A Florida man who was the subject of a 2019 investigation by ProPublica was indicted last month on federal charges that he defrauded clients of his ransomware data recovery firm.
When ProPublica published its story in 2019, ransomware was growing into one of the world’s most pervasive cyberthreats.
He called MonsterCloud’s data recovery methods a “trade secret.”
In its 2019 investigation, ProPublica interviewed MonsterCloud’s clients and ransomware experts and found that in certain cases the firm must have paid ransoms on behalf of clients.
In 2019, Pinhasi touted MonsterCloud’s ties to law enforcement as evidence of its integrity.
Oct 26, 2026 · via propublica.org
A spokesperson for the White House declined an interview request but defended Trump’s handling of election security in an emailed statement.
Current and former CISA employees and state election officials describe an agency that has become significantly less equipped to help states fight legitimate cyber threats.
Some people interviewed said they were worried that Trump and his allies continue to ratchet up rhetoric about voting security, particularly about threats to voting machines.
Now he specializes in election security at the Center for Democracy & Technology, a nonprofit that advocates for digital and civil rights.
Bis, the White House spokesperson, denied that the Trump administration broke any agreements in releasing the information.
Oct 26, 2026 · via salon.com
In an emailed statement Monday afternoon, UNM Health Sciences Center Communications Director Chris Ramirez said that patients should not show up to any UNM Health facilities Monday while UNM officials are “actively working to resolve the issue.”
The statement did not give more details about the nature of the cybersecurity issue or provide an estimate as to when the hospital and clinics would reopen to patients.
UNM Hospital is the state’s only “Level I Trauma Center,” meaning it is certified to handle the most seriously injured patients.
The health system also operates several dozen clinics, most of which are in Albuquerque and Bernalillo County along with specialized facilities in Rio Rancho and Roswell.
The email does not specify when the situation would be resolved but notes that “security teams” are actively working to identify the issue.
Oct 26, 2026 · via sourcenm.com
Reverse engineer and cybersecurity bounty hunter log4j recently found they were getting “weirdly targeted ads” on their Samsung TV and discovered privacy breaches.
log4j posted on X that they were concerned with how specific the ads on their 2025 Samsung TV were.
The hacker even found a region-specific convolutional neural network (an AI) that tracks user behavior, citing examples like what videos the user watches, which ads are skipped, and video progress.
However, ngxson explained that their Tizen TV was already rooted and had multiple settings disabled, so an unmodified TV may behave differently.
However, Samsung TVs and Tizen aren’t the only culprits in reportedly breaching user privacy; other brands like LG have also been accused of spying on customers.
Oct 25, 2026 · via tomshardware.com
Removing an AI assistant’s access can stop new collection while leaving yesterday’s transcripts, summaries and exports intact.
For a meeting assistant, use five steps: inventory, establish a test baseline, remove access, handle retained copies, and verify closure.
A test meeting can check a deletion path; it cannot account for every historical copy.
Establish a harmless baseline Consider a fictional company testing its meeting assistant before retirement.
Remove every route to new collection Record the account, grants and permissions being removed.
Oct 25, 2026 · via cybersecurity-insiders.com
A recent data breach involving Korean Air and Asiana Airlines demonstrates the aviation industry’s structural vulnerability to cyberattacks targeting third-party IT providers.
Last week, Korean Air and Asiana said customer reservation information had been leaked through Amadeus IT Group, a global aviation technology provider that operates reservation and ticketing systems for airlines worldwide.
Korean Air confirmed that some customers' booking reference numbers were among the exposed information, while the full scope of the leak and the number of affected customers remained under investigation.
Korean Air said it had requested stronger safeguards and measures to prevent further issues from Amadeus.
In 2017, a technical network failure affecting Amadeus systems disrupted check-in services at airports worldwide, demonstrating how problems at a shared provider can affect multiple carriers.
Oct 25, 2026 · via koreatimes.co.kr
Personal information belonging to some Highline Public Schools students and employees was involved in a cybersecurity incident at Frontline, a company the district uses for hiring and professional development, the district announced Friday, Oct. 23.
