From the Desk
CISO & Security Leaders
Strategic threat landscape, regulatory changes, board-level risk intelligence.
20
Stories filed
4
Desks covered
≥ 7/10
Editorial floor
Coverage:RegulatoryThreat IntelComplianceSecurity
§
On the CISO & Security Leaders Desk
The latest stories filtered for your beat, organised by sub-section.
Security4 stories
- Iris Ohyama data cloud breach exposes info of 7.7 million customersA breach affecting 7.7 million records through a third-party cloud provider underscores vendor risk management gaps, especially for companies relying on outsourced infrastructure.1d
- The Exceptions That Break MFA Start in the BoardroomMFA exception requests from senior leadership create the single largest identity-control gap in most enterprises; this pattern is a top vector for account takeover in executive-targeting campaigns.4d
- DigiCert data breach exposes customer information, identity documentsA breach at a major certificate authority exposing customer identity documents has direct trust-chain implications; any enterprise relying on DigiCert-issued certificates must assess potential downstream impact.4d
- Why waiting for quantum computers to arrive could leave your security exposedHarvest-now-decrypt-later attacks mean sensitive data encrypted today with classical algorithms is already at risk; delaying post-quantum migration increases exposure for long-lived secrets.4d
Threat Intel13 stories
- Hackers pull off $133 million French bank heist via service providerA $133 million fraud against a major French cooperative bank via a compromised service provider demonstrates that third-party integrations remain a critical financial-risk vector for European financial institutions.2d
- Fake security tools on GitHub push backdoors and infostealersSecurity teams downloading tools from GitHub are high-value targets; a compromised analyst workstation can provide access to SIEM credentials, VPN keys, and incident-response playbooks.3d
- CEO-spoofing scammers used AI to help steal more than $100 million, feds sayAI-enhanced CEO impersonation fraud exceeding $100 million signals that deepfake-based business email compromise is maturing into a top-tier financial risk for enterprises with high-value payment workflows.3d
- Chainalysis says breach exposed credentials for all customersA breach exposing live credentials and tokens for all customers of a blockchain-analytics provider could cascade into downstream compromises, especially for financial-services clients subject to DORA.3d
- HackerSignal: A Multi-Source, CVE-Linked Corpus and Prospective Benchmark for Cyber Threat Intelligence3d
- APT29's Watering Holes Target Thousands of Mobile UsersAPT29 watering-hole campaigns targeting mobile users represent a direct threat to European government and enterprise personnel; the group's focus on fingerprinting before exploitation suggests high-value targeting.4d
- Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaignA zero-click campaign by Russian state hackers targeting iPhones and Android devices across Ukraine, the US, and Europe represents a direct espionage threat to executive and sensitive-role mobile devices.4d
- Hackers backdoor Linux servers using trojanized CWP web serverSupply-chain compromise of a widely used Linux hosting panel (CWP) provides persistent backdoor access, representing a strategic risk for any organisation hosting on or managing CWP-based infrastructure.4d
- The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603A fileless attack chain exploiting SharePoint demonstrates that advanced persistent threats can operate entirely in memory, evading traditional endpoint detection—relevant for any organisation using Microsoft 365.4d
- CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root AccessAI-assisted threat actors targeting financial services signal an escalation in adversary capability; European BFSI firms with Indian operations or supply-chain ties face direct risk.4d
- Want to Rent an Internet Address at the White House?White House staffers running residential proxy software on work devices exposes a systemic insider-risk pattern; one proxy service has Russian ties, raising counterintelligence concerns relevant to any government-facing enterprise.4d
- More Asian airlines announce data breaches after attack on Spanish IT provider AmadeusA single point of compromise at travel-technology provider Amadeus cascaded into breaches at six major airlines, exemplifying concentrated third-party risk that regulators increasingly scrutinise under DORA and NIS2.5d
- Cyberattack disrupts blood storage refrigeration systems in FranceA cyberattack manipulating blood-storage refrigeration in France demonstrates that attacks on healthcare supply chains can directly threaten human life—a scenario with severe regulatory and reputational consequences.5d
Compliance1 story
Regulatory2 stories
- UK Warns Its Critical Infrastructure Faces Grave RiskThe UK government's public warning about critical-infrastructure risk, coupled with its AI-focused policy push, signals a regulatory trajectory that will also shape expectations for EU-facing enterprises with UK operations.3d
- Watermarking Without Standards Is Not AI GovernanceThe paper argues AI watermarking without interoperability standards amounts to symbolic compliance—a risk for enterprises relying on watermarking to satisfy upcoming EU AI Act obligations.3d