Latest

Cyberwarfare / Nation-State Attacks

France and Germany Grappling With Nation-State Hacks

Akshaya Asokan  •  December 12, 2025

The French Ministry of Interior is investigating a suspected nation-state cyberattack that targeted its email server. Additionally, the German government on Friday attributed a 2024 hacking incident on air traffic control systems to Russian nation-state hackers.

►

Artificial Intelligence & Machine Learning

ISMG Editors: Abandoned Identities Fuel Shadow Market

Anna Delaney  •  December 12, 2025

In this week's ISMG Editors' Panel, four editors explored Australia's shift in artificial intelligence regulatory policy, a resurgence of white hat hackers in the news and the shadow Telegram market of Russian fraudsters who are selling identities of former U.S. immigrants for $1,000 a person.

Data Breach Notification

Fieldtex, TriZetto Reveal New Healthcare Breaches

Marianne Kolbasuk McGee  •  December 12, 2025

New York-based medical supply fulfillment company Fieldtex is notifying its clients and more than 274,000 people about an August hack. Meanwhile, revenue cycle software firm TriZetto is also contacting its customer and patients about its own hacking incident.

US Military Cyber Budget Jumps to $15B in 2026 NDAA

Chris Riotta  •  December 12, 2025

Congress advanced a $15.1 billion military cyber budget in the fiscal year 2026 National Defense Authorization Act, boosting core operations, workforce recruitment and tech modernization as civilian cyber teams face sharp staffing losses and budget constraints.

Cloud Security

Europe's Quest for a Domestic Alternative to US Hyperscalers

David Meyer  •  December 12, 2025

European cloud users love hyperscalers - but they’re all American. Microsoft, Google and Amazon Web Services together hold 70% of the European market, with local providers mustering a mere 15% collectively. That landscape could soon change in the face of geopolitical reality.

Governance & Risk Management

Monitoring the Electric Grid Is Easier Said Than Done

Shaun Waterman  •  December 12, 2025

A new reliability standard for U.S. and Canadian electric grid tells major power companies to monitor and log traffic on their operational technology and industrial control systems networks. The rules will be a heavy lift for the electricity sector.

Artificial Intelligence & Machine Learning

Trump Targets State AI Regulations in Federal Override Push

Rashmi Ramesh  •  December 12, 2025

The Trump administration says it'll sue states that establish rules for artificial intelligence that go beyond a standard of "minimally burdensome" regulation - a step the U.S. president said is necessary to ensure China doesn't pull ahead in a global race for AI supremacy.

Black Hat

How the Hacking World Has Changed: 'All Tech is Political'

Mathew J. Schwartz  •  December 12, 2025

Technology doesn't exist in a vacuum, and by extension neither does cybersecurity. But in recent years, Black Hat founder Jeff Moss said he's been "struggling" with the "uncomfortable truth" that unlike the largely risk-free early days of hacking, today "all tech is political."

US Warns of Ongoing Pro-Russia Critical Infrastructure Hacks

Chris Riotta  •  December 11, 2025

U.S. and allied agencies warned of low-skill Russian-linked hacktivists breaching critical infrastructure by exploiting weak remote access tools, as federal prosecutors charged a Ukrainian national with helping orchestrate operations targeting water and energy systems.

Encryption & Key Management

UK ICO Fines LastPass Over 2022 Data Breach

Akshaya Asokan  •  December 11, 2025

The British data regulator imposed a fine of 1.2 million pounds against password manager LastPass over a 2022 data breach that exposed the data of millions of its customers. Unidentified hackers stole backup data from LastPass's Amazon Web Services S3 bucket.

Artificial Intelligence & Machine Learning

OpenAI Braces for AI Models That Could Breach Defenses

Rashmi Ramesh  •  December 11, 2025

OpenAI said Wednesday it is preparing for artificial intelligence models to reach "high" cybersecurity risk levels, marking an escalation in the dual-use capabilities that could strengthen defenses or enable sophisticated attacks.

Breach Roundup: DPRK-Linked EtherRAT Targets React2Shell

Pooja Tikekar  •  December 11, 2025

This week, likely North Korean hackers exploited React2Shell. The Dutch government defended its seizure of Nexperia. Prompt injection may be here to stay. Hikvision pushed back against a new U.S. crackdown. Qilin claimed it hacked Scientology, Microsoft Patch Tuesday and MuddyWater activity.