Latest

Government

CISA Defends Layoffs Amid Union Injunction

Chris Riotta  •  November 6, 2025

The Cybersecurity and Infrastructure Security Agency told a federal court it complied with an injunction blocking shutdown-related layoffs by sending reduction-in-force notices only to non-union staff within a unit vital to coordination with state, local and private-sector defenders.

Governance & Risk Management

Why Microsegmentation Is Just a Dream for Many IT Teams

Suparna Goswami  •  November 6, 2025

Microsegmentation has long been touted as the gold standard for restricting lateral movement by hackers. It helps lock down network traffic and reduces the blast radius of a breach. Vendors say it's transformative, but if you walk into most large enterprises, you'll will find it half-implemented.

Cybercrime

Breach Roundup: UPenn Hit by Email Breach

Anviksha More  •  November 6, 2025

This week: UPenn hit by email breach, Australian police arrested 55, 'SesameOp' backdoor hid C2 traffic, BEC scammers used AWS, hackers stole trucking cargo, Ukrainian national extradited to United States for role in Conti ransomware and a supply chain risk in advanced installer tool.

Fraud Management & Cybercrime

Report: Nevada State Hackers Evaded Detection for Months

Chris Riotta  •  November 6, 2025

A threat actor infiltrated Nevada’s statewide systems undetected for months, ultimately disrupting at least 60 agencies by deleting backups and launching ransomware that forced a full rebuild of core infrastructure and triggered a multimillion-dollar emergency response.

Blockchain & Cryptocurrency

Cryptohack Roundup: Europol Busts 600M Euro Fraud Network

Rashmi Ramesh  •  November 6, 2025

Every week, Information Security Media Group rounds up cybersecurity incidents in digital assets. This week, Europol's 600 million euro fraud network bust, Sam Bankman-Fried conviction appeal, PHP exploits fueled cryptomining campaigns and sentencing set for Samourai Wallet founders.

Cyberwarfare / Nation-State Attacks

Russia's Destructive Wiper Attacks on Ukraine Rise Again

Mathew J. Schwartz  •  November 6, 2025

Russia's nation-state hacking groups have returned to pummeling Ukrainian targets with destructive, wiper malware, including in apparent attempts to disrupt its economically valuable grain sector, alongside the repeat targeting of allied European nations, researchers report.

Artificial Intelligence & Machine Learning

Longer Conversations Can Break AI Safety Filters

Rashmi Ramesh  •  November 6, 2025

Open-weight language models can say "no" only for so long. Their safety filters break down when pushed through longer conversations, exposing flaws that one-shot tests fail to catch, found researchers at Cisco. The longer a user engages, the higher the probability of failure.

Attack Surface Management

Armis Gets $435M Pre-IPO Funding to Grow Exposure Management

Cal Harrison  •  November 5, 2025

Another cybersecurity vendor is planning to dive into the still waters of an initial public offering. Cyber exposure management firm Armis dipped its toe in the market Wednesday, announcing a pre-IPO funding round of $435 million that boosted the company's valuation to $6.1 billion.

Fraud Management & Cybercrime

2 Ex-Cyber Specialists Indicted for Alleged BlackCat Attacks

Marianne Kolbasuk McGee , Greg Sirico  •  November 5, 2025

Three former employees of two cybersecurity firms stand accused of using BlackCat ransomware in a conspiracy to extort five U.S. companies, including three in the healthcare sector. One of the victim companies paid nearly $1.3 million to the attackers, U.S. federal prosecutors said.

Cyberwarfare / Nation-State Attacks

Unpatched Windows Flaw a Boon for Nation-State Hackers

Akshaya Asokan , David Perera  •  November 5, 2025

Chinese nation-state hackers are exploiting a Windows vulnerability to hack European diplomatic outposts, say security researchers - but operating system giant Microsoft says the flaw doesn't merit a patch. Hackers used a flaw already compromised by North Korea and Russia.

Data Governance

Immigration Database Pressed by DHS Into Voter Verification

Chris Riotta  •  November 5, 2025

A Department of Homeland Security move to broaden an immigration verification database into a voter verification tool could expose sensitive information to security threats. Critics caution it accelerates a pattern of data being repurposed by the Trump administration for surveillance.

Artificial Intelligence & Machine Learning

Malware Developers Test AI for Adaptive Code Generation

Rashmi Ramesh  •  November 5, 2025

Malware authors are experimenting with a new breed of artificial intelligence-driven attacks, with code that could potentially rewrite itself as it runs. Large language models are allowing hackers to generate, modify and execute commands on demand, instead of relying on static payloads