Today on CISO Series...
On the CISO Series Podcast, ""Boards Love to Hear Jargon," Says Soon-to-Be-Fired CISO (LIVE in Boston)"
Video: "Detection to Decision Automation: CISOs on CNAPP's Next Era"
In today's cybersecurity news...
Cyber leaders defend Anthropic's banned models
Anthropic 's clash with the US administration is turning into a broader debate over how AI should be governed. Axios' sources say officials forced the company's advanced Mythos and Fable models offline over concerns they could be jailbroken, amid growing frustration with what they saw as Anthropic's dismissive response to those risks. Anthropic maintains it worked with the government and had approval to deploy Fable. Now cybersecurity leaders from companies including Adobe , Zoom , and Sophos are urging the administration to reverse the restrictions, arguing that limiting access hurts defenders more than attackers because security teams rely on these models to identify and stop increasingly sophisticated AI-powered threats.
(Axios) (Axios)
FBI disrupts massive phishing service
One of the biggest phishing operations on the internet just got taken down. The Federal Bureau of Investigation (FBI) , working with Google and Black Lotus Labs , dismantled a China-based phishing-as-a-service network called Outsider Enterprise that used AI-powered phishing kits and more than a million fraudulent URLs to impersonate trusted brands and steal passwords and credit card data. Authorities say the operation may have led to the theft of 3.8 million credit card records and nearly $2 billion in losses, highlighting how AI is helping cybercriminals scale scams to unprecedented levels.
(BleepingComputer)
1Password acquires Apono
In the latest sign that AI is reshaping cybersecurity, 1Password has acquired Israeli startup Apono for somewhere between $250 to $300 million, bringing on 80 employees and expanding 1Password's presence in Israel. Apono's platform automates access permissions across cloud infrastructure and enterprise apps, and investors say its ability to manage access for AI agents was a key differentiator, highlighting how companies are racing to secure a growing number of non-human identities as AI systems take on more work inside organizations.
(CTech)
WordPress plugins hijacked
A supply-chain attack compromised several popular WordPress plugins, potentially exposing up to 1.2 million websites to takeover. Researchers at Sansec - experts in eCommerce security say attackers tampered with JavaScript delivered through the infrastructure behind OptinMonster , Trustpulse , and PushEngage , letting them create hidden administrator accounts and install stealth backdoors whenever a site administrator loaded a page. The attack lasted briefly before being detected, but it shows how compromising a single software provider can give attackers access to massive numbers of downstream websites.
(Infosecurity Magazine)
Huge thanks to our episode sponsor, ThreatLocker
Recommended by LinkedIn
Cyber Security News and Trends - AUGUST
Intelliroot 1 year ago
🚨 Fake DeepSeek Campaign Targets macOS Users – Are…
Huntmetrics 1 year ago
Security Roundup: February 2025
Kocho 1 year ago
China-Nexus actor spies undetected for a year
A China-linked espionage group infiltrated a US medical university connected to military research, using custom malware to steal credentials from the widely used REDCap research platform and gained access to sensitive networks. Google says the attackers targeted everything from medical research and public health policy to defense technology and military programs, and used a novel technique that quietly forwarded emails containing strategic keywords to attacker-controlled accounts.
(Dark Reading)
Copilot flaw could have had it all
Researchers at Varonis uncovered a critical Microsoft 365 Copilot flaw that could have let attackers steal emails, files, calendar data, and even MFA codes with a single click on a legitimate Microsoft link. The attack chained together three vulnerabilities, including a prompt-injection technique that tricked Copilot into retrieving sensitive information and leaking it through Microsoft's own infrastructure, which was difficult for traditional security tools to detect. Microsoft has fixed the issue and says there's no evidence of real-world exploitation, but the bug is another reminder that AI systems can create ways to expose data by connecting old web security flaws with new behavior.
(The Hacker News)
Council of Europe hacked in PeopleSoft heist
The Oracle PeopleSoft breach appears to be getting bigger. After ShinyHunters previously claimed to have exploited a PeopleSoft zero-day to hack more than 100 organizations, including the University of Nottingham, the group now says it also stole 297 GB of data from the Council of Europe, including HR, payroll, banking, tax, and medical records. The Council tells The Register it's investigating the claim. More than 100 organizations, many in higher education, may have been exposed through the same vulnerability.
(The Register)
Adriatic port attack sparks maritime security warnings
A ransomware attack on Italy's Adriatic Port Authority is being cited as a warning about growing cyber risks to global shipping infrastructure. Threat intelligence firm Resecurity says the Anubis ransomware group breached the authority through a phishing attack, stole contracts, employee records, and port security plans, and demanded a $10 million ransom, though the port authority says only about 2% of its data was affected.
(Infosecurity Magazine)
Subscribe to Cybersecurity Headlines podcast
Spotify, Apple Podcasts, YouTube, RSS link, Amazon Music, add as an Alexa Skill, or search "Cybersecurity Headlines" on your favorite podcast app.