Minnesota Activates National Guard Over St. Paul Cyberattack

Mathew J. Schwartz • July 30, 2025

Cybersecurity experts from the Minnesota National Guard have deployed to St. Paul to help the city respond to a cyberattack, owing to the "scale and complexity" involved. After a weekend spent attempting and failing to contain the intrusion, officials took the city's IT systems offline.

Cyberwarfare / Nation-State Attacks

Hackers Target Zero-Day Vulnerability to Exploit CrushFTP

Latest

Access Management

Identity Management Is Broken. Can a Digital Worker Fix It?

Rahul Neel Mani • July 30, 2025

Traditional IAM tools fall short in today's complex identity landscape. Twine Security's AI agent "Alex" steps in - not just automating, but acting with business context to tackle IAM tasks. It's not more tools we need, but agents who know how to use them.

Identity & Access Management

It's Official: Palo Alto Networks to Buy CyberArk for $25B

Michael Novinson • July 30, 2025

Palo Alto Networks announced the biggest deal in its 21-year history, bursting into the identity security market with its $25 billion buy of CyberArk. While Palo Alto Networks has offered ITDR since 2023, buying CyberArk marks the company's first foray into the broader access management market.

Geo Focus: The United Kingdom

VPN Use Surges as UK Online Safety Act Takes Effect

Chris Riotta • July 29, 2025

Free virtual private network services are soaring to the top of the app charts in the United Kingdom after a new law went into effect Friday requiring platforms that contain adult content - including sites like X and Reddit - to confirm users' ages through "robust" verification measures.

Critical Infrastructure Security

CS4CA: Critical Infrastructure Under Pressure in the Nordics

Tony Morbin • July 29, 2025

Niels Søby Vesterager, CISO at DAO Distribution A/S in Copenhagen, previews his presentation at QG Media's two-day Cyber Security for Critical Assets Nordic Summit, scheduled for September 10 and 11 in Copenhagen, co-located with the Nordic Cyber Summit.

3rd Party Risk Management

Oracle/Cerner EHR Hack: Breach Reports Still Trickling In

Marianne Kolbasuk McGee • July 29, 2025

Months after news first broke that a hacking incident compromised legacy patient data hosted by Cerner electronic health record servers that were set to migrate to parent company Oracle's cloud environment, data breach reports related to the hack are still slowly trickling in to regulators. What's taking so long?

Finance & Banking

Coyote Trojan Turns Accessibility Into Attack Surface

Rashmi Ramesh • July 29, 2025

A banking Trojan long confined to Brazil has become the first known malware to exploit Microsoft's UI Automation framework to extract credentials, signaling a new tactic that may evade conventional detection. Akamai's findings point to a growing trend of attackers using legitimate system features.

Access Management

Why Palo Alto Networks Is Eyeing a $20B+ Buy of CyberArk

Michael Novinson • July 29, 2025

Less than five months after Google agreed to spend $32 billion on red-hot cloud security startup Wiz, Palo Alto Networks is on the precipice of paying more than $20 billion for PAM goliath CyberArk, The Wall Street Journal reported Tuesday. Here's why the deal represents a major pivot for Palo Alto.

Fraud Management & Cybercrime

Rise of Chaos Ransomware Tied to BlackSuit Group's Exit

Mathew J. Schwartz • July 28, 2025

An international law enforcement operation has disrupted BlackSuit, a ransomware group tied to hundreds of victims and ransom demands that exceeded half a billion dollars. The takedown occurred as security experts tracked the rise of a new group called Chaos, which may be a BlackSuit rebrand.

Artificial Intelligence & Machine Learning

Corelight Uses Gen AI to Power Smarter Threat Detection

Michael Novinson • July 28, 2025

Corelight's SaaS platform Investigator is designed to bring scalable network detection and response to smaller security teams. CEO Brian Dye says generative AI workflows and enriched network context help defenders identify threats faster and with greater confidence than ever.

Data Privacy

Health System Settles Web Tracker Lawsuit for up to $9.25M

Marianne Kolbasuk McGee • July 28, 2025

A Missouri healthcare system has agreed to pay up to $9.25 million to settle a proposed class action lawsuit alleging that its use of online tracking tools in its patient portals transmitted sensitive patient information to third-party firms without the patients' knowledge or consent.

Data Security

Allianz Life Breach Tied to CRM Compromise

Prajeet Nair , David Perera • July 28, 2025

A malicious actor breached a customer relationship management platform used by Allianz Life Insurance of North America on July 16 and stole personally identifiable information of most of its 1.4 million U.S. customers, financial professionals and some employees, the company said.

Agentic AI

Dropzone AI Gets $37M to Build Out Cyber AI Agent Ecosystem

Michael Novinson • July 28, 2025

Dropzone AI raised $37 million to scale its flagship AI SOC analyst and build new agentic AI tools for cybersecurity operations. CEO Edward Wu says the funding supports demand surges as enterprises shift toward human-augmenting AI to handle alert fatigue and security tool sprawl.