Studies: Banks Penalize Bad Cybersecurity With Higher Rates

Richard Thurston • April 10, 2026

Bad cybersecurity is bad for business. A badly secured business may pay as much as ten extra basis points for a loan than if its posture had been up to scratch, find academic studies examining how U.S. banks price debt. The bill for poor cybersecurity could run hundreds of thousands of dollars.

►

Encryption & Key Management

One-Time Passcodes Are Gateway for Financial Fraud Attacks

Latest

Agentic AI

CrowdStrike Tests Claude Mythos for Vulnerability Detection

Michael Novinson • April 10, 2026

CrowdStrike's early testing of Anthropic's new Claude Mythos Preview AI model shows faster vulnerability detection and improved cross-system context, signaling a shift toward AI-driven security operations that compress discovery-to-response timelines and force new defensive frameworks.

Agentic AI

Project Glasswing Just Made Your Security Playbook Obsolete

Jennifer Lawinski • April 10, 2026

Anthropic's announcement this week of Claude Mythos Preview frontier model capable of finding zero-days flaws humans may miss is both a warning and a call to action for CIOs: The way enterprises have been managing cybersecurity is about to change forever, and they need to get ready.

Fraud Management & Cybercrime

RaaS Gang Anubis Claims Signature Healthcare Data Theft

Marianne Kolbasuk McGee • April 10, 2026

Ransomware group Anubis claimed it stole 2 terabytes of patient data in an attack this week on Signature Healthcare. The Massachusetts health system is still diverting ambulance patients from its hospital and using paper charts while it continues to recover.

Artificial Intelligence & Machine Learning

Pentagon Memo Blasted Anthropic for PR Campaign

David Perera , Chris Riotta • April 10, 2026

Internal memos used by the Department of Defense to justify its decision to blacklist artificial intelligence firm Anthropic said the firm's models could not be reliably controlled for military use.

Information Sharing

Turning Military Experience Into Cyber Advantage

Chetan Anand • April 10, 2026

Transitioning from armed forces can feel like stepping into unfamiliar terrain. Nowhere is this perception stronger than in cybersecurity. The good news: Many of the skills veterans have already developed translate directly to cybersecurity roles.

Artificial Intelligence & Machine Learning

Court Backs Pentagon Anthropic Ban - But the Fight Continues

Chris Riotta • April 9, 2026

A federal appeals court allowed the Pentagon to enforce its "supply-chain risk" designation against Anthropic, keeping its AI models barred from defense contracts while parallel litigation continues to challenge the policy's legality and constitutional limits.

Cybercrime

Breach Roundup: German Police Expose REvil, GandCrab Boss

Pooja Tikekar • April 9, 2026

This week, German police unmasked a REvil leader, a critical Docker flaw, Medusa ransomware surged, DPRK hackers abused GitHub, Grafana AI bugs enabled data theft, scams hit $20B in the United States, Ivanti exploited, and attacks hit Northern Ireland schools and a German political party.

Artificial Intelligence & Machine Learning

Designing Fraud Detection at AI Speed Without Friction

Jennifer Lawinski • April 9, 2026

AI is accelerating fraud at unprecedented speeds, forcing organizations to rethink how they protect users without adding friction. Intuit's Tony Gauda explains how modern fraud systems must be invisible, intelligent and built around identity to keep up with rapidly evolving threats.

Blockchain & Cryptocurrency

Cryptohack Roundup: Bithumb's Recovery Plan

Rashmi Ramesh • April 9, 2026

Every week, ISMG rounds up cybersecurity incidents in digital assets. This week, Bithumb's recovery plan, Circle criticized, a new Cambodian law to combat online scam networks, Bitcoin Depot hack, panic after Stabble's alleged North Korea link and HypurrFi's domain hijack.

Artificial Intelligence & Machine Learning

Zero Days for the Masses: Mythos Presages Exploit Tsunami

Mathew J. Schwartz • April 9, 2026

Anthropic's announcement that its Mythos Preview large language model can find serious zero-day flaws across all manner of code bases old and new, and quickly chain vulnerabilities together to build working exploits, promises to democratize access to such capabilities.

Bug Management in the Mythos Era: 'Assume You're Unpatched'

Mathew J. Schwartz • April 9, 2026

Thanks to Anthropic's Mythos presaging a world in which zero-day exploits are common, one cybersecurity expert says the new mantra is this: "assume you are unpatched." Vendors and customers must focus more than ever on strong monitoring, behavior-based controls and virtual patching.

France Limits Chinese-Made Solar Energy Components

David Meyer • April 8, 2026

France is saying "non" to Chinese photovoltaic components through a mix of protectionism and cybersecurity requirements as it readies a government-backed program of new solar energy projects. Chinese cybersecurity laws require firms to share key information and generally cooperate with Beijing.