Scott Ikeda, Senior Correspondent at CPO Magazine

Hacker talking on the phone showing bank staff impersonated in account takeover

FBI Warns Bank Staff Impersonation Is on the Rise, Over 5,100 Account Takeover Cases in 2025

November 28, 2025

The FBI has issued a warning about a spike in financial account takeover crimes, after fielding over 5,100 complaints thus far in 2025. Attackers are commonly impersonating bank staff and mocking up replicas of financial institution websites to obtain credentials, and in some cases are ensnaring victims via legitimate-seeming search engine ads.

Hammer and laptop showing SEC civil actions

Cyber Security News

SEC Civil Actions Against SolarWinds and Its CISO Dismissed With Prejudice

November 26, 2025

Civil actions brought by the SolarWinds Corp and its CISO Timothy Brown have been dismissed with prejudice by the Manhattan federal court handling the case, the end result of a settlement negotiation process that began in July of this year.

Cyber Security News

Google Sues Giant Chinese SMS Phishing Operation That Made Use of US Brand Names

November 24, 2025

Google says that Chinese SMS phishing campaigns have collectively yielded somewhere between 15 million and 100 million stolen credit cards in the US alone. The case names 25 individuals and believes the hackers produced over 100 different fraudulent websites that made use of Google branding.

Vulnerability on screen showing OWASP Top 10 2025

Cyber Security News

OWASP Top 10 2025: Access Control Issues, Security Misconfigurations, Supply Chain Issues Top App Risk List

November 21, 2025

With the first new release since 2021, the one thing that hasn't changed about the OWASP Top 10 is that "broken access control" is still the lead category after all this time, present as a security risk in 3.73% of the apps that were tested.

Hacker and code showing AI agents for cyber espionage

Cyber Security News

Use of AI Agents in Cyber Espionage Expands as Chinese Hackers Leverage Anthropic Tools

November 20, 2025

Anthropic's calls the incident the "first reported AI-orchestrated cyber espionage campaign" and has attributed it with high confidence to a Chinese state-sponsored group it calls GTG-1002. The campaign took place in mid-September and the integration of AI agents for performance of autonomous tasks is described as unprecedented.

Binary code with EU flag showing GDPR privacy law reform

Data Protection News

European Commission Changes to EU Privacy Laws Skewered by Privacy Advocates

November 19, 2025

While the proposed EU privacy law changes seem almost entirely like concessions to big tech desires at first glance, the European Commission is selling them as removement of onerous restrictions on smaller businesses. Critics such as noyb are calling this a "side-show" meant to pass changes that are instead really tailored to the tech industry.

Data Privacy News

Lawsuit Accuses Google AI Assistant of Surreptitiously Accessing Gmail and Messaging Files

November 19, 2025

A lawsuit filed in California is accusing Google's "Gemini" AI assistant of spying on private communications, citing an undeclared change in policy from opt-in to opt-out that took place in October of this year.

Big Ben and Westminster Bridge showing UK cyber resilience bill

Cyber Security News

New UK Cyber Resilience Bill Proposes Much-Needed Upgrades to NIS Regulations 2018

November 18, 2025

The UK has experienced a long string of disruptive cyber incidents, but the announcement of the cyber resilience bill cites attacks on managed service providers as a particular impetus for the overhaul of existing laws.

Hands over shield showing cyber insurance

Cyber Security News

Cyber Insurance Cost Spikes Continue in UK as Annual Numbers Triple

November 18, 2025

A new report from the Association of British Insurers (ABI) has tallied up the cyber insurance claims from 2024 and found that payout numbers more than tripled from those recorded in 2023, with a 230% year-on-year increase.

hacker with screen showing cybercrime gangs retirement

Cyber Security News

World’s Biggest Cybercrime Gangs Change Mind About Retirement, Form Supergroup Instead

November 11, 2025

Scattered Spider, ShinyHunters, and LAPSUS$ are the three groups involved, and have collectively been the most active of the major cybercrime gangs over roughly the past year. The groups all had prior ties via "The Com," a broader collection of cyber criminals that loosely affiliate and come together for singular projects in a fluid way.

FBI Warns Bank Staff Impersonation Is on the Rise, Over 5,100 Account Takeover Cases in 2025

SEC Civil Actions Against SolarWinds and Its CISO Dismissed With Prejudice

Google Sues Giant Chinese SMS Phishing Operation That Made Use of US Brand Names

OWASP Top 10 2025: Access Control Issues, Security Misconfigurations, Supply Chain Issues Top App Risk List

Use of AI Agents in Cyber Espionage Expands as Chinese Hackers Leverage Anthropic Tools

Lawsuit Accuses Google AI Assistant of Surreptitiously Accessing Gmail and Messaging Files

New UK Cyber Resilience Bill Proposes Much-Needed Upgrades to NIS Regulations 2018

Cyber Insurance Cost Spikes Continue in UK as Annual Numbers Triple

World’s Biggest Cybercrime Gangs Change Mind About Retirement, Form Supergroup Instead

Wikimedia: Rogue AI Agents Traced Back to OpenAI Made Unauthorized Edits, Attempted to Compromise Etherpad

A Wave of AI-Powered Cyber Attacks Hits Numerous South Korean Banks, Exposing Sensitive PII

Hackers Abuse Custom GPT Instances on chatgpt.com to Distribute ClickFix Malware

AI Coding Agents Habitually Leak Thousands of Private Developer Screenshots to Public Repositories