New York Unveils 'Nation-Leading' Water Sector Cyber Rules

Chris Riotta • July 25, 2025

New York State has unveiled a comprehensive set of water and wastewater cybersecurity regulations aimed at bolstering defenses for the vulnerable critical infrastructure sector, in addition to a new competitive investment program to help modernize under-resourced entities.

Critical Infrastructure Security

Cyberattacks Surging Across Indo-Pacific, Researchers Warn

Latest

Data Privacy

Patients Still Struggle With Full Access to Health Info

Marianne Kolbasuk McGee • July 25, 2025

Patients these days have an easier path to securely accessing their electronic health information, thanks in large part to advancements in certain technology standards and a big push by federal regulatory policies in recent years. But obstacles still remain.

Artificial Intelligence & Machine Learning

How Torq Is Rewiring SOCs With Autonomous Cyber Agents

Michael Novinson • July 25, 2025

With its Revrod acquisition, Torq is pushing deeper into autonomous threat response. CEO Ofer Smadari outlines how AI-runbooks and autopilot tech such as Socrates are reducing human workloads and helping security teams scale amid rising alert volumes and phishing attacks.

Data Privacy

Do Website Cookies Pose Legal, Security Risks to Your Firm?

Anna Delaney • July 25, 2025

CISOs can't treat the compliance of website cookies as a checkbox exercise. As regulators and class action firms target consent banners and unauthorized trackers, design flaws and hidden scripts are driving legal, security and cross-border compliance risks, said attorney Jonathan Armstrong.

Business Continuity Management / Disaster Recovery

Swiss-Based Healthcare Network AMEOS Responding to Attack

Marianne Kolbasuk McGee • July 25, 2025

Swiss-based AMEOS Group, which operates more than 100 hospitals, clinics and rehabilitation centers across Europe, is dealing with a cyberattack that has forced the organization to take its IT network offline and warn patients and employees of a potential data breach.

Fraud Management & Cybercrime

Scattered Spider Exploiting VMware vSphere

Akshaya Asokan • July 25, 2025

The loosely connected band of adolescent cybercriminals tracked as Scattered Spider has joined the VMware hypervisor hacking bandwagon, pivoting into virtual servers through corporate instances of Active Directory. vSphere integration with Active Directory adds a yet another layer of insecurity.

Artificial Intelligence & Machine Learning

ISMG Editors: China-Linked SharePoint Exploits Raise Alarm

Anna Delaney • July 25, 2025

In this week's update, four ISMG editors discussed the latest SharePoint exploits linked to China, why the security of operational technology is still lagging 15 years after Stuxnet and a look at the widening divide in the ways enterprises are approaching AI adoption.

Agentic AI

Chrome's AI Challenger Has Landed: Meet Comet

Yamini Kalra • July 25, 2025

Perplexity, the fast-rising AI search engine startup backed by the likes of Nvidia and Jeff Bezos, is riding on a cosmic high with the launch of Comet - a full-featured AI-native web browser that claims to "browse at the speed of thought."

Data Privacy

Feds Fine Surgery Practice $250K in Ransomware Breach

Marianne Kolbasuk McGee • July 24, 2025

A HIPAA breach investigation into a 2021 attack involving a variant of Pysa ransomware resulted in a $250,000 fine for an upstate New York specialty surgery practice, which also agreed to a corrective action plan that will be monitored by federal regulators for the next two years.

Agentic AI

Vectra CEO: SOCs Need AI Agents to Keep Up With Attacks

Michael Novinson • July 24, 2025

President and CEO Hitesh Sheth details how Vectra AI uses triage, stitching and prioritization agents to enhance SOC performance and curb alert fatigue. The network detection and response vendor is expanding AI Analyst via AWS Bedrock and integrations with Zscaler and CrowdStrike.

Cybercrime

Breach Roundup: Suspected XSS Cybercrime Forum Admin Arrested

Anviksha More • July 24, 2025

This week, XSS forum admin arrested, Clorox sued Cognizant, Lumma Stealer is back, NY regulates water, U.S. maritime cybersecurity rules in effect, new Coyote banking Trojan, a hacker nabbed details of Mexico City auxiliary police, Latin America cyberattacks, and World Leaks stole synthetic data.

3rd Party Risk Management

BlueVoyant Tightens Third-Party Defenses With SBOM Upgrade

Michael Novinson • July 24, 2025

BlueVoyant unveiled a new SBOM tool to detect software embedded in third-party products, expanding its supply chain defense. Co-Founder and CEO Jim Rosenthal said proactive remediation and deeper insight into data flows are key to combatting AI-powered attacks.

Blockchain & Cryptocurrency

Cryptohack Roundup: Kyrgyzstan a Crypto Conduit for Russia

Rashmi Ramesh • July 24, 2025

This week, Russia crypto laundering in Kyrgyzstan, CoinDCX lost $44M in a hack, the U.S. sought $7.1M in crypto linked to oil tank investment scam, Ex-NCA officer was jailed for stealing seized bitcoin, crypto thefts hit $2.17B in the first half of 2025 and Trump Media revealed $2B bitcoin holdings.