From Spend to Strategy: A CISO's View

Yamini Kalra • October 1, 2025

Curtis Simpson, CISO at Armis, shares how CISOs can frame spend in terms executives value, the underestimated risks of AI and which technology trends will truly reshape enterprise security.

Next-Generation Technologies & Secure Development

When Governance Fails, Committees Take Over

Latest

Cyberwarfare / Nation-State Attacks

Ukrainian Defenders Report Rise in Russian Cyberattacks

Mathew J. Schwartz • October 2, 2025

Russia in the first half of this year markedly increased the tempo of its cyberattacks targeting Ukraine, with defenders cataloging 3,000 cybersecurity incidents, largely targeting the military, government, local authorities and energy sector, often timed to amplify the impact of kinetic attacks.

Artificial Intelligence & Machine Learning

AI Driving Industry to Rethink Cyber Status Quo

Tom Field • October 2, 2025

The cybersecurity workforce finds itself in a fluid state as artificial intelligence and large language models are embedded into all aspects of business. Gen AI in particular is reshaping the ways in which people work, live and assign value, driving the need for a shift in mindset and approach.

Cloud Security

Breaking Down the Siloed Approach to Security

Anna Delaney • October 2, 2025

Cloud security and the innovation surrounding it are tearing down traditional siloed approaches to cybersecurity and embedding AI directly into developer workflows. In a fast-moving, cloud-based environment shaped by DevOps and the promise of AI, security teams can no longer operating in isolation.

Cybercrime

Extortionists Claim Mass Oracle E-Business Suite Data Theft

Mathew J. Schwartz • October 2, 2025

Extortionists are shaking down executives at organizations that use Oracle E-Business Suite, claiming to have stolen their sensitive data and demanding ransoms of up to $50 million, multiple cybersecurity firms are warning. The criminals claim to be associated with the Clop ransomware group.

Network Detection & Response

Vectra AI Snaps Up Netography to Fortify Multi-Cloud Muscle

Michael Novinson • October 2, 2025

Vectra AI's acquisition of Netography boosts its ability to deliver real-time visibility and detection in multi-cloud environments. The deal enables deeper visibility into flow logs across AWS, Azure, Google Cloud and Oracle, helping enterprises detect threats before and during attacks.

Government

Shutdown Snares Federal Cybersecurity Personnel

Chris Riotta • October 1, 2025

The U.S. federal government shutdown has slashed staff at the nation's cyber defense agency and other key cyber entities, freezing daily operations, stalling grants and weakening threat coordination as state and local systems brace for lapses in federal support.

Artificial Intelligence & Machine Learning

Stopping Modern Attacks With Behavioral Analytics

Tom Field • October 1, 2025

Modern networks present attackers with "one giant attack surface," says Mark Wojtasiak, vice president of research and strategy at Vectra AI. He discusses how Vectra AI applies behavioral analytics across hybrid networks to detect attacks faster and ensure analysts focus on the most urgent threats.

Cyberwarfare / Nation-State Attacks

Russia, Chinese Hacking Buffets Europe

Akshaya Asokan • October 1, 2025

Nearly every member government of the European Union experienced a cyberattack from a nation-state hacker in the 12 months ending in July, primarily from Russian and Chinese threat actors who "steadily intensified" hacking, says the European cyber agency.

Data Privacy

Nursing Home Fined $182K for Posting Patient Photos Online

Marianne Kolbasuk McGee • October 1, 2025

A "Success Stories" marketing campaign by a Delaware nursing home that involved posting photos and names of patients on social media resulted in a $182,000 federal fine. Regulators say the company violated HIPAA rules through the unauthorized disclosure of patients' protected health information.

Cryptocurrency Fraud

Bitcoin Fixer Convicted for Role in Money Laundering Scheme

Mathew J. Schwartz • October 1, 2025

A Malaysian national pleaded guilty Tuesday in an English courtroom to assisting an investment fraud scammer who converted stolen assets into a cryptocurrency treasure trove now worth $7.1 billion, including helping her to evade arrest by lining up assistants and Airbnb rentals in Scotland.

Government

What Happens to Cyberthreat Sharing After CISA 2015?

Chris Riotta • September 30, 2025

With a key cyberthreat sharing law expiring Tuesday, analysts tell Information Security Media Group legal protections enabling cyberthreat sharing across the public and private sectors will vanish, raising fears of reduced visibility into critical infrastructure just as federal resources shrink.

Artificial Intelligence & Machine Learning

How the $25B Palo Alto Networks-CyberArk Deal Came Together

Michael Novinson • September 30, 2025

The second-largest acquisition in cybersecurity history included initial outreach in 2023, the seller nearly walking away and an accelerated announcement timeline due to media leaks. Palo Alto CEO Nikesh Arora first approached CyberArk Chairman Udi Mokady about a potential deal back in May 2023.