Latest

Governance & Risk Management

Attackers Exploit Zero-Day Flaws in On-Premises SharePoint

Prajeet Nair , Mathew J. Schwartz  •  July 21, 2025

Hackers have been exploiting two zero-day vulnerabilities in on-premises installations of Microsoft SharePoint to gain remote access, and steal cryptographic keys and data. As Microsoft rolls out patches against "ToolShell," experts warn administrators to also rotate keys, to help eject attackers.

Governance & Risk Management

Lansweeper Purchases Redjack to Strengthen Asset Discovery

Michael Novinson  •  July 17, 2025

Lansweeper has acquired Redjack to combine detailed scanning with passive discovery, offering real-time asset inventories that fuel zero trust, business continuity and attack surface management. The combined offering enhances support for cybersecurity through automation and real-time data.

Next-Generation Technologies & Secure Development

iCounter Debuts With Mission to Defeat AI-Enabled Threats

Michael Novinson  •  July 16, 2025

Former FireEye and Mandiant leader John Watters unveils iCounter, a new cyber risk intelligence startup focused on targeted attacks and AI-enabled adversaries. Backed by Syn Ventures, the firm aims to transform threat detection with deeper visibility into attacker reconnaissance.

Fraud Management & Cybercrime

Medical Device Maker Surmodics Recovering From Attack

Marianne Kolbasuk McGee  •  July 3, 2025

A Minnesota maker of catheters notified federal regulators it is recovering from a cyberattack discovered in early June that rendered a portion of its IT systems and data inaccessible. Threat actors gained unauthorized access to some IT systems making certain systems and data unavailable.

Clearspeed Raises $60M to Scale AI Voice-Based Risk Platform

Michael Novinson  •  June 25, 2025

Clearspeed will use its $60 million raise to build out teams and technology as it scales its AI-powered voice screening platform across finance, insurance and security sectors. CEO Alex Martin said the firm aims to double revenue and push into conservative sectors seeking AI-powered trust solutions.

Agentic AI

Agentic AI Security Gets Fuel With Snyk's Invariant Labs Buy

Michael Novinson  •  June 24, 2025

To safeguard AI-native apps, Snyk has acquired Swiss startup Invariant Labs, whose experts pioneered research into vulnerabilities in agentic workflows. Snyk plans to integrate these capabilities across its developer-first security platform, starting with design partners.

Account Takeover Fraud

Neovera Boosts Bank Fraud Defense With Greenway Acquisition

Michael Novinson  •  June 18, 2025

Neovera has acquired Greenway Solutions, a Charlotte-based fraud red-teaming vendor serving top banks, to expand its cyber capabilities. The Washington D.C.-area services provider plans to tailor services for community banks and credit unions using automation and selective testing.

►

Artificial Intelligence & Machine Learning

Why AI Needs Stronger Laws, Not Just Smarter Tech

Akshaya Asokan  •  June 12, 2025

AI misuse - from deepfakes to cyber incidents - continues to outpace regulation. Andrea Isoni, chief AI officer at AI Technologies discusses why stronger cyber laws, certification frameworks like ISO 42001 and risk-based prioritization are necessary to manage AI risks safely and compliantly.

Agentic AI

Beyond Generic Chatbots: Rise of Industry-Specific AI Agents

Sandhya Michu  •  June 6, 2025

As companies shift away from broad, general-purpose AI tools, Iksha Labs CEO Hitesh Ganjoo says the future lies in domain-specific agents such as Rumi, an AI hiring coworker that's transforming interviews with speed and consistency.

Cybercrime

Lumma Stealer Malware Resurgence Challenges Global Takedown

Chris Riotta  •  June 3, 2025

Just days after a global takedown disrupted over 2,300 Lumma-linked domains, the info-stealing malware-as-a-service operation resurfaced, exposing how modular malware and resilient infrastructure allow cybercriminals to rapidly rebound and evade law enforcement.

Agentic AI

Nvidia CEO Huang Warns Export Bans Empower Chinese AI Firms

Michael Novinson  •  May 29, 2025

CEO Jensen Huang says new U.S. chip restrictions on China forced Nvidia to write down $4.5 billion in AI inventory and will hurt American leadership in global infrastructure as Chinese firms gain momentum. The rules fuel China’s rise and jeopardize U.S. infrastructure dominance, according to Huang.

Security Operations

Zscaler Buys Red Canary to Elevate AI-Driven Threat Response

Michael Novinson  •  May 28, 2025

Zscaler's buy of Red Canary will unify its cloud-based security infrastructure with Red Canary's MDR insights, giving rise to a next-gen SOC built on automation, AI, and rapid detection expertise. The integration will support a proactive SOC experience powered by AI workflows and security expertise.