Cybersecurity News and Updates

A myriad of software makes up the typical AI harness, and trust issues between the components can create concerning attack vectors.

A likely Iran-backed actor targeted more than 30 community water systems in Minnesota in a sobering reminder of rising threats to US critical infrastructure.

A North Korea-linked hacker group was behind several high-profile compromises of open-source software libraries used by developers worldwide, researchers have found.

Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with ransomware criminals targeting South Korean organizations — further evidence of deepening entanglement between Pyongyang-backed hackers and the ransomware ecosystem.

In a filing for federal regulators, Massachusetts-based Analog Devices said intruders had exfiltrated data from its networks earlier this summer, but the scope of the incident is still under investigation.

The best compliance programs aren’t the biggest ones. They’re the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.

The post Timeless Compliance: Why Better Questions Beat Bigger Frameworks appeared first on SecurityWeek.

The deal extends Okta’s reach beyond identity management and into the realm of security operations, positioning the company to compete more directly on identity threat detection and response.

The post Okta to Acquire Identity Threat Detection Firm Permiso appeared first on SecurityWeek.

The acquisition will add approximately 65 cybersecurity professionals to Bank of America’s operations in the United Kingdom.

The post Bank of America to Acquire Cybersecurity Firm MDSec appeared first on SecurityWeek.

CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems.

The post CISA Urges Water Sector to Protect OT After Coordinated Attacks on PLCs appeared first on SecurityWeek.

In this edition of Reporters’ Notebook, our journalists discuss the ins and outs of Anthropic’s Claude Mythos rollout. How seriously should we take its risks? How big of a deal is it?