Ransomware DataBreachToday.com

House Democrats Are the Latest to Raise Data Collection Privacy, Security Alarms
A plan by the U.S. federal agency that oversees federal benefits that would require insurers to hand over the identifiable health data of civil servants received pushback from House of Representatives Democrats who said it throws up privacy and security risks.

French Vendor's QShield Offering Protects Edge Systems From Reverse Engineering
Aircraft manufacturer Airbus plans to acquire 100-person French cybersecurity vendor Quarkslab to strengthen sovereign European defenses by protecting aerospace and defense software, data and edge systems from AI-driven reverse engineering and exploitation.

Overhaul, Restructuring Puts Cyber at Core of Digital Warfare
Defense officials told House lawmakers the newly-released budget request positions cyber as a core warfighting domain, funding expanded offensive operations, AI-driven capabilities and a major Cyber Command overhaul as adversaries shift from espionage to pre-positioned disruptive attacks.

Cisco's Jeetu Patel on How Machine-Speed Threats Drive Need for AI-Led Security
Cisco's Jeetu Patel explains how AI models are compressing exploit timelines to minutes, forcing a shift to machine-speed defense, real-time enforcement and deeper ecosystem collaboration to secure critical infrastructure and stay ahead of adversaries.

New Rules Will Jolt Maritime Cybersecurity Market Amid Geopolitical Anxiety
A Coast Guard rule imposing standards on operational technology systems in ports and larger U.S.-flagged commercial vessels is poised to supercharge the maritime cybersecurity market - a boon granted by concern that shipping is a weak target for a world roiled by mounting geopolitical tensions.

Complaints Allege Tempus AI Lacked Consent to Use, Share Data With Pharma Cos.
A healthcare artificial intelligence firm that sells genetic information from an acquired database holding the results of millions of screening tests faces multiple putative class action lawsuits in Chicago federal court. Genetic data resists attempts to de-identify it, plaintiffs say.

KPMG Survey Finds Organizations Must Transform Ops to Scale AI
A new KPMG survey shows that while most enterprises have an AI strategy, only a small fraction are seeing real ROI. Enterprises getting it right are embedding AI into operations, governance and workforce development from the start.

UPGRADE and DigiSeals Programs at ARPA-H Remain Fully Funded
A U.S. federal grant effort to develop autonomous medical device patching platforms for hospitals evaded the budget-cutting knife of the Trump administration. Program boosters hope to automate cyber defenses so that hospitals of any size can more quickly patch vulnerabilities.

Officials Warned New Models Could Accelerate Cyber Risks Faster Than Rules
Global finance officials meeting in Washington warned that advanced artificial intelligence models could expose structural weaknesses across banking and payment systems, speeding vulnerability discovery and cyber exploitation faster than regulators can build guardrails.

Tyler Buchanan Pleads Guilty to Conspiracy to Commit Wire Fraud and Identity Theft
A senior figure in the Scattered Spider cybercrime group pleaded guilty to one count of conspiracy to commit wire fraud and one count of aggravated identity theft on Friday in US federal district court. The plea marks the conclusion of a digital crime spree by Tyler Robert Buchanan.

Optimizing Value and Utility Hinges on AI Scaffolding, Says Aisle's Ondrej Vlcek
While the world is in "awe" of how Mythos can find vulnerabilities and chain together exploits, the next step is to identify how to build the best cybersecurity pipelines and scaffolding to get maximum value from all AI models used inside an organization, said Aisle CEO Ondrej Vlcek.

Also: NY State Regs Test Resilience vs Compliance, OT Security Nears Breaking Point
In this week's panel, four ISMG editors explore the industry's response to Anthropic's Mythos AI breakthrough, whether tighter New York state cybersecurity rules are driving real resilience or simply compliance, and why operational technology security is fast becoming a critical frontline concern.

Point Predictive's Frank McKenna on Detecting Hidden Signals in Synthetic IDs
Fraud detection is moving beyond verification toward identity intelligence. Frank McKenna, co-founder and chief fraud strategist at Point Predictive says synthetic identities leave subtle signals such as thin profiles and behavioral traits that demand deeper analysis from fraud investigators.

The European Union Is Cutting Ties With US Tech Companies
The European Commission made a significant move towards "digital sovereignty" by awarding a 180 million euro - approximately $213 million - cloud contract to a quartet of European providers. The deal will allow the commission and the EU Parliament and council to procure sovereign cloud services.

How We Respond Will Determine the Future Of Cybersecurity and the Digital World
The introduction of Anthropic's Mythos model signals a shift in the cybersecurity industry - one not yet fully understood, which prompted Project Glasswing: a coordinated group of ecosystem partners who have been given early access to this capability to define impending future threats before they hit.

Stryker Has Said It Doesn't Carry Cyber insurance
Stryker notified regulators that its March cyberattack will impact the medtech maker's first quarter financial results. The company also does not appear to have a cyber insurance policy in place to help cover costs associated with the disruptive incident claimed by Iranian hackers.

Equifax CTO Jamil Farshchi on Cybersecurity's Response to Flood of Vulnerabilities
Cybersecurity organizations must adapt to machine-speed threats in the age of Anthropic's Claude Mythos, a new AI model that can uncover vulnerabilities and lead to a flood of repaid exploits. Equifax CTO Jamil Farshchi says security programs must be built for scale, automation and quick response.

Bank of America, Citi and Goldman Anchor Partner Cohort for OpenAI's GPT-5.4-Cyber
OpenAI's Trusted Access for Cyber program prioritizes financial institutions to drive adoption of GPT-5.4-Cyber in regulated environments, highlighting a split with Anthropic’s developer-centric, tech-heavy partnerships and raising questions about partnership value and data-sharing models.

Also, Eurail Breach, ChipSoft Hospital Disruptions, W3LL Phishing Takedown
This week, a "Raccoon"-linked actor hit help desks, Eurail exposed 308K users, Fortinet patched critical flaws, Pushpaganda scams, major data leaks hit healthcare and China, ransomware and phishing ops surged, and multiple breaches impacted firms and hospitals.

Playbook Aims to Help Healthcare, Public Sector Manage AI Vendor Security Gaps
The Health Sector Coordinating Council released guidance to help the healthcare and public health sector better manage the explosion of third-party AI vendor cyber risk concerns they face, especially as the technology is embedded in all sorts of products.