The Unseen Threat: DNA as Malware

Maryam Shoraka • December 10, 2025

Researchers demonstrated that it is feasible to encode executable payloads into synthetic DNA that, once sequenced and processed, could trigger malware in sequencing software. When a vulnerability in a sequencer becomes a vulnerability in national health or food security, the stakes are existential.

Endpoint Security

Feds Fumble Cisco Patches as China-Linked Hackers Strike

Printer Driver Updater Flaws Could Usher in Poisoned Updates

Data Privacy

Wi-Fi Beamforming Tech Can Identify Individuals by Gait

Latest

Advanced SOC Operations / CSOC

Harness Nets $240M at $5.5B Valuation to Advance DevSecOps

Michael Novinson • December 11, 2025

With $200 million in Series E funding and a new $5.5 billion valuation, Harness will scale its AI-powered platform for security, compliance and reliability in software development. The investment will support R&D into AI agents, testing, cost optimization and security for AI workloads.

Fraud Management & Cybercrime

Checkmarx Purchases Tromzo to Boost AI Security Automation

Michael Novinson • December 9, 2025

Checkmarx acquired AI security startup Tromzo to jumpstart its roadmap for agentic application security. The deal gives Checkmarx a ready-built platform and team focused on enterprise-grade triage and remediation agents designed to streamline vulnerability management.

Iran Hackers Take Inspiration From Snake Video Game

David Perera • December 2, 2025

Iranian nation-state hackers took inspiration from a mobile phone time-killing mainstay, say security researchers who spotted hackers downloading malware masquerading as the Snake video game. A callback to the game isn't nostalgia, say researchers at Eset.

Endpoint Security

'Cyber Issue' Leads to FDA Recall of Baxter Respiratory Gear

Marianne Kolbasuk McGee • December 1, 2025

The Food and Drug Administration is warning that Life 2000 - an at-home ventilation system built by medical device maker Baxter - has been permanently recalled due to a cyber issue that could allow individuals with physical access to tamper with the gear's life support settings.

Cyberwarfare / Nation-State Attacks

As Space Becomes Warfare Domain, Cyber Is on the Frontlines

Shaun Waterman • November 27, 2025

Space is becoming a domain of warfare, with private sector companies' planet-side infrastructure on the front lines - and the first shots will likely be fired in cyberspace, a senior U.S. intelligence official warned this month. "If someone owns the ground station, they own the satellite."

Artificial Intelligence & Machine Learning

Turning to AI to Safeguard Critical Infrastructure

Michael Novinson • November 13, 2025

AI can improve anomaly detection in power systems by combining model precision with human expertise. But Yaniv Harel of the cyber center at Tel Aviv University warns that attackers exploit can AI's rapid evolution and target unsecured training data, creating new risks for critical infrastructure.

3rd Party Risk Management

Third-Party Risk Fuels Regulatory Uncertainty in OT Security

, Brian Pereira • November 12, 2025

Third-party risks are creating new challenges for critical infrastructure providers, and that could lead to new regulations for securing cyber-physical systems, said Sean Tufts, field CTO at Claroty. Claroty's recent survey shows that cyber professionals are facing an uncertain regulatory landscape.

Governance & Risk Management

Cyber Physical Systems Face Rising Geopolitical Risks

Brian Pereira • November 4, 2025

Global conflicts and tariff wars provide new opportunities for cyber adversaries, especially those targeting operational technology systems. Now attackers are focusing on fragile supply chains. Claroty researchers predict attackers will breach at least one major cyber-physical system in the next year.

Cybercrime

Breach Roundup: Hackers Probe Canada's Critical Infrastructure

Anviksha More • October 30, 2025

This week, critical infrastructure breaches in Canada, a Swedish grid operator breached, an Australian guilty of selling cyber exploits, Gmail wasn't breached, F5 projected a revenue dip, PhantomRaven targeted developers, a Pakistan-linked actor targeted India and Dentsu confirmed a data breach.

Next-Generation Technologies & Secure Development

Francisco Partners to Buy Apple Security Firm Jamf for $2.2B

Michael Novinson • October 29, 2025

Francisco Partners agreed to purchase Jamf for $2.2 billion just three months after the Apple management and security vendor laid off 6.4% of its workforce. The $13.05-per-share offer will provide Jamf with greater financial flexibility to accelerate growth and expand through innovation and M&A.

Security Operations

Palo Alto Networks Bets Big on Agentic AI

Michael Novinson • October 28, 2025

With new products set to launch, Palo Alto Networks is expanding its AI cybersecurity footprint. Chairman and CEO Nikesh Arora introduced the AgentiX platform, a retooled cloud approach, identity enhancements and a deal making Palo Alto the core security provider for Oracle Cloud.

'Herodotus' Android Trojan Mimics Human Sluggishness

Greg Sirico • October 28, 2025

Android malware advertised as "Herodotus" on cybercrime forums injects a randomized pause of up to three seconds whenever a hacker bypasses the keyboard on an infected device to enter account credentials. Systems that rely on indicators such as input timing may wave through the transaction.