BankInfoSecurity.com

Terabytes of Data Stolen From Cloud-Based Collaboration Tools, Researchers Warn
Dozens of organizations that use real-time content collaboration platforms appear to have lost not only credentials but also terabytes of hosted data to information-stealing malware being wielded by an initial access broker with a sideline in auctioning large volumes of stolen data.

Why Are Third-Party Vendor Breaches So Hard to Figure Out?
The victim tally of a 2024 hacking incident at back office services provider Conduent again soared after a new regulatory disclosure by the company, in this case to Texas authorities. The company told Lone Star state officials the breach affected nearly 14.8 million Texans, alone.

Chipmaker CEO Huang Launches Alpamayo Models, Rubin Platform
Nvidia CEO Jensen Huang launched Alpamayo, an open reasoning AI model family for autonomous vehicles, and Rubin, a six-chip platform promising AI tokens at one-tenth prior costs. Mercedes Benz CLA will feature the technology in the US this year.

Despite Cisco's Cyber Struggles, the Perks of Offering Asset Management Are Clear
Cisco is eyeing what would be its third-largest cybersecurity acquisition ever, Calcalist reported: a $2 billion buy of New York-based asset management vendor Axonius. The Israeli business publication said Sunday the two sides are in advanced negotiations. Axonius denied the Calcalist report.

CyberArk and Accenture Experts Discuss Modernization, Identity Sprawl, Securing AI
Financial services organizations are accelerating modernization efforts by adopting artificial intelligence, automation and DevOps-driven cloud development, but these initiatives have dramatically expanded their attack surface. As banks and financial enterprises rely more heavily on non-human identities to power applications, integrations and AI-driven workflows, security leaders are struggling to manage the volume, velocity and variety of machine identities across cloud and on-premises environments, said Barak Feldman, senior vice president of solutions engineering at CyberArk, and Rex Thexton, senior managing director at Accenture.

Paper Traces Pandemic-Era Spike in Attacks
One way to look at the novel coronavirus pandemic: A societal experiment in how an oft-overlooked yet essential element of secure networking would stand up to an exploding user base. Unsurprisingly, the rapid uptake of virtual private networks by companies suddenly managing a remote workforce came with significant security costs.

Ransomware Gang Qilin Had Claimed It Stole 852 GB of Health System's Data
Nearly half a million patients of a Catholic healthcare network that serves New England and parts of Pennsylvania began the new year by receiving notifications that hackers may have stolen their health information in a May 2025 hacking incident.

Experts Say Grid Disruption Amid Venezuela Operation Signals Cyber's Expanding Role
Uncertainty surrounds a Caracas blackout that coincided with a U.S. raid to capture Venezuela President Nicolas Maduro, with analysts weighing the plausibility of U.S. forces using cyber as a tool in layered, covert action amid the historic operation.

Insurer's Hack Could Rank as Largest US Health Data Breach Reported in 2025
Supplemental health insurer Aflac is notifying 22.65 million people whose sensitive health and personal information, including Social Security numbers, was potentially compromised in a June data theft incident. The incident will likely rank as the biggest U.S. health data breach reported in 2025.

Critics of South Korea's Coupang Dismiss Offer as Marketing More Than Compensation
After suffering a data breach that exposed personal data for two-thirds of South Korea' population, online retailer Coupang promised to distribute $1.2 billion in vouchers to "restore customer trust." But critics have accused the move of being more about marketing than true compensation.

Cyber Command Involved in Strikes on Caracas
Here's what we don't know: Whether the Caracas grid outage triggered by the U.S. incursion was caused - or at least aided - by a cyberattack. A coordinated attack involving a cyber component against an adversarial electrical grid wouldn't be unprecedented.

Investors Increasingly See Each Security Technology Category as Winner-Take-All
The chasm between the cyber "haves" and cyber "have nots" widened in 2025, with most large security companies recording stock price gains while smaller companies logged losses. Of the 11 public cyber vendors with valuations exceeding $14.9 billion, the stock price rose for nine of those companies in 2025.

Insurer's Hack Could Rank as Largest US Health Data Breach Reported in 2025
Supplemental health insurer Aflac is notifying 22.65 million people whose sensitive health and personal information, including Social Security numbers, was potentially compromised in a June data theft incident. The incident will likely rank as the biggest U.S. health data breach reported in 2025.

The Campaign Compromises Open-Source Vulnerability to Hack IoT Devices at Scale
Security firm CloudSEK has uncovered a botnet campaign that is exploiting the React2Shell vulnerability in the Meta-developed, open-source React framework across a variety of devices since December. The security firm attributed the campaign to RondoDox.

Visibility Gaps Increase the Risk of Certificate-Driven Outages
Moving to 47-day TLS and SSL certificate renewal cycles by 2029 will turn certificate management into an enterprise risk. "Automation and crypto-governance are now board-level imperatives. Enterprises can prepare for continuous renewal cycles without losing resilience," says Sectigo CEO Kevin Weiss.

Also: Leadership Decisions Shaping Cybersecurity in 2026
Security leaders are heading into 2026 facing growing pressure from AI-driven risks, limited resources and an increasingly complex threat landscape. Sean Mack, who leads ISMG's CXO Advisor practice, joined ISMG editors to discuss how these forces are reshaping security.

Indian Police Arrests Ex-Coinbase Staffer Over Data Breach Charges
This week, a $7 million Trust Wallet extension hack, arrest of an ex-Coinbase support agent, the U.S. sued alleged perpetrators of a $14M scam, Polymarket hack update, early release scheduled for former Alameda CEO, backlash on Flow's post-exploit rollback plan and Grubhub-linked holiday Bitcoin scam.

Also: China-Linked APT Hijack Updates, Condé Nast Data Leaked, La Poste Hit
This week, a Clop-linked vendor breach hit Korean Air, a China-linked APT hijacked software updates, a critical zero-day flaw remained unpatched, Condé Nast faced a data leak, La Poste was disrupted and Korean police extradited a malware operation suspect.