How firms are reached from outside and how the way in is closed.

Flaws found with AI, intrusions run by AI agents and shared platforms used as the way in made up October’s incidents. The defences faced inward and the attack did not.

Counting losses that go unreported, the FTC estimates fraud may have cost American consumers up to US$195.9 billion in 2024. Security spending keeps rising but the fraud never has to get past it: it borrows a firm’s name

This week's business data breach roundup: a Stripe merchant credential leak, an Azure enterprise credential theft campaign, and a CRM vendor breach show why domain security and vendor risk matter for owner-run firms.

AssetMark financial data breach exposes Social Security numbers and financial accounts of 570,000 Americans. Delaware North hospitality breach affects thousands more with driver's license exposure.

US cybersecurity agency CISA exposed government credentials via GitHub while ShinyHunters targeted major platforms. Critical week for credential security across sectors.