https://www.tiktok.com/@cisomarketplace
Update to our October 2025 coverage: The insider threat case that shocked the defense industry has reached its conclusion. Peter Williams, the former general manager of L3Harris's Trenchant cyber division, has been sentenced to 87 months (seven years) in federal prison for selling highly sensitive cyber exploits to
In what may be one of the most creative abuses of legitimate cloud services yet discovered, Chinese state-sponsored hackers have been using Google Sheets as command-and-control (C2) infrastructure to coordinate a global espionage campaign spanning four continents. Google's Threat Intelligence Group (GTIG), working with unnamed industry partners, has
Spain's Guardia Civil has completed the takedown of "Anonymous Fénix," a domestic hacktivist group that launched a sustained campaign of cyberattacks against government ministries, political parties, and public institutions — capping a two-year investigation with the arrest of all four key members. The operation, announced on February
Amazon's threat intelligence team exposes a disturbing new template for AI-augmented cybercrime — and why your security fundamentals may be your only real defense. KEY FACTS AT A GLANCE600+ FortiGate firewalls compromised across 55+ countriesCampaign ran January 11 – February 18, 2026 (38 days)No zero-day exploits used — only misconfigurations
When an AI decides to "delete and recreate" your production environment, who takes the blame? Executive Summary Amazon's agentic AI coding tool Kiro caused a 13-hour AWS outage in December 2025 after autonomously deciding to "delete and recreate" a production environment—then Amazon blamed
The largest World Cup in history brings unprecedented cyber risk across three nations Executive Summary Mexico faces up to 55 million additional cyberattack attempts linked to the 2026 FIFA World Cup, according to cybersecurity firm SILIKN. The tournament—the largest in FIFA history with 48 teams across 16 cities in
Executive Summary The South Carolina Critical Infrastructure Cybersecurity (SC CIC) program experienced significant expansion and operational impact in 2025. Established in 2017 to bridge cybersecurity gaps for sub-state level infrastructure, the SC CIC now serves as a central hub for intelligence sharing and proactive defense for 326 participating organizations. Critical
A 20-year-old Spanish national is facing cybercrime charges after allegedly gaming a hotel booking platform's payment validation system to reserve luxury hotel rooms for as little as one euro cent — while the actual room rates ran up to €1,000 per night. Spanish National Police arrested him mid-stay
On February 19, 2026, a federal judge in Washington, D.C., sentenced Oleksandr Didenko, 29, of Kyiv, Ukraine, to 60 months in federal prison for orchestrating one of the most operationally sophisticated North Korean IT worker infiltration schemes ever prosecuted in the United States. The case, announced by U.S.
The FBI arrested three Silicon Valley engineers yesterday following a federal grand jury indictment charging them with conspiring to steal trade secrets from Google and other leading technology companies — and allegedly transferring that confidential data to Iran. The case, prosecuted by the U.S. Attorney's Office for the
Leaked technical documents expose "Expedition Cloud" — a secret training platform where Chinese operatives practice attacks against replicas of foreign power grids, energy systems, and transportation networks. Meanwhile, the Typhoon family of threat actors has pre-positioned inside American critical infrastructure for years, waiting for the order to strike. Executive
The fast-casual chain has now suffered three major data breaches since 2018—and the lawsuits are piling up When does a data breach stop being an "incident" and start being institutional negligence? For Panera Bread, that question isn't hypothetical anymore. It's the central thesis