Ransomware DataBreachToday.com

The AI Chipmaker's Product Pipeline Is Set, But Longer-Term Strategy Is Not
Nvidia's established AI chip road map, dominant data center market share and $2 trillion order backlog could cushion the impact of Jensen Huang's departure, but the founder's absence raises questions about future product innovation, financing deals and the company's ability to defend its AI lead.

Also: Microsoft 365 Outage, a Wiper Attack on Russian Cloud Provider Beget
This week: eMudhra revoked more certs, Microsoft 365 outage, default password exposed cars apps, Qubole AWS access exploited, Russian cloud service Beget wiper attack. SonicWall patches, a Taiwan hacker used an Ai agent swarm, Fireworks AI confirmed an attack. A hearing care provider data breach.

Canberra Drops Voluntary Approach to AI Safety After OpenAI Agent Hit Medicare
Frontier AI developers would have to tell Australia’s government when their models misbehave under rules Canberra proposed nearly five months after a rogue OpenAI agent got into Medicare files - but officials haven’t said how fast, what counts as an incident or what a violation would cost.

Analysts Weigh How the CEO's Exit Could Reshape Nvidia's Influence on Global AI
Nvidia's outsize, influential and embattled founder and CEO, Jensen Huang, resigned effectively immediately amid an investigation into several affairs, raising questions about the company's future, its influence on other AI companies, policy and competition with China.

Attackers Reused Victims' Webcam Recordings to Deceive Their Contacts
The FBI disrupted cloud infrastructure used by North Korea-linked BlueNoroff in its FaceStealer campaign, which stole at least $400 million in cryptocurrency over 18 months using AI-generated deepfake video calls and malware to steal wallet credentials, record victims' webcams and exploit their trusted contacts to spread the fraud.

Data Center Backlash Threatens AI IPO Dreams and Corporate Sustainability
The midterms gave grassroots data center opponents new political clout. Now hyperscalers face a revolt that could derail expansion plans, drive up enterprise AI costs and threaten trillion-dollar IPOs. CIOs may discover their AI vendors come with environmental baggage.

Security Teams Need AI Literacy and Governance to Reduce Employee-Driven Risk
Employees using unsanctioned AI tools now rank among security teams' biggest concerns. Cybersecurity educators can help close the gap by teaching practitioners how to govern AI use, protect data and connect technical risks with business decisions.

Get Ready for More Hacks on Application Programming Interfaces
Application programming interfaces are often a hackable road to the inside of a corporate network. APIs are the IT "plumbing of our world today," said Alissa Knight, a self-described "recovering hacker." But APIs are getting less secure, not more, she said.

Federal Deadline Follows Report of DeepSeek-Powered Breach at European Telecom
The U.S. cyber defense agency is ordering federal agencies to patch a Cisco vulnerability within two weeks after researchers discovered Chinese-speaking hackers exploiting the flaw through an artificial intelligence model to break into a European telecom.

CHIME Sounds Alarm on Restricting Patient Authorization Checks for Third-Party Apps
CHIME and 17 healthcare organizations warn that potential HIPAA Privacy Rule changes could restrict providers' ability to verify patient authorization for third-party apps, increasing risks of unauthorized disclosures, fraud, regulatory violations and civil litigation.

Deal Would Combine Compliance Evidence With Real-Time AI Agent Monitoring, Blocking
Vanta plans to acquire Israel-based Pillar Security to connect AI governance and compliance evidence with real-time agent discovery, monitoring and enforcement, allowing enterprises to block unauthorized AI actions and verify policy compliance as events occur.

Huang's Affair Is Seen as a Sex Scandal. It Needs a Damage Assessment We Can't Run.
Nvidia's board says it has no reason to believe secrets were compromised after CEO Jensen Huang admitted to an affair with a suspected Chinese spy. A former intelligence officer argues that phrase is the real story: No institution can say where Nvidia's chips went or whether U.S. policy was swayed.

OpenAI Limits New Shutdown Controls to Internal Research Infrastructure
OpenAI added a kill switch for its workflows that will stop artificial intelligence models from pursuing harmful actions, months after the company told lawmakers it would set up the feature for misbehaving agents.

Michael LoSapio Faces Lame-Duck Time Crunch, Partisan Review of Palantir Contracts
U.S. President Donald Trump nominated Palantir Chief Information Security Officer Michael LoSapio to lead the Cybersecurity and Infrastructure Security Agency - a pick that reaches the Senate weeks before Democrats critical of the company’s Homeland Security contracts take control.

Binance Warns Seed Phrases, Private Keys and Credentials Could Be Exposed
A publicly released exploit for the Worse Query iOS sandbox escape allows malicious apps to access other applications' private data without a jailbreak or kernel exploit, potentially exposing cryptocurrency wallet keys, seed phrases and login credentials while raising concerns about Apple's app isolation safeguards.

Steve Kelley Rejects Autonomous Agent Swarms Over Accuracy, Compute Cost Concerns
Expel named former Bitdefender President Steve Kelley CEO, succeeding co-founder Dave Merkel, as the MDR provider expands its Roxy agentic AI assistant to automate SOC triage while retaining human oversight of complex threats, detection accuracy and emerging attack techniques.

Community Commitments Leave Questions About Future AI Compute Capacity
OpenAI is promising to cover power costs and give communities more say over data center construction after an election backlash. The commitments apply to campuses it owns and operates, leaving questions about partner-built capacity and the pace of enterprise AI expansion.