Latest

Government

Shutdown Snares Federal Cybersecurity Personnel

Chris Riotta  •  October 1, 2025

The U.S. federal government shutdown has slashed staff at the nation's cyber defense agency and other key cyber entities, freezing daily operations, stalling grants and weakening threat coordination as state and local systems brace for lapses in federal support.

Cyberwarfare / Nation-State Attacks

Russia, Chinese Hacking Buffets Europe

Akshaya Asokan  •  October 1, 2025

Nearly every member government of the European Union experienced a cyberattack from a nation-state hacker in the 12 months ending in July, primarily from Russian and Chinese threat actors who "steadily intensified" hacking, says the European cyber agency.

Cryptocurrency Fraud

Bitcoin Fixer Convicted for Role in Money Laundering Scheme

Mathew J. Schwartz  •  October 1, 2025

A Malaysian national pleaded guilty Tuesday in an English courtroom to assisting an investment fraud scammer who converted stolen assets into a cryptocurrency treasure trove now worth $7.1 billion, including helping her to evade arrest by lining up assistants and Airbnb rentals in Scotland.

CISO Trainings

From Spend to Strategy: A CISO's View

Yamini Kalra  •  October 1, 2025

Curtis Simpson, CISO at Armis, shares how CISOs can frame spend in terms executives value, the underestimated risks of AI and which technology trends will truly reshape enterprise security.

Next-Generation Technologies & Secure Development

Tool Evaluation Skills: A Cure for Shiny Object Syndrome

Brandy Harris  •  October 1, 2025

Shiny object syndrome is more than a metaphor in cybersecurity. Organizations that chase every new tool often discover that what looked impressive in a demo fails to meet operational needs. The cure for this common malady is a structured tool evaluation process.

Government

What Happens to Cyberthreat Sharing After CISA 2015?

Chris Riotta  •  September 30, 2025

With a key cyberthreat sharing law expiring Tuesday, analysts tell Information Security Media Group legal protections enabling cyberthreat sharing across the public and private sectors will vanish, raising fears of reduced visibility into critical infrastructure just as federal resources shrink.

Cyberwarfare / Nation-State Attacks

China's 'Phantom Taurus' Hacks Middle East

Greg Sirico  •  September 30, 2025

A Chinese cyberespionage threat actor with a history of hacking Microsoft Exchange to spy on geopolitical events including summits in Africa, the Middle East and Asia, has shifted its attention to targeting databases, say researchers.

►

CISO Trainings

Risk Management Requires Business-First Thinking

Tom Field  •  September 30, 2025

CISOs can't rely on technical arguments alone to win resources. To be effective, they must frame risk as a business issue and link security spending to measurable financial outcomes. "The smart CISO is now quantifying what their risk is," said Matthew Middleton-Leal, managing director, EMEA, Qualys.

Agentic AI

MCP Developer Executes Sneaky Heel Turn by Copying Emails

Rashmi Ramesh  •  September 30, 2025

A patient hacker hooked victims by building a reliable tool integrated into hundreds of developer workflows that connects artificial intelligence agents with an email platform. The unidentified software engineer published 15 "flawless" versions until he slipped in code copying users' emails.

►

Governance & Risk Management

Building Stronger Cyber Defenses With AI

Tom Field  •  September 30, 2025

Adversaries are scaling attacks with AI. Defenders must adopt predictive analytics, empower employees, and embrace cultural change to strengthen resilience and create career opportunities, said Patricia Titus, field CISO at Abnormal AI.

►

Agentic AI

AI as the New Middleware in Cybersecurity

Anna Delaney  •  September 30, 2025

Agentic AI is becoming part of enterprise environments through software upgrades and embedded copilots. These agents often appear without notice, creating unseen risks if permissions and controls aren't carefully managed, said Morey Haber, chief security advisor at BeyondTrust.

Cryptocurrency Fraud

Fraudster Tied to $6.9 Billion Bitcoin Hoard Pleads Guilty

Mathew J. Schwartz  •  September 30, 2025

Chinese national Zhimin Qian, a 47-year-old woman also known as Yadi Zhang, pleaded guilty in England to helping run a Ponzi-style investment scheme in China called "Blue Sky," which defrauded over 128,000 individuals, generating assets she converted into 61,000 bitcoin, now worth $6.9 billion.