Latest

►

3rd Party Risk Management

ISMG Editors: Vendor Breaches Expose Healthcare Risk

Anna Delaney  •  April 3, 2026

In this week's panel, four ISMG editors discussed growing cyber risks in healthcare following recent vendor breaches, key takeaways from RSAC Conference and whether the Pentagon's zero trust push is delivering real security benefits or just checking off boxes.

►

Agentic AI

Speed, Judgment and Behavior: AI's Defense Mandate

Tom Field  •  March 31, 2026

Cybersecurity can no longer stop at the system boundary. Organizations must understand how humans and AI agents behave, and intervene before attackers exploit that behavior, says Niloofar Razi, operating partner at Capitol Meridian Partners.

►

Agentic AI

How AI Agents Are Redrawing Enterprise Security Models

Michael Novinson  •  March 28, 2026

Perimeter defense has become obsolete, and as AI agents operate across enterprises with unconstrained access, securing the full data-to-model continuum is the only viable path, says Abhishek Shukla, managing director at Prosperity7 Ventures.

►

Agentic AI

AI-Based Coding Redefines Software Development

Michael Novinson  •  March 25, 2026

Coding agents that once struggled below the surface level of basic web development can now refactor decades-old enterprise code at a speed and scale far beyond traditional teams, says Cisco's Jeetu Patel. He explains how AI-built software and machine-scale defense redefine competitive advantage.

Agentic AI

Surf Raises $57M to Automate Security Hygiene With AI Agents

Michael Novinson  •  March 17, 2026

Surf AI launched an AI-driven platform designed to automate security hygiene tasks across enterprise environments. Backed by $57 million in funding, the company uses AI agents and contextual asset analysis to identify and remediate risks across identities, cloud assets and sensitive data.

Health Sector Braces for Stryker Hack Supply Chain Shock

Marianne Kolbasuk McGee  •  March 16, 2026

An Iranian cyberattack on medical device maker Stryker's internal IT environment does not appear to affect connected products used by the company's healthcare clients. But an outage of Stryker's electronic ordering system could lead to supply chain issues for its customers.

Cancer Center Research Study Hack Affects 1.2M

Marianne Kolbasuk McGee  •  March 4, 2026

An August 2025 ransomware attack on the University of Hawaii Cancer Center's epidemiology division has affected 1.2 million individuals, including personal information such as Social Security numbers of certain research study participants dating back more than 30 years.

CISA Leadership Shakeup Amid DHS Shutdown

Chris Riotta  •  February 27, 2026

The U.S. cyber defense agency is going through a major leadership shakeup - again - following months of staffing turnover, budget cuts and shutdowns. Acting Director Madhu Gottumukkala is moving into a senior strategy role at the Department of Homeland Security, of which CISA is a component.

Data Breach Notification

PayPal Ties Small Data Breach and Fraud to App Coding Error

Mathew J. Schwartz  •  February 23, 2026

Financial services firm PayPal said it discovered a data breach that lasted for six months, exposed some business customers' personal information and led to fraudulent charges. The company said about 100 customers were affected, and that it has fully refunded them for fraudulent charges.

Fraud Management & Cybercrime

Massiv Attack: Android Trojan Targets IPTV Users

Greg Sirico  •  February 19, 2026

Security researchers warn of "Massiv," an Android Trojan - disguised as an IPTV app - targeting users who sideload streaming apps. The malware enables screen capture, overlays and credential theft - and may soon be marketed on criminal underground forums as malware as a service.

Anti-Money Laundering (AML)

Bretton AI Gets $75M to Use AI for Financial Crime Compliance

Michael Novinson  •  February 12, 2026

Bretton AI has raised $75 million in Series B funding led by Sapphire Ventures to scale AI agents for anti-money laundering sanctions and KYC compliance. CEO Will Lawrence says the company is targeting large banks with automation designed to reduce manual investigations and improve auditability.

Data Governance

Reco Secures $30M as Enterprises Struggle With Governing AI

Michael Novinson  •  February 10, 2026

Reco's $30 million Series B round will fuel expansion of its AI SaaS governance platform as enterprises adopt generative AI at scale. CEO Ofer Klein says traditional security tools can't keep up with the explosion of AI agents embedded across SaaS environments.