The Latest

• 

  Threat group linked to UK, US retail attacks now targeting insurance industry

  The warning from Google researchers follows a recent incident at Erie Insurance, although the perpetrators of that attack have not been identified.

  Threats

• 

  US critical infrastructure could become casualty of Iran-Israel conflict

  Researchers warn that Iran-aligned threat groups could soon target U.S. companies and individuals in cyber espionage or sabotage attacks.

  Strategy

• 

  Cyberattacks top list of global business concerns, Kroll finds

  Many companies feel unprepared to comply with global privacy and security rules, according to the advisory firm’s annual business sentiment survey.

  Strategy

• 

  SEC scraps proposed cybersecurity rules for investment advisers, market participants

  The commission offered no rationale for removing rules that would have imposed security requirements on financial services providers.

  Updated June 16, 2025

  Strategy

• 

  CISA warns of supply chain risks as ransomware attacks exploit SimpleHelp flaws

  The latest confirmed cyber intrusion hit a utility billing software provider and its customers.

  Breaches

• 

  Software vulnerabilities pile up at government agencies, research finds

  A Veracode report reveals that government networks have accumulated years of unresolved security flaws, putting them at serious risk of exploitation.

  Strategy

• 

  Critical flaw in Microsoft Copilot could have allowed zero-click attack

  Researchers said the vulnerability, dubbed “EchoLeak,” could allow a hacker to access data without any specific user interaction.

  Updated June 11, 2025

  Vulnerability

• 

  How AI agents could revolutionize the SOC — with human help

  AI agents aren’t foolproof, but they could soon replace some of the most common tasks for cyber defenders.

  Strategy

• 

  Global law-enforcement operation targets infostealer malware

  Authorities in three countries arrested 32 people and seized dozens of servers.

  Cyberattacks

• 

  UNFI’s operations remain hobbled following cyberattack

  The grocery company had to entirely shut down its network following the intrusion and is serving customers on only a “limited basis” as it works to recover, CEO Sandy Douglas said.

  Breaches

• 

  From malware to deepfakes, generative AI is transforming attacks

  Generative AI is even helping hackers trick open-source developers into using malicious code, according to Gartner.

  Vulnerability

• 

  Marks & Spencer restores some online-order operations following cyberattack

  The department store chain six weeks ago was one of the first targets in an international spree of attacks disrupting retailers.

  Breaches

• 

  Main distributor to Whole Foods hit by cyberattack

  UNFI, a grocery retailer and wholesaler, is working to resume full operations following “unauthorized activity” involving its IT systems.

  Breaches

• 

  SentinelOne rebuffs China-linked attack — and discovers global intrusions

  The security firm said the operatives who tried to breach it turned out to be responsible for cyberattacks on dozens of critical infrastructure organizations worldwide.

  Updated June 9, 2025

  Breaches

• 

  Scattered Spider targeting MSPs, IT vendors in social engineering campaigns

  The same group is believed to be behind a wave of attacks against retailers in the UK, the US and elsewhere.

  Cyberattacks

• 

  Opinion

  Gartner: How to create a compelling SOC narrative for executives

  Focus on financial impact, efficiency and risk management to ensure informed cybersecurity investment decisions. 

  Strategy

• 

  Trump scraps Biden software security, AI, post-quantum encryption efforts in new executive order

  The White House accused the Biden administration of trying to “sneak problematic and distracting issues into cybersecurity policy.” 

  Strategy

• 

  Data security is a CX issue, too

  A string of cyberattacks have targeted retailers like Adidas and North Face. Incidents like these can weaken customer trust and lead to lost business, experts say.

  Breaches

• 

  Corporate executives face mounting digital threats as AI drives impersonation

  Malicious actors are using deepfakes and voice-cloning technology to target senior executives in both the workplace and personal spaces.

  Threats

• 

  Trump’s national cyber director nominee dodges criticism of funding cuts

  Sean Cairncross said his managerial experience has prepared him well to lead a relatively new White House cyber unit.

  Strategy

• 

  Water utilities mitigate equipment flaws after researchers find widespread exposures

  Censys researchers said hundreds of water treatment facilities have taken steps to protect against malicious cyber intrusions.

  Vulnerability

• 

  CISA workforce cut by nearly one-third so far

  The agency has lost roughly 1,000 staffers in the wake of the Trump administration’s workforce cuts, losses that could imperil its ability to protect government computer systems and critical infrastructure.

  Leadership & Careers

• 

  FBI, CISA warn Play ransomware targeting critical infrastructure with evolving techniques

  The hacker group has breached hundreds of organizations and is working with others to exploit flaws in a popular remote support tool.

  Threats

• 

  Vast array of solar power equipment left exposed online

  The most commonly exposed device has been discontinued and vulnerable for a decade, new research found.

  Vulnerability

• 

  Hackers abuse malicious version of Salesforce tool for data theft, extortion

  A threat group is using voice phishing to trick targeted organizations into sharing sensitive credentials.

  Breaches

More stories