Governance & Risk Management , Healthcare , Industry Specific Penetration Testing Reveals Vulnerabilities in State Medicaid Systems Marianne Kolbasuk McGee (HealthInfoSec) • October 21, 2025 HHS OIG’s penetration testing of ten state Medicaid systems highlighted critical security gaps that must be addressed to safeguard data from advanced cyber threats. (Image:…
Cybersecurity research firm Darktrace has issued a report highlighting the ongoing threat posed by a state-sponsored group known as Salt Typhoon. This Advanced Persistent Threat (APT) group, suspected to be linked to the People’s Republic of China (PRC), continues to discover innovative methods to infiltrate critical infrastructure across the globe.…
Microsoft has recently disclosed multiple security vulnerabilities affecting its AI, cloud services, enterprise resource planning systems, and Partner Center solutions. Among the vulnerabilities identified is a critical flaw that has already been exploited in the wild, raising alarms within the cybersecurity community. The most pressing concern is associated with a…
Cyberattacks Target Biomanufacturing Firms with Custom Malware “Tardigrade” Recent investigations have uncovered a series of cyberattacks targeting biomanufacturing companies in the U.S., attributed to an advanced persistent threat (APT) utilizing bespoke malware known as “Tardigrade.” This information was disclosed in a recent advisory published by the Bioeconomy Information Sharing and…
At the close of August, Anthropic, a notable AI firm, publicly affirmed that its chatbot, Claude, would not be involved in assisting with the construction of nuclear weapons. This announcement came on the heels of a strategic partnership with the U.S. Department of Energy (DOE) and the National Nuclear Security…
Recently, the 32nd edition of the RSA Conference, one of the premier cybersecurity events worldwide, concluded in San Francisco. Among the notable insights shared, Kevin Mandia, CEO of Mandiant at Google Cloud, delivered an impactful keynote focusing on the current state of cybersecurity. Mandia highlighted that organizations can enhance their…
Agentic AI, Identity & Access Management, Machine Identities Silicon Valley Startup Targets Discovery and Governance in Non-Human Identity Management Michael Novinson (MichaelNovinson) • October 21, 2025 Danny Oliveri, co-founder and CEO, Defakto (Image: Defakto) Silicon Valley-based startup Defakto, which specializes in non-human identity management, has successfully secured $30.75 million in…
Investigation Reveals Alarming Details in Afghan Data Breach A recent inquiry has uncovered critical information regarding a significant data breach affecting Afghan systems responsible for handling sensitive information. The probe highlights a series of unrecorded meetings and informal agreements that have raised concerns about the security protocols in place. The…
On Monday, Cisco issued an updated advisory highlighting an ongoing threat linked to a long-standing vulnerability in its Adaptive Security Appliance (ASA). The flaw, identified as CVE-2014-2120, has a CVSS score of 4.3 and relates to insufficient input validation within the WebVPN login interface. This vulnerability permits unauthenticated remote attackers…
