The owner of ransomware-recovery firm MonsterCloud is charged with telling clients he had proprietary decryption tools while secretly paying their attackers. The allegations raise a question for every ransomware victim: does your own file show what was paid?
MonsterCloud indictment exposes the ransom payment a victim’s own file may not record Read More »
The Cyber Law Toolkit’s 2026 update adds three scenarios: an artificial intelligence cyber defender that spoofs the red cross emblem, peacetime duties to protect civilians from cyber harm, and a harassment and deepfake campaign analyzed as torture.
Cyber Law Toolkit tests AI deception, cyber torture and peacetime cyber duties Read More »
Berlin refused an extortion demand on Aug. 28, and a ransomware crew posted an auction afterward. If the files publish, U.S. counsel will find that Model Rule 4.4(b) covers only what was inadvertently sent, and that the rest turns on a choice-of-law provision that may not point at home.
Berlin refused the ransom before the auction opened Read More »
Read the recent AI evaluation disclosures involving four labs as one repeated failure and you get it wrong. A novel exploit, a misconfiguration and a leaky allowlist are different problems, but they share a weak layer, an unanswered liability question, and a preservation gap that lands on legal and information governance teams.
Recent AI evaluation incidents expose gaps in containment, configuration and evidence Read More »
Federal water sector alerts tell utilities to inspect compromised PLC environments and restore safely. They leave the authority, method and sequence for preserving potentially relevant controller evidence largely to local response plans.
Federal prosecutors called Angelo Martino a double agent: hired to negotiate with BlackCat, he armed the attackers with his clients’ insurance limits while five victims paid $75.3 million, court records show. His 70-month sentence puts the breach-response supply chain on notice.
The negotiator was the leak: insider who betrayed ransomware victims gets 70 months Read More »
GitHub disabled 73 Microsoft repositories after the Miasma campaign re-compromised Azure’s durabletask project, while researchers separately documented Miasma payloads that can detonate when developers open affected repositories in AI coding agents such as Claude Code and Cursor. Here is how the campaign spreads and what security, compliance and eDiscovery teams should do now.
When the worm targets the assistant: Miasma turns AI coding agents into the trigger Read More »
Anthropic expanded Project Glasswing beyond its roughly 50 initial partners to a new cohort of approximately 150 organizations in more than 15 countries, pushing its restricted Claude Mythos Preview model into power utilities, hospitals, telecoms and hardware vendors, and into the records-retention and cyber-insurance questions facing every CISO, general counsel and information governance lead.
ShinyHunters defaced Canvas login pages Thursday and set a May 12 deadline, putting Instructure’s claimed 275-million-record haul at the center of FERPA, GDPR and litigation-hold work for 9,000 schools.
Canvas Breach Moves from Disclosure to Demand as ShinyHunters Sets May 12 Deadline Read More »
Two former cybersecurity professionals, one from Sygnia and one from DigitalMint, were sentenced April 30 to four years each for running BlackCat ransomware against U.S. companies — the first federal prison term in this country for an incident-response and ransomware-negotiation insider conspiracy.
A 48-Month Federal Benchmark Resets the Incident-Response Insider Question Read More »
A multinational advisory on China-nexus covert networks reframes SOHO routers and IoT devices as enterprise risk points, raising new questions for cybersecurity, privacy, compliance, eDiscovery preservation, vendor risk, and cyber-insurance readiness.
The Router on the Shelf is Now a National Security Problem Read More »
: The DOJ secured $52 million across nine cybersecurity-related False Claims Act settlements in FY 2025, tripling the prior pace and establishing cyber FCA enforcement as an operational program — with private equity firms, medical device makers, and defense subcontractors now in the crosshairs.
