US Announces Crackdown on North Koreans Posing as IT Workers

Chris Riotta • June 30, 2025

Federal prosecutors announced major enforcement actions after a North Korean crime ring used stolen IDs, fake websites and U.S. shell firms to embed IT workers inside more than 100 American companies, stealing data and laundering over $5 million to fund Pyongyang's weapons programs.

Business Continuity Management / Disaster Recovery

Scans Probing for MOVEit Systems May Be Precursor to Attacks

Latest

Cybercrime

US Sanctions Aeza Group for Hosting Infostealers, Ransomware

David Perera • July 1, 2025

The United States cut off from the U.S.-dominated international financial system a Russian provider of digital infrastructure to cybercriminal groups, accusing St. Petersburg-based Aeza Group of hosting infostealers and ransomware operations. The U.S. said Aeza is a bulletproof hosting service.

Governance & Risk Management

LevelBlue, Trustwave Unite to Form $1B Managed Cyber Goliath

Michael Novinson • July 1, 2025

The merger of LevelBlue, Trustwave and Aon's cyber team brings together elite pen testing, IR and managed security services. The combined company will have a strong presence in the U.S. government and global markets and exceeds $1 billion in revenue and 2,000 employees.

Cloud Security

German BSI Head: Tech Sovereignty Needs Technical Solution

Akshaya Asokan • June 30, 2025

European ambitions to replace foreign tech solutions with domestic alternatives are "unrealistic" in the short term, warned the head of the German cybersecurity head cybersecurity agency in a call for greater technological control over cloud platforms.

Events

SIEM Vendors Fail to Address Migration Complexity

Michael Novinson • June 30, 2025

Next-generation SIEM vendors struggle to gain market traction because they focus on technological superiority rather than solving the fundamental challenge of migrating existing security infrastructure and operations, said Hugh Njemanze, founder and president of Anomali.

3rd Party Risk Management

Another Billing Software Vendor Hacked by Ransomware

Marianne Kolbasuk McGee • June 30, 2025

Horizon Healthcare RCM is the latest revenue cycle management software vendor to report a health data breach involving ransomware and data theft. The firm's breach notification statement suggests that the company paid a ransom to prevent the disclosure of its stolen information.

Endpoint Security

Rethinking IT Risk Assessments for OT Environments

Suparna Goswami • June 30, 2025

IT organizations can apply multiple frameworks to help reduce risk, but relying on them in OT environments could create blind spots. Security leaders must rethink compliance-driven strategies and adapt controls to meet the unique demands of industrial systems, said Sydney Trains' Maryam Shoraka.

Cybercrime

DOJ: Cartel Hacked Phones, Cameras to Track FBI Informants

Chris Riotta • June 30, 2025

A Justice Department watchdog found a Mexican cartel hired a hacker to tap mobile data and Mexico City cameras, helping track, intimidate and kill potential U.S. informants linked to El Chapo while calling for reforms to protect sensitive investigations from rapidly evolving technology threats.

Artificial Intelligence & Machine Learning

AI Boss Fails Spectacularly in Month-Long Business Test

Rashmi Ramesh • June 30, 2025

Unleashing an agentic AI on the office vending machine: What could go wrong? Anthropic and AI safety company Andon Labs found out when they turned over management of a small refrigerator that acted as a vending machine to Claude Sonnet 3.7. Researchers described the AI's conduct as "pretty weird."

Cyberwarfare / Nation-State Attacks

Canada Orders Hikvision to Shut Operations

Prajeet Nair • June 29, 2025

Chinese video surveillance manufacturer Hikvision must close operations in Canada, a government official said Friday, citing national security concerns. The ban is the latest in a string of Western prohibitions against equipment made by partially state-owned Hangzhou Hikvision Digital Technology.

Government

US Cyber Diplomacy at Risk Amid State Department Shakeup

Chris Riotta • June 27, 2025

Current and recent former Department of State staffers told Information Security Media Group the agency is preparing to implement layoffs and begin a reorganization despite a San Francisco federal district court order blocking across-the-board layoffs at federal agencies.

Artificial Intelligence & Machine Learning

Misconfigured AI Servers and Weak Configurations Expose Data, Systems

Rashmi Ramesh • June 27, 2025

Hundreds of Model Context Protocol servers designed to help AI tools access private data are insecurely exposed online, say BackSlash Security researchers. Weak configurations leave systems vulnerable to data leaks and remote code execution attacks.

Fraud Management & Cybercrime

Feds Warn Patients, Healthcare Entities of Phishing Scams

Marianne Kolbasuk McGee • June 27, 2025

U.S. federal authorities are warning the public and healthcare sector entities of email and fax phishing scams by fraudsters seeking to steal personal information about patients or payments. The warnings come as three large U.S. insurers continue to recover from recent cyberattacks.