Money Mule Networks Surge 168% Fueling Digital Banking Fraud

Suparna Goswami • September 10, 2025

Organized crime groups have industrialized digital banking fraud operations in the United States, with money mule networks surging 168% in the first half of 2025. Money mules are being recruited at unprecedented scale, and they're using stablecoins to transfer funds to crypto exchanges.

Agentic AI

Navy Federal Credit Union Backup Exposed Online

Latest

Blockchain & Cryptocurrency

Cryptohack Roundup: SwissBorg's $41M Exploit

Rashmi Ramesh • September 11, 2025

SwissBorg $41M hack, hidden malicious npm code, sanctions on Southeast Asian networks, California launderer's sentencing, Kinto's shuttering, Venus Protocol pays back victim, Nemo Protocol hack, DOJ's $5M recovery effort, Lagarde's proposed rules and the SEC-CFTC plan for market clarity.

Application Security

AI Security Risks Mirror Past Application Flaws

Aseem Jakhar • September 11, 2025

Large language models pose systemic risks, and the rush to release AI products revives old security flaws. Prompt injections and familiar application vulnerabilities expose gaps created when speed outweighs safety, said Joern Schneeweisz, principal security engineer at GitLab.

Government

Pentagon Releases Long-Awaited Contractor Cybersecurity Rule

Chris Riotta • September 10, 2025

The Department of War has published the final version of its Cybersecurity Maturity Model Certification Rule - dubbed CMMC 2.0 - following years of collaboration with defense vendors on a tiered-approach to developing standardized cybersecurity requirements across the Defense Industrial Base.

Artificial Intelligence & Machine Learning

Koi Raises $48M to Safeguard AI Models, Code and Extensions

Michael Novinson • September 10, 2025

With $48 million in funding, Koi is scaling up efforts to help enterprises secure browser extensions, AI models and package code often missed by legacy tools. CEO Amit Assaraf says Koi is the only firm offering centralized governance for this fast-growing risk category.

Fraud Management & Cybercrime

'The Gentlemen' Ransomware Targets Asia Pacific

Akshaya Asokan • September 10, 2025

A newly identified ransomware group is targeting victims across the Asia Pacific region using custom-built evasion capabilities that could pose a "significant threat" to organizations, warn researchers at security firm Trend Micro. The Gentlemen deploys customized methods tailored to each target.

Cybercrime

Jaguar Land Rover Hackers Stole Data

Akshaya Asokan • September 10, 2025

British carmaker Jaguar Land Rover on Wednesday said hackers stole "some data" in the cyberattack detected earlier this month. The Tata Motors-owned luxury carmaker shut down assembly lines in the United Kingdom, Slovakia, Brazil and India after a Sept. 1 cyberattack.

Application Security

AI Accelerates Code Development But Fuels New Security Risks

Anna Delaney • September 10, 2025

AI is reshaping how software is created, allowing more people to participate in the process through "vibe coding." But as development accelerates, security challenges multiply as code is often deployed without thorough review, said Joe Sullivan, former CSO at Cloudflare, Facebook and Uber.

CISO Trainings

Post-Breach Essentials for Small Businesses

Tom Field • September 10, 2025

Many small and midsize businesses lack cybersecurity teams, leaving them vulnerable to cyberattacks. Sean D. Mack, managing director of ISMG's CXO Advisory Practice, outlines key steps to contain attacks, avoid common mistakes and turn an incident into an opportunity for long-term resilience.

Professional Certifications & Continuous Training

Going Deeper in Cyber Skills: Can You Spot the Not?

Brandy Harris • September 10, 2025

In their careers, cyber professionals are expected to move beyond clicking through alerts and develop more depth in the field. The "easy button" may feel efficient, but it could be your downfall if you don't push yourself to truly learn the in's and out's of cyber defense.

Endpoint Detection & Response (EDR)

Here's What Blocks In-Progress Ransomware Attacks the Best

Mathew J. Schwartz • September 9, 2025

Rapidly acting on security alerts and activating third-party incident response help are the top two ways organizations have successfully arrested an in-progress ransomware attack before it gets to the encryption, according to a review of more than two years' worth of incident response engagements.

Fraud Management & Cybercrime

US Feds Indict LockerGoga and MegaCortex Ransomware Hacker

David Perera • September 9, 2025

A hacker who federal prosecutors say was behind the LockerGoga and MegaCortex ransomware strains faces a seven count criminal indictment in U.S. federal court, prosecutors said Tuesday. Ukrainian national Volodymyr Tymoshchuk, 28, was administrator of the two ransomware operations, prosecutors say.

3rd Party Risk Management

Hackers Compromise 18 NPM Packages in Supply Chain Attack

Akshaya Asokan , David Perera • September 9, 2025

A hacker laced 18 popular npm packages with cryptocurrency stealing malware after socially engineering the developer into giving up his credentials to the JavaScript runtime environment. Aikido Security said the 18 software packages collectively have downloads of more than two billion each week.