Latest cybersecurity reporting from selected sources.

Threat Actor Silently Forwarded Sensitive Emails Matching Strategic TopicsGoogle says Chinese espionage group UNC6508 compromised REDCap environments at North American research institutions, deployed custom malware, stole credentials and covertly forwarded strategically relevant emails through abused compliance rules to support long-term intelligence collection.

Datos Insights' Serpil Hall on Using Predictive AML Tools to Support ComplianceInstant payments are reshaping financial crime controls as speed and the irreversibility of transactions strain anti-money laundering compliance programs. While many assume real-time AML means faster processing, this approach can increase risk, said Serpil Hall, strategic advisor at Datos Insights.

RegScale's Dale Hoak on How Automating Telemetry Data, AI Improves ResilienceCompliance automation is evolving from a checkbox task to a strategic asset. RegScale's Dale Hoak said teams that automate controls and evidence collection not only strengthen security but also cut costs, enhance agility and gain real-time visibility across the risk and compliance landscape.

Cyber Leaders Address AI Threats, Compliance Resilience, Zero TrustFrom AI‑driven fraud schemes to tightening regulations and identity threats, ISMG's New York Fraud Prevention and Financial Cybersecurity Summits brought together CISOs, investigators and risk leaders to share practical strategies for strengthening defenses and building true resilience.

OTsec Canada Chairman on Balancing Wellness, Collaboration and ComplianceOrganizations defending critical infrastructure must shift from compliance-focused strategies to holistic resilience. Ahead of the OTsec Canada Summit, Énergir CISO Martin Laberge outlines why people-first leadership and national coordination are essential for OT security resilience.

Jumio's Joe Kaufmann on How CPOs Drive Value by Aligning Privacy With BusinessPrivacy leaders are taking on strategic roles as artificial intelligence and data protection laws evolve. Jumio's Global Privacy Head Joe Kaufmann said chief privacy officers now help build data trust, manage compliance and enable business growth through responsible data use.

Financial Institutions Break Down Silos to Combat Faster, AI-Powered ThreatsBanks face AI-powered fraud attacks and stricter compliance demands. Unified platforms that integrate security, fraud detection and compliance help institutions respond faster while empowering human analysts to focus on strategic decisions.

Sydney Trains' Maryam Shoraka on Identifying the Blind Spots in OT SystemsIT organizations can apply multiple frameworks to help reduce risk, but relying on them in OT environments could create blind spots. Security leaders must rethink compliance-driven strategies and adapt controls to meet the unique demands of industrial systems, said Sydney Trains' Maryam Shoraka.

ISACA Survey: 51% See Cyber Risk Hike; 46% Expect Regulatory, Compliance ChallengesQuantum technology is still emerging, but experts warn that failing to act now could jeopardize future data security. To safeguard tomorrow's information, organizations must start developing a post-quantum cryptography strategy and upskill their workforce today.

Acquisition Enhances Privileged Session Visibility, Session Replay, Granular AccessJumpCloud’s acquisition of VaultOne enhances its ability to offer secure, auditable privileged access management. With session recording, credential isolation and future integration into JumpCloud’s compliance ecosystem, the move reflects a broader identity and access strategy.

Tailoring Machine Identity Management to Specific Industry NeedsA one-size-fits-all security approach to machine identity management cannot address the unique challenges of different industries. Instead, security strategies should be tailored to meet each industry's specific needs, including access control, continuous monitoring and compliance requirements.

UNSW's Pranit Anand on Personalizing Cyber Awareness ProgramsCompliance programs can be more than tick-box exercises. When aligned with business strategy, cybersecurity awareness efforts become tools for improving continuity, profitability and risk management, said Pranit Anand, chief investigator at UNSW Business School.

OpenText's Jay Mukherjee on a Smart Approach to Protect Data Across Its Life CycleA risk-based framework helps organizations classify and protect sensitive data while simplifying access. Jay Mukherjee, CTO, channels and alliances, APAC at OpenText, recommends embedding security and compliance into data strategies from the start.

How Strong AML and Fraud Prevention Controls Can Differentiate Your Fintech and Help You ScaleAs fintechs and financial institutions navigate an increasingly complex payments ecosystem, robust AML and fraud prevention controls are no longer just a compliance necessity—they’re a strategic advantage. Discover how risk-based frameworks, intelligent detection systems, and stronger partnerships can enhance trust, streamline operations, and safeguard against evolving financial crime threats.

Afni CISO Brent Deterding on Strategic Importance of Privileged Access ManagementImplementing PAM helps businesses avoid costs, increase efficiency, enhance client satisfaction, enable sales and ensure compliance, said Brent Deterding, CISO at global contact center firm Afni. "Security needs to enable the business," he said.

SIEM Provider Focuses on Acquisitions, Partner Channels, European Union ComplianceNew Logpoint CEO Mikkel Drucker is leading the charge for profitable growth with a strategy centered on acquisitions, expanding partner channels and adhering to strict European Union compliance standards. The focus is on enhancing platform capabilities to serve the midmarket.

Agency Is Surveying Previous Auditees to Reassess Dormant Audit ProgramAs U.S. federal regulators fine-tune a strategy to push the healthcare sector into a stronger cybersecurity posture, they are also dusting off a HIPAA compliance audit program that's been dormant for the last seven years. A new round of HIPAA audits for regulated entities is in the works.

The Agency Is Surveying Previous Auditees to Reassess the Dormant ProgramAs U.S. federal regulators fine-tune a strategy to push the healthcare sector into a stronger cybersecurity posture, they appear to be dusting off a HIPAA compliance audit program that's been dormant for the last seven years. Is a new round of HIPAA audits for regulated entities on the horizon?