Author: Staff Writer

Summary Points Data Breach Incident: On May 12, 2025, TxDOT experienced a data breach due to unauthorized access with compromised credentials, leading to the download of 300,000 crash records. Exposed Information: The breached data includes sensitive personal information such as full names, addresses, driver’s license numbers, and crash details, increasing risks for social engineering and phishing attacks. Mitigative Actions: TxDOT has disabled the compromised account, implemented additional security measures, and is notifying affected individuals to monitor their credit and report suspicious activities. Lack of Support: No identity theft protection or credit monitoring was provided to impacted individuals, though a dedicated…

Fast Facts AI Empowering Hackers: Generative AI is enhancing hackers’ operations, particularly in social engineering and automating attacks, but it’s not yet introducing entirely new attack techniques. Rapid Malware Development: AI tools are drastically reducing the time required for even novice hackers to create malware, increasing the potential threat landscape significantly. Fake Open-Source Utilities: Hackers are leveraging AI to produce malicious fake open-source tools that can trick developers, leading to compromised applications before launch. Limited Deepfake Impact: Despite the integration of AI into attacks like phishing, deepfake incidents remain rare and haven’t yet substantially impacted financial or intellectual property theft.…

Quick Takeaways Vulnerabilities Found: Security researchers identified five zero-day vulnerabilities and 15 severe misconfigurations in Salesforce Industry Cloud, potentially impacting tens of thousands of organizations. Salesforce’s Response: Salesforce acted swiftly to address the five vulnerabilities, with three fixed internally and two requiring customer action to resolve. User Misconfigurations: The 15 misconfiguration issues stem from the low-code nature of Salesforce Industry Cloud, allowing less experienced users to create solutions without fully understanding security implications. Widespread Risk: Automated scans revealed significant misconfiguration risks among organizations using Salesforce Industry Clouds, indicating a common vulnerability landscape in various sectors, including healthcare and finance. The…

Exclusive Partnership with PQStation, an industry-leading quantum security capability, to stand out as the most future-ready amongst competitors P2P Group Ltd. is pleased to announce it has entered into an exclusive partnership with PQStation, a global leader in quantum-resilient cybersecurity, to become the exclusive partner and distributor of its flagship products across Aged Care, Home Security, Defense, Policing and Emergency Services sectors. Key international markets include the United States, Canada, Australia, New Zealand and Germany. a breakthrough platform built to address the global urgency to shift toward post-quantum cryptographic standards. QSTunnel acts as a protective overlay for existing infrastructure, enabling immediate deployment of quantum-safe encryption, without the…

Top Highlights Rising Threat Landscape: Threat actors continuously evolve their tactics to infiltrate organizations, necessitating immediate, expert incident response services to mitigate financial, operational, and reputational damage. Sophos Emergency Incident Response: This newly launched service combines the expertise of Sophos and Secureworks to provide rapid remote and onsite support throughout all stages of cyber incident management, from investigation to remediation. Expertise and Holistic Approach: Leveraging a team of seasoned global responders, the service offers comprehensive capabilities, including digital forensics, threat intelligence, and incident command, to neutralize threats and prevent future attacks. Post-Incident Insights: Clients receive thorough post-incident reports detailing root…

Contrast Security, the global leader in Application Detection and Response (ADR), announced the general availability of Northstar, a major release for the company that redefines how businesses see cyberattacks, stop breaches, and protect their applications and APIs. This is the industry’s first platform to unite developers, security, and operations teams through an integrated user experience. Contrast pairs runtime data and contextual analysis with AI-powered auto-remediation to cut response times and eliminate noise, marking a breakthrough in application-layer security. The Contrast Graph: Live Runtime Insight That Drives Precision At the core of the platform is the Contrast Graph, which powers its most…

Fast Facts Evolving Threat Landscape: Cyber threats, particularly ransomware and malware, are becoming increasingly sophisticated, necessitating advanced and adaptable defense strategies to prevent significant data loss and reputational harm. Ransomware’s Dual Threat: Modern ransomware often employs "double extortion," stealing data before encryption, which not only cripples organizations with inaccessible data but also threatens public exposure, elevating the stakes for victims. Diverse Malware Types: Malware encompasses various harmful programs, such as viruses, worms, and Trojans, each exhibiting unique behaviors that require tailored protection strategies for effective defense. Adapting Defense Strategies: Defending against these evolving threats demands a layered security approach that…

Fast Facts Data Breach: The Texas Department of Transportation (TxDOT) reported that hackers accessed its Crash Records Information System (CRIS), downloading approximately 300,000 crash reports after compromising a system account. Immediate Response: Upon discovering the breach on May 12, TxDOT promptly disabled the compromised account and initiated an investigation while implementing additional security measures. Personal Information: The downloaded crash reports potentially contain sensitive personal information, including names, addresses, driver’s license numbers, and insurance details. Public Notification: While legally not required to notify affected individuals, TxDOT proactively informed them to be cautious of phishing attempts and to monitor their credit for…

New solution redefines risk assessment across vendor ecosystems, a paradigm shift focusing on automation-first, questionnaire-last for faster, smarter decision-making Black Kite, the leader in third-party cyber risk intelligence, announced AI-powered cyber assessments, an automated solution for streamlining third-party cyber risk assessments. With its automation-led approach, Black Kite is redefining how enterprises assess risk across their vendor ecosystems to make informed decisions and bring cyber resilience to their supply chain. “Managing cyber ecosystem risks is complex, and all too often, enterprises are further challenged by cyber assessment processes that do not work in today’s environment,” said Chuck Schauber, Chief Product Officer, Black…

Bringing total funding to $84M, the B Round will accelerate the company’s US expansion, R&D growth, and the development of the company’s next generation cybersecurity platform with natively built controls, including 24/7 detection and response Guardz, the cybersecurity company empowering Managed Service Providers (MSPs) and IT professionals to protect small and medium-sized businesses, announced that it has raised $56 million in Series B funding led by ClearSky, with participation from new investor Phoenix Financial and existing investors Glilot Capital Partners, SentinelOne, Hanaco Ventures, iAngels, GKFF Ventures, Lumir and others. This latest investment reflects Guardz’s rapid growth, bringing total funding to $84 million in just over two years. As cyberattacks grow in sophistication and increasingly target small and…