Ransomware DataBreachToday.com

Chapter 11 Looms as Eric Gan Seeks Custodian and Liberty, SoftBank Block Financing
Cybereason faces a crisis as a boardroom deadlock halts financing efforts. CEO Eric Gan and his family firm seek a custodian to halt the impasse, alleging SoftBank and Liberty Strategic Capital are prioritizing control over the company’s financial stability. Without urgent funding, bankruptcy looms.

Researcher Jason Sinchak on Recent Cyber Warnings About Contec CMS8000 Devices
A hidden reverse backdoor in low-cost patient vital sign monitors used globally is hardcoded with an IP address connecting to a Chinese government-funded education and research network, which poses both privacy and potential safety concerns, said security researcher Jason Sinchak of ELTON.

Europe Must View AI With 'Optimism Rather Than Trepidation,' He Tells Paris Crowd
Europe must view developments in artificial intelligence with optimism, rather than trepidation, U.S. Vice President JD Vance told EU leaders during the AI Action Summit. He said the EU's tendency to overregulate technology is costing American businesses billions of dollars.

Workflow Automation Leader Reaches $1.125B Unicorn Valuation, Eyes AI-Driven Growth
Security automation firm Tines has secured $125 million in Series C funding, pushing its valuation to $1.125 billion. CEO Eoin Hinchy says the company will invest in AI, expand beyond security into IT and infrastructure, and enhance agentic AI capabilities to drive mission-critical automation.

Experts Testify Budget Cuts Could Hurt Security Investments, Disrupt Supply Chains
President Donald Trump's federal funding freeze threatens to significantly weaken U.S. maritime cybersecurity efforts as China expands its control over global ports, experts warned in congressional testimony. Attacks on ports could disrupt supply chains and destabilize global trade.

Manufacturers May Have to Reassess Product Strategy to Maintain Competitive Edge
DeepSeek's entry into the AI market triggered a ripple effect, with a potential major impact on chipmakers. Shares of Nvidia, AMD and Intel took a hit immediately after the Chinese model's release and is forcing these silicon stalwarts to reassessment of their product strategies.

Weak Encryption, Data Transfers to China, Hidden ByteDance Links Found
Security researchers found DeepSeek AI has weak encryption, SQL injection flaws and sends user data to Chinese state-linked entities. Its AI model failed jailbreak tests, making it prone to manipulation. Regulators in Europe, South Korea, and Australia are investigating, with bans and warnings issued over security risks.

Ransomware Group Embargo Claims to Have Published 1.15TB of Hospital's Stolen Data
A rural Georgia hospital and its nursing home are among several other regional healthcare entities notifying tens of thousands of patients that their information was compromised in recent hacks. Ransomware gang Embargo claims to have published 1.15 terabytes of stolen data in one of those incidents.

Merger Combines Application Protection and DevOps to Secure Software at Scale
Harness and Traceable are combining forces to create a DevSecOps platform that seamlessly integrates software delivery with security. The merger addresses the growing need for continuous security along with continuous delivery, ensuring applications remain protected from development to deployment.

Lawsuits Mounting Over Elon Musk's Attempts to Slash Federal Government Spending
Lawsuits are mounting against President Donald Trump and Elon Musk's task force for shrinking the federal government as reports indicate the group is feeding sensitive federal data into artificial intelligence systems to target budget cuts, potentially accessing Americans' sensitive data.

Scale of Long-Running Attacks 'Unprecedented,' Warns The Shadowserver Foundation
Honeypots designed to track malicious internet activity have detected a surge in brute-force password login attempts against edge devices, and especially - but not exclusively - targeting equipment manufactured by Palo Alto Networks, Ivanti and SonicWall, said The Shadowserver Foundation.

CEO: Going Private Will Help SolarWinds Expand Its Operational Resilience Vision
SolarWinds agreed to be bought by Turn/River Capital for $4.4 billion just six years after the observability and IT management software firm went public. The proposed deal will help SolarWinds expand its vision in operational resilience and ensure the company's IT infrastructure remains robust.

SysTrack LsiAgent Installer Flaw Escalates Privileges Locally
A flawed Microsoft software installer application developed by Lakeside Software could enable attackers with lower privileges to gain full system access. The local privilege escalation vulnerability uncovered by Google Mandiant has since been patched.

Summit to Focus on Open-Source, AI Governance and Development
The historic presidential Élysée Palace in Central Paris will host world leaders, tech CEOs and researchers for the French AI Action Summit, a two-day event that will commence on Monday. U.S. Vice President JD Vance, OpenAI CEO Sam Altman and Google's Sundar Pichai will be on hand.

Midwest Chain Also Faces Multiple Federal Data Privacy Lawsuits
A Midwest chain of doctor practices and 13 Catholic hospitals has reported that a 2023 hacking incident that disrupted its IT system for several days and may have compromised the sensitive data of nearly 900,000 people. The group is also facing an assortment of data privacy lawsuits.

White House Ousts Key FBI and CISA Cyber Leaders, Raising Security Concerns
President Donald Trump's federal workforce purge and sweeping firings have forced out senior FBI cyber officials while sidelining election security experts at the Cybersecurity and Infrastructure Security Agency, raising significant security concerns.

3,000 Exposed ASP.NET Keys Put Web Applications at Risk of Code Injection Attacks
Threat actors are using publicly exposed cryptographic keys - ASP.NET machine keys - to manipulate authentication tokens, decrypt protected information, and insert harmful code into susceptible web servers, creating opportunities for unauthorized control and long-term access.

Governments Are Skeptical of Chinese A1 Platform's Data Security Controls
Countries across Asia are racing to ban government officials, national agencies and critical infrastructure organizations from using Chinese artificial intelligence company DeepSeek's open-source chatbot application, citing data security and privacy risks.

Also: Researchers Bypass GitHub Copilot's Protections, Deloitte Pays $5M for Breach
This week: A hacker claims to have 20 million OpenAI logins, Sweden clears ship in Baltic cable damage, researchers find ways to bypass GitHub Copilot's protections, Netgear patches router flaws, undetectable Mac backdoor raises alarms, Spain nabs hacker, and Deloitte pays $5M for RIBridges breach.

CISO Buyout Offers, Industry-Wide Skills Shortage Raise Fears of Cybersecurity Gaps
The Cybersecurity and Infrastructure Security Agency has reversed an exemption for its staffers to participate in the administration’s “Fork in the Road” resignation program, as lawmakers and security experts warn of a growing cyber workforce shortage threatening U.S. national security.