Information accessed may include Social Security numbers, home addresses and dates of birth, according to information Frontline provided to the district.
The specific information involved varies by person, and not every student or employee is affected.
Each notice will identify the information involved and explain how to enroll in two years of free credit monitoring and identity theft protection through TransUnion.
“We are reviewing Frontline’s information and working with the company on notices to affected families and employees,” Highline said in its announcement.
Oct 24, 2026 · via waterlandblog.com
Photo By Donald Randall | Warren Domingo, Commander, Navy Region Hawaii (CNRH) information systems security...... read more read more Photo By Donald Randall | Warren Domingo, Commander, Navy Region Hawaii (CNRH) information systems security officer, third from right, and team pose for a photo in the CNRH Network Operations Center at Joint Base Pearl Harbor-Hickam, Hawaii, Oct. 23, 2026.
The Department of the Navy is observing Cybersecurity Awareness Month in October under the theme, “Securing the Next 250,” which underscores how digital security protects the systems that will support America’s future readiness.
At Navy Region Hawaii, information technology personnel help put that mission into practice by defending the networks that enable Pacific operations.
(U.S. Navy Photo by Donald W. Randall) see less | View Image Page
Oct 24, 2026 · via dvidshub.net
E. Docks said in his opening remarks at the annual Boston Conference on Cyber Security.
Now in its 10th year at Boston College, the last two of which were held at BC Law School, the October 14 gathering convened more than a dozen panelists and speakers.
Studies in Cybersecurity, Risk, and Governance at the Law School, collaborates with the FBI on hosting the conferences.
program to BC Law in 2015 demonstrates the commitment to leading legal education’s response to technological advances.
Photograph by Caitlin Cunningham, Boston College
Oct 24, 2026 · via lawmagazine.bc.edu
I'm the one who handles the administrative side of care, like scheduling doctor appointments and keeping her safe online.
Around that time, I began noticing her falling for scams online.
All in all, she's lost about $3,000 to scams, though I've been able to recover most of it through her bank.
Talk about scams My mom wasn't particularly tech savvy, even before her stroke.
I monitor my mom's accounts I worked in cybersecurity at Aura, which offers a lot of great products for keeping kids safe online.
Oct 24, 2026 · via businessinsider.com
What data brokers actually have on you Most people are shocked when they learn just how much information marketers and scammers can find out about them by purchasing it from one of many data brokers.
What that actually means is that data as sensitive as your location history can be sold to data brokers, who then resell it to anyone willing to pay for it.
Data brokers collect personal data from multiple sources to build detailed profiles of individuals.
Cybersecurity Awareness Week: 58% off for 9to5Mac readers This week is Cybersecurity Awareness Week, an annual campaign that reminds individuals and companies to strengthen their digital security.
There’s a threat that doesn’t get enough attention during this week: your personal data and your family’s personal data that’s already out there in broker databases, and it brings just as much of a risk as clicking a phishing link.
Oct 24, 2026 · via 9to5mac.com
Here particularly, they recently settled a case with Honeywell Aerospace to resolve allegations that they violated the False Clams Act by failing to meet cybersecurity requirements in their defense contract.
What does this case tell us about what DOJ is really policing here in the cyber fraud investigations?
Where it came here with the Honeywell case, Honeywell Aerospace, is really interesting because it’s a very significant precedent.
There was was not discovered by all of a sudden there’s a earth shattering breach of protocol.
They have no clue but when they hear from people who are in the trenches, they’ve got to listen.
Oct 23, 2026 · via federalnewsnetwork.com
The ongoing development of artificial intelligence (AI) offers businesses a variety of options for streamlining processes and operations, but it has also supercharged the incidence and sophistication of cyberattacks.
Deepfakes, business email compromise and social engineering attacks have all become more sophisticated as bad actors embrace AI as well.
AI-augmented detection tools have become one of the most widely adopted AI uses in modern cybersecurity programs.
NBT Bank’s Business Fraud Information Center provides a full range of resources and information as well as up-to-date fraud information and alerts to help protect businesses.
