Latest

Healthcare

Trizetto Notifying 3.4M of 2024 Hack Detected in 2025

Marianne Kolbasuk McGee  •  March 5, 2026

Billing services vendor Trizetto Provider Solutions is notifying 3.4 million individuals of a hacking incident discovered in October 2025 that investigators have now determined started nearly a year earlier, when threat actors accessed the company's healthcare clients' insurance related data.

Artificial Intelligence & Machine Learning

New OneTrust CEO on Why AI Governance Market Is Set to Surge

Michael Novinson  •  March 5, 2026

New OneTrust CEO John Heyman said enterprises rapidly deploying generative AI will soon manage hundreds or thousands of AI agents across their organizations. They must monitor AI agents' data flows and third-party technologies as privacy risk and security oversight increasingly converge.

Cybercrime

Breach Roundup: Patches and Hacks on Cisco Equipment

Pooja Tikekar  •  March 5, 2026

This week, Cisco patches and hacks. Trojanized app targeted Israelis. Bye-bye, Tycoon 2FA. Also bye-bye LeakBase. A LexisNexis breach. Woman sentenced for trafficking Microsoft licenses. Silver Dragon targeted governments. Broadcom patch. A Mississippi medical clinic resumed operations.

Blockchain & Cryptocurrency

Cryptohack Roundup: Ariomex Leak Flags Iran Sanction Risks

Rashmi Ramesh  •  March 5, 2026

Iran exchange leak raises sanctions risks, $580M frozen in scam crackdown, $61M romance scam funds seized, feds seek $327K in dating scam case, Russia exploit broker sanctioned, South Korean wallet recovery phrase exposure and arrest in custody bitcoin theft, Axiom data misuse and Uniswap lawsuit ends.

►

Agentic AI

Selling Cyber: PAM Market Shifts as AI Drives New Demands

Michael Novinson  •  March 5, 2026

The PAM market has been upended, with high-profile M&As including Palo Alto Networks' purchase of CyberArk. What do these moves mean for buyers of PAM tools - and vendors in this space? In this episode of "Selling Cyber," the panel breaks down market drivers and the shifting competitive landscape.

Artificial Intelligence & Machine Learning

Nation-State Hackers Play the Vibes

Mathew J. Schwartz  •  March 5, 2026

All the nation-state hackers are vibe coding. Vibeware won't win any coding awards. It's not pretty. It doesn't target any zero-day vulnerabilities or known flaws in innovative new ways - but it does allow polyglot malware to be generated at scale.

Security Operations

Fig Security Raises $30M to Modernize SOC Infrastructure

Michael Novinson  •  March 4, 2026

Fig Security has raised $30 million in Series A funding to help organizations modernize their SOC infrastructure. The startup said CISOs lack visibility into complex SecOps pipelines spanning SIEMs, data lakes and automation tools, which can lead to silent failures that undermine threat detection.

Healthcare

Cancer Center Research Study Hack Affects 1.2M

Marianne Kolbasuk McGee  •  March 4, 2026

An August 2025 ransomware attack on the University of Hawaii Cancer Center's epidemiology division has affected 1.2 million individuals, including personal information such as Social Security numbers of certain research study participants dating back more than 30 years.

►

Governance & Risk Management

Canadian Manufacturers Confront Rising OT Cyber Risk

Joshua Cunningham-Marsh  •  March 4, 2026

Canadian manufacturers face rising cyber risk as IT and OT systems converge. Leaders from Subaru Canada and the Toronto Transit Commission outline how ransomware, supply chain exposure and legacy OT vulnerabilities demand stronger resilience, segmentation and incident response readiness.

Critical Infrastructure Security

An OT Incident Scoring System Inspired by Natural Disasters

Shaun Waterman  •  March 4, 2026

Hurricanes, tornados, earthquakes - and now operational technology cyber incidents - all can receive a numerical score based on their severity, although a new effort promoting an "OT Incident Impact Score" faces an uphill climb to get the traction it needs to succeed.

Network Firewalls, Network Access Control

Juniper PTX Routers at Risk, Critical Takeover Flaw Disclosed

Greg Sirico  •  March 3, 2026

A critical vulnerability in Juniper Networks' primary operating system could give threat actors root level privileges to execute code on Juniper’s PTX Series routers. Successful exploitation would give attackers full command and control over devices without the need for authentication.

Healthcare

Groups Push Back on HHS' Proposed Health IT Rollbacks

Marianne Kolbasuk McGee  •  March 3, 2026

Proposals to eliminate certain longstanding health IT certification criteria - including privacy and security related controls - will shift regulatory burden from health IT developers to healthcare providers, some industry groups contend in their public response to proposed federal rulemaking.