ThreatLocker helps organizations reduce risk by allowing trusted applications to run while limiting their access to only the resources they need. It’s a straightforward, default deny approach that gives you more control and visibility—without slowing down operations. Explore how ThreatLocker can help simplify your security strategy.
Rubrik’s Data Security Decoded podcast has joined the N2K CyberWire network, bringing trusted, vendor-agnostic insights for cybersecurity and IT professionals. Check out the newest episode, "The Signs of a Secure Software Supply Chain" with Lauren Zabierek. Listen and subscribe now.
A German-led law enforcement operation dubbed "Operation Chargeback" disrupted three major fraud and money laundering networks, leading to the arrest of eighteen people across nine countries. The networks are believed to have caused over €300 million (US$344 million) in losses, using stolen credit card data belonging to 4.3 million people. Europol said in a statement, "To conceal their activities, the suspects used numerous shell companies, primarily registered in the UK and Cyprus. These companies were used to distribute the fraudulent transactions, minimising the risk of chargebacks and detection. The shell companies were obtained through crime-as-a-service providers, who supplied complete corporate structures, including fake directors and Know-Your-Customer (KYC) documents."
Europol added, "The suspects allegedly exploited the infrastructure of four major German payment service providers to process and launder the illicit transactions. Six suspects, including executives and compliance officers, are accused of colluding with the fraud networks, enabling them to access the payment infrastructure in exchange for fees."
AI adoption is exploding, and security teams are under pressure to keep up. That’s why the industry is coming together at DataSecAI25, the premier event for cybersecurity, data, and AI leaders, hosted by Cyera.
Japanese media giant Nikkei has disclosed a data breach stemming from the compromise of an employee's Slack account, exposing the chat histories and personal information of more than 17,000 employees and business partners, BleepingComputer reports. The company stated, "An employee's personal computer was infected with a virus, leading to the leakage of Slack authentication credentials. It is believed that this information was used to gain unauthorized access to employee accounts. The incident was identified in September, and countermeasures such as changing passwords were implemented." The company added, "No leakage of information related to sources or reporting activities has been confirmed."
Oasis helps enterprises move beyond legacy IAM to govern agentic identities at scale. The platform unifies visibility, automates least-privilege access, and enforces policy across non-human identities (NHIs) and AI agents. By controlling access at the identity layer, Oasis accelerates safe AI adoption without compromising security, compliance, or speed. See how Oasis secures AI and NHIs.
British retailer Marks & Spencer has disclosed that its profits in the first half of the year were nearly wiped out due to a cyberattack the company sustained in April, the BBC reports. The company's profits fell 99% from £391.9m to £3.4m in the first half of 2025 compared to 2024.
M&S CEO Stuart Manchin said he expects profits to recover over the Christmas season, but warns that UK economic turmoil may worsen these results regardless. The BBC cites an analyst who pointed out a reassuring sign that M&S's core business of homewares and fashion only saw sales drop by about 16%.
On November 18th, hear directly from SAP's CISO to learn how their team is achieving 3-6x faster workflows and building an AI SOC capability that scales. If you can’t make it live, register anyway to get the on-demand recording sent to your inbox.
Today's issue includes events affecting Cyprus, Germany, Japan, the United Kingdom, and the United States.
M&S profits almost wiped out after cyber hack left shelves empty (BBC News) Marks & Spencer's online and in-store sales were hit by a cyber attack which it said cost it £101m
Google releases November 2025 Android patch, fixes critical zero-click flaw (BeyondMachines) Google's November 2025 Android security update patches CVE-2025-48593, a critical remote code execution vulnerability in Android's System component affecting versions 13-16 that requires no user interaction for exploitation, and CVE-2025-48581, a high-severity elevation of privilege flaw in Android 16 that could allow attackers to block security updates.
Prosecutors seize yachts, luxury cars from man accused of running Cambodia cyberscams (NPR) Prosecutors in Taiwan, Hong Kong and Singapore seized hundreds of millions of dollars in assets belonging to a Cambodian businessman whom the U.S. accuses of heading a global scam syndicate.
For a complete running list of events, please visit the Event Tracker.
CYBERWARCON (Virtual and Arlington, Virginia, USA, Nov 19, 2025) CYBERWARCON is a one-day conference in Arlington, VA focused on the specter of destruction, disruption, and malicious influence on our society through cyber capabilities. CYBERWARCON is not a hacker conference, or an ICS conference, or an international policy conference. The central purpose of this conference is to identify and explore threats. Participants and attendees come from a spectrum of backgrounds, including the military and government, academia, the media, and the private sector.
AWS re:Invent 2025 (Las Vegas, Nevada, USA, Dec 1 - 5, 2025) AWS re:Invent is a learning conference hosted by AWS for the global cloud computing community. The in-person event features keynote announcements, training and certification opportunities, access to more than 2,000 technical sessions, the Expo, after-hours events, and so much more.
TRUSTECH 2025 (Paris, France, Dec 2 - 4, 2025) This international event is the go-to place for all things payments, digital identity, cybersecurity, and fintech. With over 200 exhibitors, 100+ speakers, innovation awards, networking opportunities, and exclusive content, it’s the perfect place to discover what’s next in trusted technologies.
CyberMarketingCon 2025 (Austin, TX, USA, Dec 7 - 10, 2025) CyberMarketingCon will be held December 7-10 in bustling downtown Austin, Texas. Come to learn, network, and enjoy what this beautiful, unique city and your amazing fellow attendees have to offer.
