Why the ROI of Enterprise AI Still Eludes Many Firms

Rashmi Ramesh • July 18, 2025

As enterprises pour billions into generative AI, many struggle to translate hype into measurable returns on investment. From data prep costs and hallucination risk to poor implementation and organizational inertia, experts say the real payoff may still be years away.

Security Operations

'Ghost in the Machine' Exploits Spotted in Gigabyte Firmware

Latest

Fraud Management & Cybercrime

Attackers Target Legacy Code in TeleMessage's Signal Clone

Mathew J. Schwartz • July 18, 2025

Attackers are actively attempting to exploit a vulnerability that exists in older versions of the Signal message app clone TeleMessage TM SGNL, built by Smarsh to keep copies of all communications, including the ability to comply with federal record-keeping requirements.

Cryptocurrency Fraud

Crypto ATM Crackdown: British Cops Bust Suspected Operators

Mathew J. Schwartz • July 18, 2025

British authorities are continuing their crackdown on cryptocurrency ATMs being operated inside the country, with police this week announcing the arrest of two suspected operators. Such moves parallel efforts in the U.S., New Zealand and Australia to combat criminal users and scammers.

Anti-Phishing, DMARC

China-Backed Hackers Intensify Attacks on Taiwan Chipmakers

Prajeet Nair • July 17, 2025

Chinese state-aligned hackers have ramped up espionage efforts against Taiwan's semiconductor ecosystem through spear-phishing campaigns. Three distinct threat actors targeted chipmakers, packaging and testing firms, equipment suppliers and financial analysts.

Governance & Risk Management

Golden dMSA Flaw Exposes Firms to Major Credential Theft

Prajeet Nair • July 17, 2025

A critical cryptographic flaw in Windows Server 2025's delegated Managed Service Accounts, or dMSAs, allows attackers to generate passwords for every managed service account across an Active Directory forest and create a backdoor, Semperis researchers found.

Cyberwarfare / Nation-State Attacks

Salt Typhoon Hit National Guard Network in 'Extensive' Hack

Chris Riotta • July 17, 2025

A newly released Department of Homeland Security memo revealed the Chinese cyberespionage group Salt Typhoon infiltrated a state Army National Guard network for nine months in 2024, stealing sensitive military data that could support future targeting of Guard units and cyber defense personnel.

Fraud Management & Cybercrime

Extradited Armenian Tied to Ryuk Ransomware Faces US Trial

Mathew J. Schwartz • July 17, 2025

A 33-year-old Armenian man, Karen Vardanyan, accused of facilitating Ryuk ransomware attacks against numerous organizations, is due to stand trial in the U.S. in August. The FBI said the Ryuk operation earned at least $15 million in cryptocurrency ransom payments from victims.

Data Breach Notification

Dermatology, Imaging Hacks Expose 3.3 Million Patients' PHI

Marianne Kolbasuk McGee • July 17, 2025

A Maryland dermatology practice and a Virginia radiology organization have each reported to regulators separate hacking incidents that in total affected the information of more than 3.3 million patients. The incidents rank among the five largest health data breaches reported in 2025 so far.

Cybercrime

Breach Roundup: Fashion House Louis Vuitton Confirms Breach

Anviksha More • July 17, 2025

This week: Louis Vuitton and Co-op confirm breaches, unpatched train brake flaw, Barclays fined £42M pounds for financial crime failures, secret U.K. program relocated thousands of Afghans, ex-soldier pleads guilty to hacking, Ukrainian hackers claim hit on Russian drone supplier.

Cryptocurrency Fraud

Cryptohack Roundup: Abacus Market's Suspected Exit Scam

Rashmi Ramesh • July 17, 2025

Abacus Market's suspected exit scam, crypto scammer gets 12 years for dodging restitution, GMX exploiter returns funds, BigOne's $27M hack, Arcadia Finance's $3.5M theft, NZ woman's trial for alleged murder and a DOJ crypto fraud filing's potential unmasking of MoonPay victims.

Cybercrime

Topsy-Turvy Data Breach Reality: Incidents Up, Victims Down

Mathew J. Schwartz • July 17, 2025

Data breaches rage on. In the first half of this year, the Identity Theft Resource Center counted 1,732 total data breaches affecting 166 million people, marking a rise in data breaches but a decline in victims, likely due to a drop in mega-breaches.

Application Security

UK NCSC Announces Software Vulnerability Initiative

Akshaya Asokan • July 16, 2025

The U.K. NCSC will collaborate with industry experts for vulnerability detection and mitigation as part of its latest Vulnerability Research Initiative. The announcement comes on the heels of funding concerns for the U.S. government-based Common Vulnerabilities and Exposures program.

3rd Party Risk Management

North Korea Floods NPM Registry with Malware

Prajeet Nair • July 16, 2025

North Korean threat actors escalated their software supply chain attacks by uploading 67 new malicious packages to the npm Registry as part of the ongoing Contagious Interview campaign. The malware targets open-source JavaScript developers with malware loaders.