New York City CTO Shares Blueprint for Lasting AI Governance

Jennifer Lawinski • December 10, 2025

New York City gets a new mayor on Jan. 1, and while no one knows Zohran Mamdani's plans for using artificial intelligence, the city's AI Action Plan will ensure a strong foundation for innovation, city Chief Technology Officer Matthew Fraser told attendees at The AI Summit in Manhattan on Wednesday.

Artificial Intelligence & Machine Learning

Utilities Warn US Grid at Risk as Federal Cyber Funds Dry Up

Latest

Advanced SOC Operations / CSOC

Harness Nets $240M at $5.5B Valuation to Advance DevSecOps

Michael Novinson • December 11, 2025

With $200 million in Series E funding and a new $5.5 billion valuation, Harness will scale its AI-powered platform for security, compliance and reliability in software development. The investment will support R&D into AI agents, testing, cost optimization and security for AI workloads.

Artificial Intelligence & Machine Learning

It's Time to Rethink the Centralized SIEM Model

Rahul Neel Mani • December 10, 2025

Threat detection systems have traditionally aggregated telemetry into a single repository, but that model can no longer keep pace with the scale, cost and diversity of enterprise security data, said Eli Rozen, co-founder and CTO at Vega.

Black Hat

Ransomware Victim Warning: The Streisand Effect May Apply

Mathew J. Schwartz • December 10, 2025

Bad news for any organization that's ever paid a ransom in a bid to avoid their breach coming to light, or for a promise from attackers to delete stolen data, with a study of seized LockBit data finding that victims who paid a ransom were more likely to see the attack get detailed in the media.

Data Breach Notification

Drug R&D Firm Facing Costs, Lawsuits in Alleged Qilin Attack

Marianne Kolbasuk McGee • December 10, 2025

Drug research firm Inotiv in a filing with federal regulators said it is still evaluating the financial and operational impact of an August cyberattack that's linked to ransomware gang Qilin. The company is also notifying nearly 10,000 people whose data was allegedly stolen in the incident.

AI-Based Attacks

Experience Really Matters - But Now You're Fighting AI Hacks

Brandy Harris • December 10, 2025

AI-based attacks will come faster and the sequence of activities will be less predictable. Cyber defenders are skilled in network analysis, incident response and cloud or identity management, but in the face of AI-based attacks, they need new skills, tools and defensive tactics.

Endpoint Security

The Unseen Threat: DNA as Malware

Maryam Shoraka • December 10, 2025

Researchers demonstrated that it is feasible to encode executable payloads into synthetic DNA that, once sequenced and processed, could trigger malware in sequencing software. When a vulnerability in a sequencer becomes a vulnerability in national health or food security, the stakes are existential.

Agentic AI

AI Agents Drive Faster, Smarter Vulnerability Exploits

Rahul Neel Mani • December 9, 2025

AI-generated code expands the attack surface as attackers use autonomous agents to find and exploit flaws in hours. Snir Havdala, co-founder and chief product officer at Zafran Security, said attackers build specialized agents that handle reconnaissance, exploitation and rapid adaptation.

AI-Based Attacks

AI Is Driving a Shift in Targeted Email Attacks

Rahul Neel Mani • December 9, 2025

Cybercriminals are using AI to craft tailored email-based attacks that bypass traditional defenses. This shift to targeted email compromise and rising volumes of sophisticated tactics have placed new pressure on organizations, says Neal Bradbury, chief product officer at Barracuda.

Hospice Firm, Eye Care Practice Notifying 520,000 of Hacks

Marianne Kolbasuk McGee • December 9, 2025

Two specialty healthcare providers - a Florida-based firm that provides hospice services in several states and a Pennsylvania-based eye care practice - are notifying nearly 520,000 people that their sensitive health information was compromised in separate hacking incidents.

Application Security

Clover Raises $36M to Automate Product Security Reviews

Michael Novinson • December 9, 2025

With a $36 million investment, Clover Security plans to expand its suite of AI agents that automate security reviews and improve collaboration with developers. The company says this proactive approach helps manage risks introduced by AI-driven software creation.

Application Security

Context-Driven Security Fixes Root Causes, Not Alerts

Michael Novinson • December 9, 2025

Accurate data and operational context are essential for security teams to identify root causes and deploy effective fixes in cloud environments, says Gil Geron, co-founder and CEO, Orca Security. He explains how AI-driven insights can bridge longstanding gaps between security and engineering teams.

Artificial Intelligence & Machine Learning

European Commission Probes Google AI Summaries

Akshaya Asokan • December 9, 2025

Google faces a fresh probe into its competitive practices after the European Union said it will investigate the search engine giant's propensity to convert web content into fuel for its artificial intelligence models. The commission said the investigation is a "matter of priority."