Join XPOSURE 2025 - The National Exposure Management Summit, taking place virtually on Wednesday, June 18, 2025, starting at 11:00 AM ET. Take a proactive approach to managing and reducing cyber risk. Gain expert insights from cybersecurity leaders on securing enterprise-wide networks, and learn how top industry players are implementing the stages of Continuous Threat Exposure Management (CTEM). Don’t wait – reserve your spot now!
Episode one of the new season of CISO Perspectives is now available. Hosted by veteran CISO Kim Jones, CISO Perspectives returns with a sharper focus on people, leadership, and talent in cybersecurity—because success in cyber is about people, not just technology. Join Kim for candid discussions with industry leaders as they take on the tough questions shaping the future of the cybersecurity workforce. Listen to episode one now.
Bloomberg reports that JP Morgan and the Bank of New York Mellon have limited information sharing with the US Treasury Department's Office of the Comptroller of the Currency (OCC) following a serious hack of the regulator's systems. The OCC last week disclosed a "major information security incident" in which hackers gained access to email communications from more than a hundred bank regulators for over a year. Bloomberg says the hackers had "access to highly sensitive information about the financial health of federally regulated financial firms."
The OCC is still investigating the extent of the breach. An OCC spokesperson told Bloomberg, "This work is ongoing, and the OCC is engaged with its supervised institutions to keep them informed as these investigations progress. OCC’s onsite examiners continue to retain access to bank information as necessary to conduct supervisory activities, while ensuring the security of the data."
IT pros, are you ready to fortify your defenses? Discover ThreatLocker® Network Control, a powerful Zero Trust host-based firewall with dynamic ACLs. Gain full visibility, granular control, and advanced filtering to secure your network like never before. Learn how to stop breaches, implement microsegmentation, and integrate seamlessly with the ThreatLocker Platform. Download the whitepaper now and get the insights you need to enhance your organization’s defenses!
Car rental giant Hertz Corporation has disclosed a data breach affecting customers of its Hertz, Thrifty, and Dollar brands, BleepingComputer reports. The company was targeted in last year's widespread data theft campaign by the Clop ransomware gang that exploited zero-days affecting the Cleo file transfer platform. Hertz says it confirmed a breach in February 2025 following attacks in October and December 2024.
The company says stolen personal information may include "name, contact information, date of birth, credit card information, driver’s license information, and information related to workers’ compensation claims." Additionally, a "very small number of individuals may have had their Social Security or other government identification numbers, passport information, Medicare or Medicaid ID (associated with workers’ compensation claims), or injury-related information associated with vehicle accident claims impacted by the event."
Secure Access is crucial for U.S. Public Sector missions, ensuring that only authorized users can access certain systems, networks, or data - are your defenses ready? Cisco's Security Service Edge delivers comprehensive protection for your network and users. Experience the power of zero trust and secure your workforce, wherever they are. Elevate your security strategy by visiting: cisco.com/go/sse.
US-based kidney dialysis provider DaVita disclosed yesterday that it sustained a ransomware attack on Saturday that disrupted some of its operations. Reuters says DaVita has nearly 3,000 outpatient clinics and serves around 760 hospitals across the US.
The company stated in an SEC filing, "Upon discovery, we activated our response protocols and implemented containment measures, including proactively isolating impacted systems. We are actively working to assess and remediate the incident with the assistance of third-party cybersecurity professionals and have notified law enforcement of the matter. We have implemented our contingency plans, and we continue to provide patient care. However, the incident is impacting some of our operations, and while we have implemented interim measures to allow for the restoration of certain functions, we cannot estimate the duration or extent of the disruption at this time."
Join Us at the RSAC 2025 Conference. Join us at RSAC, April 28 - May 1 in San Francisco and gain access to cybersecurity innovators, expert-led sessions, and hands-on workshops. Leave with new strategies, insights, and connections to elevate your cybersecurity journey.
Today's issue includes events affecting , and the United States.
Malicious PyPI Package Hijacks MEXC Orders, Steals Crypto Tokens (JFrog) The JFrog Security Research team regularly monitors open source software repositories using advanced automated tools, in order to detect malicious packages. In cases of potential supply chain security threats, our research team reports any malicious packages that were discovered to the repository’s maintainers in order to have them removed. This blog provides an analysis of …
Atomic and Exodus crypto wallets targeted in malicious npm campaign (ReversingLabs) RL researchers have identified yet another npm package that uses malicious patching of local software to hijack cryptocurrency transfers.
UNC5174’s evolution in China’s ongoing cyber warfare: From SNOWLIGHT to VShell (Sysdig) After a year under the radar, the Sysdig Threat Research Team identified a new campaign from Chinese state-sponsored threat actor UNC5174.
EU confirms issuing ‘burner phones’ to top officials but denies practice caused by Trump (The Record) The European Commission said it does issue "burner phones" to officials, but there has been no specific guidance recommending that they be used while on missions in the U.S.
23andMe bankruptcy draws investigation from House panel over data concerns (The Record) A House committee launched an investigation into the privacy and security risks associated with the bankruptcy of genetic testing company 23andMe and has asked its former CEO to testify at a hearing planned for early May.
For a complete running list of events, please visit the Event Tracker.
Protecting CISOs From Increasing Personal Liability Risk-Civil & Criminal Insurance Considerations (Columbia, Mar, USA, Apr 17, 2025) An in-depth discussion of CISO Liability to include the following: · Increasing accountability and claims events and trends facing CISOs · How D&O and Cyber policies differ · How CISOs are covered under one or both policies · Risk Management and best practices to maximize the value of the D&O policy and optimize policy performance in a claims scenario.
Community Event with The Cyber Guild - Book Club (Reston, Virginia, USA, Apr 17, 2025) Join the growing Cyber Guild Community - "where everyone wants to know your name " The Cyber Guild community is a growing network of cyber enthusiasts who are invested in building a sustainable cyber ecosystem.
RSA Innovation Sandbox 2025 (San Francisco, California, USA, Apr 28, 2025) RSA Conference 2025 marks 20 years for cybersecurity’s top innovation startup competition: RSAC Innovation Sandbox contest. The contest puts the spotlight on cybersecurity’s boldest new innovators while highlighting their potentially game-changing ideas. Hundreds of submissions are reviewed and narrowed down to only 10 finalists. The Top 10 Finalists will take the stage during RSA Conference 2025 and will have three minutes to make their award-winning pitch to a panel of leading industry experts. Since the start of the contest, the Top 10 Finalists have collectively seen over 90 acquisitions and over $16.4 billion in investments.*
RSA Conference 2025 (San Francisco, California, USA, Apr 28 - May 1, 2025) At RSAC 2025, you're not just attending a conference—you're stepping into a vibrant, thriving community of thinkers, innovators, and achievers. Though we come from different corners of the cybersecurity world, we are united by a common mission: to foresee risks, counter threats, and embrace the challenges ahead. Together, we shape the future of security. Together, we shine as one.
CYSAT (Paris, France, May 14 - 15, 2025) In today’s society, we heavily rely on space-based assets, and considering the continuously evolving cyber threats in the current geopolitical environment, securing space data is a major challenge. Since 2021, CYSEC has been organizing CYSAT to bring together all the players in the space cybersecurity domain.
