Latest

Artificial Intelligence & Machine Learning

Enterprises Are Prioritizing Generative AI Spending in 2025

Brian Pereira  •  July 8, 2025

Generative AI is now a top budget priority over security for many enterprises, but AI talent gap continues to hinder progress on AI projects. A recent AWS report recommends redefining AI leadership roles and strengthening third-party partnerships to unlock gen AI's full potential.

Governance & Risk Management

Attackers Actively Exploit 'Citrix Bleed 2' Vulnerability

Mathew J. Schwartz  •  July 7, 2025

Administrators of Citrix Netscaler devices are being urged to immediately patch their devices to fix two actively exploited vulnerabilities. One, dubbed Citrix Bleed 2, can be abused by hackers to bypass multifactor authentication, hijack user sessions and gain unauthorized access to the equipment.

Fraud Management & Cybercrime

Ransomware Attack Halts Ingram Micro Operations

Prajeet Nair  •  July 7, 2025

Global tech distributor and service provider Ingram Micro confirmed days after a widespread IT outage that a ransomware attack disrupted internal systems. The firm disclosed the incident following reports that extortion demands associated with SafePay ransomware appeared on employee devices.

Artificial Intelligence & Machine Learning

Will AI Gut the Cybersecurity Talent Pipeline?

Rashmi Ramesh  •  July 7, 2025

Time travel can seem like an unofficial requirement for cybersecurity job seekers, with would-be employers demanding mid-tier chops for entry-level positions. Come back in a few years, they say, after you've gained experience. But organizations can't assume the pipeline will fix itself.

Quantum Threats Demand Crypto Agility and Root-Level Reform

Michael Novinson  •  July 4, 2025

Crypto agility, non-human identity sprawl and outdated root certificates are pushing enterprises to overhaul their infrastructure. DigiCert's Lakshmi Hanspal outlines how to prioritize resilience, visibility and automation.

Artificial Intelligence & Machine Learning

AI Accelerates Security Risks in Broken Data Environments

Michael Novinson  •  July 4, 2025

Artificial intelligence has become a rapid accelerator for existing security flaws. Dana Simberkoff, chief risk, privacy and information security officer at AvePoint, says that organizations must double down on data governance and cyber hygiene to avoid accelerating AI risks.

Artificial Intelligence & Machine Learning

EU Pledges 'No Pause' Over Enforcement of Bloc's AI Act

Akshaya Asokan  •  July 4, 2025

Expect to see no pause in the EU's enforcement of new rules governing artificial intelligence, a spokesperson for the European Commission said amid intensifying calls for officials to "stop the clock" over implementing the bloc's AI Act, in the name of innovation and competition.

Application Security

Editors' Panel: Pro-Iran Hackers Threaten to Leak Trump Data

Anna Delaney  •  July 4, 2025

In this week's update, ISMG editors discussed Iran-linked hackers claiming to steal emails from Trump's inner circle, how to refine application development in the age of AI, and a U.S. Medicare data breach amplifying concerns over the safety, security and privacy of federal health systems.

Artificial Intelligence & Machine Learning

Faster Not Bigger: New R1T2 LLM Combines DeepSeek Versions

Rashmi Ramesh  •  July 4, 2025

Say hello to DeepSeek-TNG R1T2 Chimera, a large language model built by German firm TNG Consulting, using three different DeepSeek LLMs. The goal of R1T2 is to provide a faster LLM with more predictable performance that maintains full reasoning accuracy.

Artificial Intelligence & Machine Learning

AI Is Outpacing Security Controls Amid Talent Shortage

Michael Novinson  •  July 4, 2025

AI is moving faster than security teams can respond. Bob Huber, chief security officer at Tenable, said companies need governance frameworks and technical controls to manage AI use - especially as employees experiment with consumer tools such as ChatGPT and Gemini.

Network Firewalls, Network Access Control

Static Credentials Flaw Patched in Cisco Systems

Prajeet Nair  •  July 3, 2025

Cisco released urgent security updates to fix a critical vulnerability in Unified Communications Manager that could allow unauthenticated attackers gain root access to affected systems. The maximum-severity vulnerability allows unauthenticated remote attackers to log in using static credentials.

Cybercrime

Columbia University Hack Exposes Higher Ed Cyber Gaps

Chris Riotta  •  July 3, 2025

A breach of Columbia University’s IT systems after repeated attacks by U.S. President Donald Trump is highlighting how universities are unprepared for today’s threat landscape. Schools often leave campuses without enough resources for strong cyber defenses.