Autonomous Payment or Anarchy? AI Gets Purchasing Power

Suparna Goswami • May 30, 2025

When AI assistants order groceries or book flights, who's responsible when something goes wrong? That question is no longer hypothetical. As Visa and Mastercard enable AI agents to perform transactions on behalf of cardholders, experts weigh the legal, security and privacy stakes.

►

Artificial Intelligence & Machine Learning

Police Operation and Microsoft Take Down Lumma Infostealer

Latest

Cloud Access Security Brokers (CASB)

Zscaler, Netskope, Palo Alto Top SSE Gartner Magic Quadrant

Michael Novinson • May 30, 2025

Pure-play security service edge specialists Zscaler and Netskope were once again joined by platform behemoth Palo Alto Networks atop Gartner's rankings of SSE vendors. The SSE market is experiencing evolution rather than revolution, with commoditization prevalent in legacy security technologies.

Cybercrime

US Sanctions Romance Bait Scam Digital Infrastructure Host

Akshaya Asokan • May 30, 2025

The U.S. government sanctioned a Philippine firm linked to romance bait scam websites. The Department of Treasury cut off Funnull Technology from the U.S.-dominated international monetary system for acting as a content delivery network for scam platforms.

Artificial Intelligence & Machine Learning

DeepSeek Upgrade Edges Model Closer to AI's Frontline

Rashmi Ramesh • May 30, 2025

Artificial intelligence startup DeepSeek released Thursday an updated version of its flagship reasoning model months after its Chinese origin sent shockwaves through industry. The model is a glimpse into high-performance systems being trained and deployed under norms governed by Beijing.

Attack Surface Management

Linux Crash Dump Flaws Expose Passwords, Encryption Keys

Prajeet Nair • May 30, 2025

Hackers could exploit a tool that stores crashed system data in older Linux operating systems to obtain passwords and encryption keys, warn researchers. The flaw lies in the way certain Linux distributions, including Ubuntu, Red Hat, and Fedora, handle application crashes.

Artificial Intelligence & Machine Learning

Linux Zero-Day Vulnerability Discovered Using Frontier AI

Mathew J. Schwartz • May 30, 2025

Large language models have taken a big step forward in their ability to help chase down code flaws, said a vulnerability researcher who successfully trained OpenAI's o3 to review Linux kernel code, leading to the LLM - in an apparent first - discovering a new zero-day vulnerability in the code.

Incident & Breach Response

Cybersecurity Firm SentinelOne Suffers Major Outage

Mathew J. Schwartz • May 30, 2025

Cybersecurity vendor SentinelOne suffered a major, global outage for about six hours on Thursday that disrupted its monitoring of managed response service customers' endpoints and networks, interrupted software updates and kept administrators from accessing consoles for troubleshooting purposes.

Events

Preview: Hot Sessions at Infosecurity Europe 2025 in London

Mathew J. Schwartz • May 30, 2025

Infosecurity Europe is set to return June 3 to London. Hot topics at this year's event include everything from quantum computing, geopolitics and artificial intelligence, to supply chain attacks, insider threats and the cybercrime juggernaut that continues to be ransomware.

Security Information & Event Management (SIEM)

CISA's New SIEM Guidance Tackles Visibility and Blind Spots

Chris Riotta • May 29, 2025

The Cybersecurity and Infrastructure Security Agency issued new guidance urging organizations to streamline Security Information and Event Management platform integration by prioritizing impactful log data and reducing blind spots that continue to plague even mature security operations centers.

Artificial Intelligence & Machine Learning

Tenable Bolsters AI Controls With Apex Security Acquisition

Michael Novinson • May 29, 2025

Tenable is acquiring Israeli startup Apex Security to extend AI security features that go beyond asset discovery. With user-level controls and risk mitigation for AI usage, Tenable aims to accelerate its exposure management roadmap by integrating Apex into Tenable One later this year.

3rd Party Risk Management

Tiffany, Dior Suffer South Korean Customer Data Breaches

Jayant Chakravarti • May 29, 2025

Jewelry retailer Tiffany & Co. said hackers stole South Korean customers' data from a third-party vendor's platform, a disclosure that came shortly after sister brand Dior announced a similar breach. Hackers stole the personal information of South Korean shoppers.

Healthcare

Covenant Health Dealing With Cyberattack Affecting Hospitals

Marianne Kolbasuk McGee • May 29, 2025

Covenant Health, a Catholic healthcare organization serving New England and parts of Pennsylvania, is dealing with a cyber incident that has forced the entity to take its IT systems offline, affecting services at several of its facilities. That includes some hospitals and medical testing labs.

Governance & Risk Management

Florida Health System Pays $800K for Insider Record Snooping

Marianne Kolbasuk McGee • May 29, 2025

A Florida health system paid $800,000 and will implement a corrective action plan to settle a federal HIPAA investigation into a malicious insider incident involving a patient's medical records in 2018. BayCare Health System did not admit wrongdoing.