Andrew Frisbie is director of Information Security at NBT Bank, where he provides strategic leadership and operational oversight of the Information Security, Cyber Operations, Third-Party Risk Management and Insider Risk Management programs.
Oct 23, 2026 · via nhbr.com
That is the agentic AI pricing paradox: cheaper inference, costlier workflows.
If an attacker can make your product stop working by making it expensive, your pricing model has become an attack surface.
The result is our report, "Pricing Security Products in the Agentic AI Era," a practical framework we developed for the cyber community.
A hybrid pricing model makes sense: a platform fee per protected identity, plus credits for AI workflows such as access reviews.
In cybersecurity, the pricing model must also be resilient under attack.
Oct 23, 2026 · via calcalistech.com
There are surprisingly few constants when it comes to sports teams handing out championship rings.
We know a championship ring is going to be gaudy.
MSG is issuing a complimentary employee championship ring.
And the employees who don't get them usually aren't psychologically haunted by fake ring offers from their own company.
Advertisement Another difference between the Knicks' ring night and the Thunder's ring night was the presence of NBA commissioner Adam Silver — or, lack thereof in the Knicks' case.
Oct 23, 2026 · via sports.yahoo.com
Penn launched the Schlein Center for Cybersecurity on Oct. 21, bringing together researchers and former national security leaders to discuss how artificial intelligence is intensifying internet threats.
In an interview, Schlein said that the center could serve as “a great convening mechanism” for discussions involving cybersecurity policy.
It’s how that research becomes impactful,” Haugh said, adding that his connections to the federal government could help Penn researchers put their work into practice.
He suggested that collaboration between cybersecurity researchers and Annenberg School for Communication experts could help address that divide.
The center has launched a master’s program in software systems and cybersecurity and a seminar series.
Oct 23, 2026 · via thedp.com
A breach involving defense information can trigger a 72-hour reporting obligation to the U.S. Department of Defense.
A live or suspected incident during a financing or acquisition can delay or reprice the deal and break cybersecurity representations.
Many cyber-insurance policies also exclude losses tied to a known critical vulnerability left unpatched despite an available fix.
The longer an exposed system stays unpatched, the harder it becomes to show diligence, demonstrate reasonable security, and comply with legal and contractual deadlines.
Key actions to take Inventory every system running PHP, including legacy, acquired, and vendor- or managed service provider (MSP)-hosted ones.
Oct 23, 2026 · via wsgr.com
Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report.
(Source: Barracuda) AI changes the work security professionals do AI and automation are expected to handle more routine analysis, connect related security events, and suggest responses over the next year.
Security professionals would increasingly focus on investigating harder-to-detect attacks, checking AI findings, and making decisions during incidents.
“Organizations need to reshape their security teams, combining the power of AI and automation with human expertise, judgement, and visibility.
We must nurture these critical skills in the next generation of cybersecurity professionals, building new development pathways and opportunities for hands-on experience.”
Oct 23, 2026 · via helpnetsecurity.com
Tzadik, a security researcher at cybersecurity firm Wiz, assumed that the AI had made a mistake.
Unbeknownst to Wiz’s team, researchers at another cybersecurity firm, Calif—working with OpenAI—had used AI to find a related flaw.
The episode offers a glimpse into a new phase in cybersecurity in which AI helps defenders find vulnerabilities while giving them less time to fix them.
After the agent helped Wiz uncover the PHP vulnerability, it still couldn’t describe how the bug worked, Tzadik says.
He and colleagues spent days untangling the cause of a bug and eventually reproducing it.
Oct 23, 2026 · via time.com
Leaders in cybersecurity are sounding the alarm after the discovery of a major vulnerability this week.
Some experts estimated 70% of all the sites on the internet were at risk of hacking.
Attempts to exploit the PHP vulnerability have already begun.
Malicious cyberactors may seek to further exploit these bugs to access servers without authorization, the NSA said.
In a blogpost, researchers at AI security platform Wiz said that this was “among the most severe vulnerabilities discovered in PHP, and arguably in software history”.
Oct 23, 2026 · via theguardian.com