10 Questions Every Organization Should Ask a Potential AI Vendor
Engaging a third-party AI solution does not absolve an organization from its responsibilities towards consumers and employees impacted by it. Angela Juneau from Pashman Stein Walder Hayden outlines essential questions…
Achieving Effective Governance in 2026
Today’s boards are navigating a complex environment characterized by economic instability, shifts in global politics, disruptions from AI, and increased demands from both investors and regulators. The pressing issue is…
The Evolution of Third-Party Management: Are You Keeping Up?
Table of Contents If you ask five individuals to define third-party management, you will probably receive five distinct interpretations. This variation is not due to a lack of clarity in…
New CrashStealer malware poses as Apple crash reporting tool
A new macOS information-stealing malware called CrashStealer pretends to be Apple’s crash-reporting tool to steal credentials, keychain data, and crypto wallets. Malware researchers started tracking the malware in May, when…
Hackers backdoor Jscrambler npm package with infostealer malware
The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package that has been downloaded almost 1,500 times. The malicious Jscrambler package…
Japan’s largest taxi operator shuts systems after cyberattack
Japan’s largest taxi operator, Nihon Kotsu, announced that its systems were compromised in a cyberattack, forcing the company to shut down part of its infrastructure. The incident occurred over the…
New Ghost Phishing Wave Is Breaking Traditional Email Security
A recent EvilTokens campaign targeting businesses across the US and Europe is exposing a new email security blind spot. This “ghost phishing” technique keeps the malicious page hidden until it…
New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware
AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will sometimes hand back a real-sounding name for a project that…
Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks
A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in prison in the U.S. for their role in conspiring with the now-defunct BlackCat ransomware…
Former ransomware negotiator gets 4 years for BlackCat attacks
A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks. The FBI linked the BlackCat…