DataBreachToday.com

Power Capacity Is Growing But 26% of Projects Faced Delays, Experts Warn
For years, enterprise cloud computing has felt like a "sky's the limit" endeavor, but that aspiration is coming crashing to the ground as the industry faces a hard new reality. Growth is being constrained by the very real physical limitations of the world's power grids.

Index Ventures Backs End-to-End Platform, Targeting of AI-Driven Vulnerability Risk
Astelia raised $35 million in Series A funding led by Index Ventures to scale its AI-powered exposure management tool. The company uses AI agents and network analysis to help enterprises prioritize exploitable vulnerabilities and reduce remediation noise across hybrid and on-premises environments.

Why Governance, Access Control and Vendor Oversight Now Define Patient Safety
Healthcare breaches do not start with a single technical failure. Digital risk has become clinical risk, driven by weak governance, excess access and unmanaged vendors. Resilience now depends on governance, not more tooling.

DeepSeek, MoonShot AI, MiniMax Used 24,000 Fake Accounts in Campaign
Anthropic has accused three Chinese AI firms of running coordinated, large-scale operations to steal capabilities from its Claude models. The U.S.-based company said DeepSeek, Moonshot AI and MiniMax are conducting "industrial-scale campaigns" using tens of thousands of fraudulent accounts.

Maturity Improves as Organizations Navigate Cost Pressure, Business Expectations
Enterprise observability has shifted from experimental tooling to critical infrastructure, with 60% of organizations now at mature levels. But cost surprises, business expectations and gaps in business-impact reporting threaten value realization as leaders push for measurable business outcomes.

Gen AI Nears 98% Adoption as OTel Gains Ground in Production
From automated correlation to agentic AI that investigates and remediates incidents, observability is entering a new phase. With generative AI adoption accelerating and OpenTelemetry gaining production ground, integrated intelligence is becoming table stakes.

Report: Lazarus Group Pivoting to Medusa Ransomware for Extortion Attacks
North Korean-state backed Lazarus Group hackers are using Medusa ransomware in extortion attacks on U.S. healthcare entities despite a 2024 U.S. indictment of Rim Jong Hyok, an alleged member of the Lazarus subgroup Stonefly, according to a new threat intelligence report.

How Claude's New AI Code Scanning Tool Will Challenge Application Security Leaders
Anthropic's debut of Claude Code Security jolted cybersecurity stocks and intensified competition in application security testing. It promises deep reasoning around identifying and remediating code vulnerabilities but faces steep challenges matching the feature breadth required by large enterprises.

What often appears to be turf wars between healthcare technology management, facilities OT staff, IT departments and security teams are often the result of unclear ownership and accountability for device security. And that presents safety risks to patients, says Mohammed Waqas, CTO of Armis.

Cisco: One Prompt May Not Break Most AI Models, But a Conversation Will
Cisco tested eight major open-weight artificial intelligence models and found multi-turn jailbreak attacks succeeded nearly 93% of the time, exposing a blind spot in how enterprises assess and deploy large language models safety.

Fintech Giant Says Personal Data Exposed for About 100 Business Users of Loan App
Financial services firm PayPal said it discovered a data breach that lasted for six months, exposed some business customers' personal information and led to fraudulent charges. The company said about 100 customers were affected, and that it has fully refunded them for fraudulent charges.

Shared Network Intelligence Adds Ecosystem Visibility to AI Models
Fraudsters collaborate, but most banks still detect fraud alone. This imbalance has defined fraud prevention for years. Now CISOs and fraud practitioners are rethinking their approach using network intelligence signals. Network intelligence shifts the lens by focusing on relationships across banks.

New Programs Aim to Counter Foreign Influence Over Tech Standards
The White House is operationalizing its AI action plan with export-ready "American AI stack" packages, a U.S. Tech Corps and new standards initiatives, aiming to entrench U.S. infrastructure in allied nations while countering foreign influence over global AI governance.

AI Code Scanner Rattles a $200B Industry
Anthropic launched Claude Code Security, an AI tool that found 500+ undetected bugs in production code. Cybersecurity stocks dropped sharply, but analysts are split on whether the disruption signals a genuine industry reckoning or a market overreaction.

Also: AI, Machine Identity Risks; Europe’s Digital Sovereignty Push
In this week's panel, four ISMG editors examined how cybercriminals may be turning on each other, what security leaders are really saying about machine identities and AI risk, and how shifting U.S.-Europe dynamics are reshaping technology resilience and digital sovereignty.