NATO allies converge on the law of cyber operations
A new CCDCOE analysis maps where NATO allies agree on international law in cyberspace, finding 27 of 32 members on the record and a common baseline taking shape from sovereignty…
The negotiator was the leak: insider who betrayed ransomware victims gets 70 months
Federal prosecutors called Angelo Martino a double agent: hired to negotiate with BlackCat, he armed the attackers with his clients' insurance limits while five victims paid $75.3 million, court records…
Why a single Signal recovery key is a preservation problem
An FBI and CISA update warns that Russian intelligence operators now coax Signal users into handing over the backup recovery key, exposing the account's backed-up message history and turning encrypted…
Europe’s critical sectors are maturing, but seven still sit in ENISA’s risk zone
ENISA’s third NIS360 report finds rising cybersecurity maturity across Europe’s high-criticality sectors, but seven sectors remain in the risk zone as NIS2 implementation, supply-chain exposure, and SME resilience challenges continue…
When the worm targets the assistant: Miasma turns AI coding agents into the trigger
GitHub disabled 73 Microsoft repositories after the Miasma campaign re-compromised Azure's durabletask project, while researchers separately documented Miasma payloads that can detonate when developers open affected repositories in AI coding…
Glasswing widens: Anthropic puts Mythos inside power, water and hospital operators across more than 15 countries
Anthropic expanded Project Glasswing beyond its roughly 50 initial partners to a new cohort of approximately 150 organizations in more than 15 countries, pushing its restricted Claude Mythos Preview model…
Canvas breach moves from disclosure to demand as ShinyHunters sets May 12 deadline
ShinyHunters defaced Canvas login pages Thursday and set a May 12 deadline, putting Instructure's claimed 275-million-record haul at the center of FERPA, GDPR and litigation-hold work for 9,000 schools.
CISA’s CI Fortify rewrites the disconnection playbook for critical infrastructure
CISA's new CI Fortify initiative tells U.S. critical infrastructure operators to plan for weeks or months of disconnected operations, reshaping vendor-risk diligence and preservation strategy across regulated sectors.
A 48-month federal benchmark resets the incident-response insider question
Two former cybersecurity professionals, one from Sygnia and one from DigitalMint, were sentenced April 30 to four years each for running BlackCat ransomware against U.S. companies — the first federal…
Data collection in occupied territory: A closer read of Cyber Law Toolkit scenario 35
A close read of the Cyber Law Toolkit's data-collection-in-occupied-territory scenario — what it says about Articles 43 and 64 of the Hague Regulations, Articles 27 and 33 of Geneva Convention…
