Microsoft says it has identified two North Korean groups using ARTEX since late October and that their AI-enabled operations remain human-directed. Reports from three security firms show why the tool alone cannot identify an attacker.
Johns Hopkins Bayview responded to a shadow AI upload with a user-side deletion and a request that the tool’s operator delete the data. No account reviewed shows the operator did, and HIPAA leaves the hospital to document what it did.
The owner of ransomware-recovery firm MonsterCloud is charged with telling clients he had proprietary decryption tools while secretly paying their attackers. The allegations raise a question for every ransomware victim: does your own file show what was paid?
MonsterCloud indictment exposes the ransom payment a victim’s own file may not record Read More »
The Wikimedia Foundation says agents it believes OpenAI operates made unapproved edits, probed its Etherpad and sent heavy traffic to its data services. Its account adds a victim’s records to the growing record of agent incidents.
Wikimedia publishes its own account of suspected OpenAI agent activity on its wikis Read More »
Federal prosecutors called Angelo Martino a double agent: hired to negotiate with BlackCat, he armed the attackers with his clients’ insurance limits while five victims paid $75.3 million, court records show. His 70-month sentence puts the breach-response supply chain on notice.
The negotiator was the leak: insider who betrayed ransomware victims gets 70 months Read More »
Europe’s AI Act rewrite has cleared final political approval. The Council approved the digital omnibus on June 29, confirming delayed high-risk AI deadlines while leaving the broader Aug. 2, 2026 application date and AI Office enforcement role firmly in view.
Council clears the AI Act rewrite as the enforcement clock keeps ticking Read More »
EU lawmakers struck a provisional political deal on the Digital Omnibus on AI in the early hours of May 7 that, if formally adopted, would defer the AI Act’s flagship high-risk obligations into late 2027 and add a categorical ban on AI-generated CSAM and non-consensual intimate imagery.
EU AI Act Deal Would Delay High-Risk Rules to 2027, Ban Abusive AI Content Read More »
ShinyHunters defaced Canvas login pages Thursday and set a May 12 deadline, putting Instructure’s claimed 275-million-record haul at the center of FERPA, GDPR and litigation-hold work for 9,000 schools.
Canvas Breach Moves from Disclosure to Demand as ShinyHunters Sets May 12 Deadline Read More »
Artificial intelligence is moving from promise to proof in cybersecurity. Organizations using AI extensively in security have cut average breach costs by $1.9 million and shortened breach lifecycles by about 80 days, according to data anchoring a new World Economic
AI in Cybersecurity Moves from Promise to Proof as WEF and KPMG Track Defender Gains Read More »
A multinational advisory on China-nexus covert networks reframes SOHO routers and IoT devices as enterprise risk points, raising new questions for cybersecurity, privacy, compliance, eDiscovery preservation, vendor risk, and cyber-insurance readiness.
The Router on the Shelf is Now a National Security Problem Read More »
Mandiant’s latest M-Trends report describes a threat landscape where access can change hands inside a compromised network in just 22 seconds and where ransomware crews now begin by targeting the systems that govern recovery. As AI reshapes both attack and defense, cybersecurity, information governance, and eDiscovery professionals are being forced to rethink how they detect intrusions, preserve evidence, and explain their decisions under scrutiny.
Twenty-Two Seconds to Hand-Off: Inside Mandiant’s M-Trends 2026 Findings Read More »
HaystackID has acquired eDiscovery AI to accelerate GenAI-driven legal, compliance, and cybersecurity workflows—tightening control over product development while preserving a dual-track operating model for clients who prefer separation. The deal highlights a broader shift: enterprises aren’t just testing GenAI anymore; they’re operationalizing it where defensibility, privacy, and regulatory timelines matter most.
