuddyWater activity.

Fraud Management & Cybercrime

Georgia Hospital Settles Lawsuit in Alleged Embargo Hack

Marianne Kolbasuk McGee  •  December 11, 2025

A small, rural county-owned Georgia community hospital has agreed to settle consolidated class action litigation involving a 2024 hacking incident in which ransomware gang Embargo claimed to have stolen 1.15 terabytes of the organization's data and leaked it on the darkweb.

►

Finance & Banking

Russian Ring Using Ex-Immigrant Data to Fuel Fake ID Sales

Suparna Goswami  •  December 11, 2025

A Russian darknet marketplace is exploiting a major blind spot for U.S. financial institutions by trafficking in the identities of former legal immigrants. Telegram-based group Karma Fullz has built a profitable criminal enterprise with highly convincing synthetic identities.

Blockchain & Cryptocurrency

Cryptohack Roundup: Android Chips Hot Wallet Attack

Rashmi Ramesh  •  December 11, 2025

This week, Ledger flagged physical attack risks to Android hot wallets, a 700M euro fraud network was dismantled, a suspect in the $243M Genesis theft was reportedly detained and a member of a $263M crypto scam pleaded guilty. Two men arrested in a Vienna crypto-linked killing.

Cybercrime

Zero Day: 700 Instances of Self-Hosted Git Service Exploited

Mathew J. Schwartz  •  December 11, 2025

An attacker has been exploiting a zero-day vulnerability in Gogs, an open-source and popular Git service that allows for self-hosting, warned researchers. At least 700 internet-exposed servers running Gogs shows signs of being infected with command-and-control malware; no patch is yet available.