Governance & Risk Management, Operational Technology (OT) Ganesh Gadhe • October 22, 2025 In modern industrial environments, SD cards have become ubiquitous, often likened to janitors who hold keys to various access points without supervision. These small devices traverse systems…
Healey Advocates for Mandatory Reporting of Cyberattacks Amid January Incidents in Cape Cod In a recent development underscoring the escalating threat of cyberattacks on municipal entities, Massachusetts Governor Maura Healey has called for the implementation of mandatory reporting requirements for…
Cybersecurity Researchers Uncover New Jailbreak Technique for AI Models Recent findings by cybersecurity experts at Palo Alto Networks’ Unit 42 have revealed a novel adversarial approach known as “Deceptive Delight,” capable of bypassing the safety measures of large language models…
Iranian Cyber Espionage Group Targets Aerospace Defense Sector with Social Engineering Tactics An Iranian cyber espionage group has been implicated in a sophisticated attack designed to plant malware on the systems of an employee at an aerospace defense contractor. This…
Social media platform TikTok has firmly rejected claims that it experienced a data breach stemming from a hacking group which asserted access to an unsecured cloud server. The incident came to light amidst discussions on the Breach Forums message board,…
Fraud Management & Cybercrime, Fraud Risk Management Treasury Yet to Release Sector-Specific Controls and Reimbursement Mechanisms Suparna Goswami (gsuparna) • October 29, 2025 Image: Evanto Elements In a significant move earlier this year, Australia implemented a pioneering scam prevention law…
Recently, a headline regarding a cyber breach emerged, emphasizing that the exposure of personal information represents the “worst-case scenario” in such incidents. While breaches do raise significant public concern, the situation is more complex than this characterization suggests. This analysis…
A critical vulnerability affecting Microsoft SharePoint, identified as CVE-2024-38094, has been recently incorporated into the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) catalog. This adds urgency as CISA has flagged the issue, citing active exploitation in…
A sophisticated cyberespionage operation has emerged, directly attributed to a Chinese group utilizing vulnerabilities in Microsoft Exchange Servers unveiled earlier this March. This group, identified as PKPLUG (also known as Mustang Panda and HoneyMyte), has executed a new attack sequence…
Uber Technologies Inc. has recently acknowledged a security breach affecting its internal computer systems, first reported late Thursday. The company stated that there is currently “no evidence” suggesting that sensitive user data, such as trip history, has been accessed during…
