Sublime Secures $150M to Advance Agentic Email Protection

Michael Novinson • October 30, 2025

Sublime Security closed a $150 million Series C round to expand its AI-driven agent platform. The Washington D.C.-based company aims to reduce cyber risk and manual workloads for defenders by adapting quickly to novel attacks, especially those using GenAI.

Card Not Present Fraud

Kremlin Shaping Cybercrime Into Deniable Geopolitical Tool

Latest

Cybercrime

ClickFix Infrastructure Surprises Inform Better Blocking

Mathew J. Schwartz • October 30, 2025

Tracking how cybercriminals and their service providers use malicious infrastructure can give defenders an edge for blocking their targeting. New research spotted a massive crossover between IP addresses used for both ClickFix and adversary-in-the-middle attacks.

Cybercrime

Breach Roundup: Hackers Probe Canada's Critical Infrastructure

Anviksha More • October 30, 2025

This week, critical infrastructure breaches in Canada, a Swedish grid operator breached, an Australian guilty of selling cyber exploits, Gmail wasn't breached, F5 projected a revenue dip, PhantomRaven targeted developers, a Pakistan-linked actor targeted India and Dentsu confirmed a data breach.

Governance & Risk Management

Human-Centered Leadership Strengthens OT Security

Joshua Cunningham-Marsh • October 30, 2025

Organizations defending critical infrastructure must shift from compliance-focused strategies to holistic resilience. Ahead of the OTsec Canada Summit, Énergir CISO Martin Laberge outlines why people-first leadership and national coordination are essential for OT security resilience.

Blockchain & Cryptocurrency

Cryptohack Roundup: Allegations Involving Melania Memecoins

Rashmi Ramesh • October 30, 2025

Every week, Information Security Media Group rounds up cybersecurity incidents in digital assets. This week, Meteora CEO faced fraud allegations, LastPass warned of a phishing campaign, Trump taps crypto lawyer to lead CFTC, Mt. Gox delayed creditor repayments again and an Indian court blocked WazirX from using...

Business Continuity Management / Disaster Recovery

Microsoft Azure Cloud Apps Shut Down by Configuration Error

Cal Harrison • October 29, 2025

Microsoft's Azure cloud and 365 systems suffered an outage at noon on Wednesday because of a configuration error - hours before its quarterly earnings call and about a week after rival AWS underwent a widespread outage that shut down applications and services for most of the day.

Data Security

Varonis Lays Off 5% of Staff, Stock Plunges as Renewals Drop

Michael Novinson • October 29, 2025

Varonis cut 5% of its workforce and saw its stock price nosedive after disclosing a sharp drop in renewal rates for its on-premise subscription business. The underperformance of the federal vertical caused a notable headwind for Varonis despite it accounting for just 5% of annual recurring revenue.

Artificial Intelligence & Machine Learning

The New AI Arms Race in Banking Has a Surprise Contender

Yamini Kalra • October 29, 2025

If there's a poster child for AI in banking, it's JPMorgan Chase, ranking first among 50 of the world's largest banks in the Evident AI Index 2025. But the margin is thinning rapidly. Capital One is tugging at the title, coming in at a close second.

Cybercrime

US Withholds Support for UN Global Cybercrime Treaty

Chris Riotta • October 29, 2025

The U.S. declined to sign the new U.N. cybercrime convention despite support from 72 nations and its backing by Russia and China over fears it could be exploited by authoritarian states to legitimize surveillance, censor dissent and pressure cross-border data cooperation.

Mobile Application Security

Francisco Partners to Buy Apple Security Firm Jamf for $2.2B

Michael Novinson • October 29, 2025

Francisco Partners agreed to purchase Jamf for $2.2 billion just three months after the Apple management and security vendor laid off 6.4% of its workforce. The $13.05-per-share offer will provide Jamf with greater financial flexibility to accelerate growth and expand through innovation and M&A.

Professional Certifications & Continuous Training

Cyber Pros Needed: Securing the Middle Ground

Brandy Harris • October 29, 2025

As large enterprises continue to strengthen their defenses and reduce ransom payouts, ransomware operators are redirecting their attention toward midsize organizations. This shift has increased the urgency for adaptable, well-trained cyber professionals who can tailor enterprise-grade protections.

Critical Infrastructure Security

Delmia Apriso Systems Under Attack

Greg Sirico • October 28, 2025

Software made by a French multinational that's used to manage manufacturing across the globe is under active attack, warned the Cybersecurity Infrastructure and Security Agency in the second such warning in two months. Hackers are exploiting two vulnerabilities in the Delmia Apriso platform.

Governance & Risk Management

Warnings Mount Over Windows Server Update Services Hacks

Akshaya Asokan • October 28, 2025

Warnings over hackers exploiting a Windows Server Update have compounded since Microsoft rushed out a patch Friday against a flaw allowing unauthenticated attackers to execute arbitrary code.