CrowdStrike Buys Onum for $290M to Boost SIEM Data Ingestion

Michael Novinson • August 28, 2025

CrowdStrike announced plans to acquire Spanish startup Onum Technology for $290 million. The move brings advanced data pipeline tools into its Falcon platform, speeding up threat detection and consolidating SOC workflows for customers leaving legacy SIEMs.

Fraud Management & Cybercrime

Cryptohack Roundup: New York Man, Firm to Pay $228M in Ponzi Scheme

Latest

Artificial Intelligence & Machine Learning

AI and the New Rules of Observability

Yamini Kalra • August 29, 2025

Observability has now become a mission-critical capability for enterprises operating complex, distributed and AI-driven systems. Leonard Bertelli, senior vice president at FPT Americas, shares how observability is changing and why both culture and technology must align to move enterprises forward.

Artificial Intelligence & Machine Learning

OpenAI, Anthropic Swap Safety Reviews

Rashmi Ramesh • August 28, 2025

OpenAI and Anthropic evaluated each other's AI models in the summer, testing for concerning behaviors that could indicate misalignment risks. Both companies released their findings simultaneously: no model was severely problematic, but all showed plenty of troubling behavior in testing scenarios.

Healthcare

CISA Probes Nevada Cyber Breach Amid Surge in State Attacks

Chris Riotta • August 28, 2025

The Cybersecurity and Infrastructure Security Agency and FBI are aiding Nevada after a cyberattack disabled state services, exposing how local governments - amid surging ransomware, IT shortfalls and federal funding cuts - are increasingly reliant on strained national cyber defense resources.

Cybercrime

Breach Roundup: TransUnion Discloses Breach Affected 4.5M

Anviksha More • August 28, 2025

This week: TransUnion incident affects 4.5 million, DSLRoot residential proxies, Operation Serengeti 2.0, ZipLine campaign exploits contact forms, a cyberattack disrupts 200 Swedish municipalities, Maryland Transit Administration hit by ransomware, TAG-144 escalated attacks in South America.

Cloud Security

Hackers Chase Credentials in Hybrid Cloud Deployments

Prajeet Nair • August 28, 2025

As enterprises go with hybrid cloud developments, so follow hackers, even if it means jumping through extra hoops to get to where the data is stored. Microsoft on Wednesday said it spotted a financially-motivated hacking group probing a hybrid on-premise.

Cryptohack Roundup: Scammer Posing as UK Police Steals Bitcoin

Rashmi Ramesh • August 28, 2025

This week, a scammer posed as police to steal bitcon, Taiwan charged 14 in a $41M fraud case, U.S. regulators lifted a consent order on Anchorage Digital, U.S. federal prosecutors said "writing code" alone is not a crime and the U.S. Commodity Futures Trading Commission expanded crypto engagement.

3rd Party Risk Management

DOE Still Blind to Its Own Software Supply Chain Risks

Chris Riotta • August 27, 2025

An audit of the Department of Energy found failures in supply chain risk practices, with multiple contractor sites lacking basic policies, verification mechanisms and visibility into the actual software running on critical systems. Three locations lacked formal policies.

Critical Infrastructure Security

Chinese Telecom Hackers Strike Worldwide

David Perera • August 27, 2025

The Chinese hackers responsible for breaking into telecom networks across the globe capitalize on already documented vulnerabilities, principally in Cisco routing equipment, warn a slew of national cybersecurity agencies. Hackers use publicly known vulnerabilities with CVE designations.

Cyberwarfare / Nation-State Attacks

Transparent Tribe Deploys Malicious Files Against India Govt

Prajeet Nair • August 26, 2025

Pakistan-linked hackers are targeting an Indian Linux-based operating system by tricking government employees into clicking malicious files that look like PDFs. When opened, the files install spyware, giving attackers long-term access to sensitive government systems.

Government

Whistleblower: DOGE Made Live Copy of Social Security Data

Chris Riotta • August 26, 2025

The Social Security Administration's chief data officer is warning in a whistleblower complaint that DOGE created a cloud replica of the Social Security database without proper authorization or oversight, potentially exposing the personal data of 300 million Americans.

Network Firewalls, Network Access Control

Citrix NetScaler Devices Yet Again Under Attack

David Perera • August 26, 2025

NetScaler customers of virtualization giant Citrix once again should patch immediately to stymie the hackers exploiting a zero-day. Citrix warned Tuesday that hackers are using a memory overflow vulnerability now tracked as CVE-2025-7775. The vulnerability carries a CVSS score of 9.2.

Artificial Intelligence & Machine Learning

AI's Cyber Impact in Focus at ISMG Virtual AI Summit

Poulami Kundu • August 26, 2025

AI is actively reshaping the future enterprise operations today. At the Cybersecurity Implications of AI virtual summit, CISOs, tech leaders and AI innovators from across North America, EMEA and APAC examined both the promise and the peril of AI adoption in cybersecurity.