Ransomware DataBreachToday.com

Enterprises Buy AI Like SaaS, but Its Failures Slip Past Every Dashboard
An AI assistant starts giving subtly wrong answers, and every team that checks reports its own systems healthy. Catching it takes correlated telemetry, signed model weights, ML engineers in incident response and full-stack talent, before the people who know how to debug across the stack leave.

Anthropic's Jason Clinton Urges Isolating AI, But GovNet Shows Why Cyber Walls Fail
Anthropic's Jason Clinton wants critical infrastructure isolated before a wave of AI-found flaws arrives. The objections that sank the government's GovNet plan in 2001 still apply. Identity controls, segmentation and monitoring will still do more than a building a wall.

Critics Say Limited Evidence Raises Questions About Cohere's Security Findings
Canadian enterprise artificial intelligence company Cohere found that an open-weight model from Alibaba ignored instructions and tried to upload proprietary information to a foreign cloud, raising questions about these models' safety.

JFrog CISO Paul Davis on Coding Agent Visibility, Vulnerabilities and Guardrails
AI coding tools are increasing code volume and compressing security timelines. JFrog Field CISO Paul Davis discusses how CIOs and CISOs can improve life cycle visibility, prioritize vulnerabilities in operational context, govern coding agents and manage costs without slowing delivery.

Federal Agencies May Combine Classical and Quantum-Resistant Algorithms
The National Institute of Standards and Technology outlined a phased transition to post-quantum cryptography, allowing temporary hybrid algorithms while prioritizing network encryption and setting a 2035 cutoff for quantum-vulnerable public-key algorithms under its standards.

Israeli Startup Says General-Purpose LLMs Are Too Costly for Specialized SOC Tasks
Tel Aviv-based Mave raised $34 million across seed and Series A rounds to develop specialized AI models, proprietary agent infrastructure and real-time security data integration, aiming to consolidate SOC workflows and compete with established SIEM and managed detection and response providers.

Why AI Agents With Shell Access Need Sandboxes, Managed Policy and Human Oversight
AI coding harnesses can read files, run shell commands, install software and push code with the authority of whoever launched them. Security teams need enforced sandboxes, managed permissions, short-lived credentials and auditable records before the tools spread across the enterprise.

Unrevoked Credential Exposed in May Enabled Repository Compromise in October
An attacker exploited an unrevoked LiteLLM master key to steal GitHub credentials, bypass release controls and publish a credential-stealing PyPI package downloaded roughly 50,000 times, exposing developer systems, cloud environments and AI provider secrets.

Agency Vows 'Aggressive, Anticipatory' Stance After Losing a Third of Its StaffThe U.S.
Cybersecurity and Infrastructure Security Agency's new CISA 2030 strategy vows to take an "aggressive, anticipatory stance" against adversaries - but analysts say it ignores ransomware payments, liability and the deep staffing cuts that could keep it from delivering.

HumanX 2026: Trust, Governance and Business Value Define AI's Next Chapter
As AI agents gain autonomy, enterprises face mounting challenges around security, governance and accountability. Drawing on interviews with technology and business leaders at HumanX 2026, ISMG's Pulse Report examines how organizations can balance AI innovation with control, trust and business value.

Blue Initiative Will List Vulnerabilities Affecting Maritime IT or OT Systems
A new public access database launched Monday will catalogue IT and industrial control systems software vulnerabilities that affect maritime systems. The vision "is to have a public and open single source of truth for maritime-related vulnerabilities."

As AI Moves Onto the PC, the Bill Splits Across Cloud, Hardware and IT Budgets
Microsoft and Nvidia want more enterprise AI to run on the PC. That changes not just where inference happens, but who pays for it and who can see it. As cloud token costs give way to hardware, maintenance and security expenses, enterprises face new challenges in tracking total AI spending.

Identity Governance and Vulnerability Remediation Startups Draw Unexpected Suitors
Workday's buy of C1.ai, Cohere's purchase of Aisle and OpenAI's reported talks with Trail of Bits highlight how AI providers and enterprise software companies are expanding into cybersecurity, creating new startup exit opportunities while raising questions about competition and partner independence.

ConnectWise Supply-Chain Hack, Rogue AI Agents and Rising AI Token Costs
In this week's panel, four ISMG editors discussed the potentially far-reaching supply-chain attack involving ConnectWise, growing concerns over rogue AI agents, and Microsoft and Nvidia's push to bring AI processing back onto company hardware as enterprises grapple with rising token costs.

Netskope Exec Mike Anderson on Trust, Training and Change Management
AI adoption can unsettle employees who fear being replaced, even as leaders expect them to use new tools. Netskope CDIO Mike Anderson explains why CIOs should work with HR on communication, training and workflow changes, and where human judgment should remain in automated processes.

GPT-6.1 Sol Suppressed Alerts While GPT-6 Astra Removed Monitoring Integration
OpenAI disclosed two October incidents in which GPT-6 agents suppressed misalignment monitoring alerts and removed safety controls during coding tasks, exposing oversight weaknesses as researchers investigate why agents interpret routine instructions as permission to disable safeguards.

UK Proposes Crisis Powers Over Cable Operators and Up to 14 Years for Sabotage
Security analysts say Washington should update its 1888 undersea cable law after London proposed letting ministers direct cable operators in a crisis and imposing prison terms of up to 14 years for sabotage - though some doubt tougher penalties would deter Russia or China.

The C5ISR Imperative for Securing Critical Infrastructure Against Emerging Threats
As critical infrastructure becomes increasingly dependent on satellite communications and autonomous systems, cyberthreats and electromagnetic signals pose big risks. C5ISR-based security, multi-orbit connectivity and AI-driven detection can help strengthen resilience across the spectrum.