CFOtech US - Technology news for CFOs & financial decision-makers
United States

Data exfiltration Stories

American Stories

Data exfiltration stories

Corelight launches AI tools for faster, auditable SOCs
Malware

Corelight launches AI tools for faster, auditable SOCs

Regulated security teams get auditable AI assistance as Corelight's new tools aim to speed triage without losing traceability.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Global Stories

Data exfiltration stories

KnowBe4 adds browser extension to curb shadow AI use
Data Protection

KnowBe4 adds browser extension to curb shadow AI use

The browser add-on gives security teams real-time ways to warn or block staff from sending company data to unsanctioned AI tools.

By Raphael Veloso • 4 min read • This month
Bitdefender launches AI Guardian beta for Mac agents
Endpoint Protection

Bitdefender launches AI Guardian beta for Mac agents

Mac developers using autonomous agents now get a free beta tool that blocks risky actions before tools, files or credentials are exposed.

By Mara Sugue • 3 min read • This month
Ransomware gangs steal 896 terabytes, Zscaler says
Malware

Ransomware gangs steal 896 terabytes, Zscaler says

Data theft is now driving ransom demands, with average payments rising and attackers increasingly targeting senior staff at exposed companies.

By Sofiah Nichole Salivio • 3 min read • Last month
Check Point & NVIDIA add real-time AI agent safeguards
Network Security

Check Point & NVIDIA add real-time AI agent safeguards

Firms deploying AI agents may gain extra protection as the new setup can block risky actions before they reach systems, in under 100 milliseconds.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Red Heron exploits Gitea flaw, uncovers SIXZUT rootkit
Malware

Red Heron exploits Gitea flaw, uncovers SIXZUT rootkit

Attackers turned a newly disclosed Gitea flaw into automated intrusions within days, hitting systems in five countries and exposing source code and secrets.

By Raphael Veloso • 4 min read • Last month
Netskope launches control to block risky AI agent actions
Network Security

Netskope launches control to block risky AI agent actions

Many firms still cannot stop AI agents from causing damage before execution, leaving systems exposed to production outages and data loss.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Blackpoint adds identity threat tools to CompassOne
Data Protection

Blackpoint adds identity threat tools to CompassOne

The update gives Microsoft 365, Google Workspace and Cisco Duo users faster containment and clearer evidence as identity attacks rise.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Google warns AI is reshaping cyber attacks & defences
Data Protection

Google warns AI is reshaping cyber attacks & defences

Attackers are exploiting AI tools to speed intrusions and drain cloud resources, pushing defenders towards machine-speed security operations.

By Sean Mitchell • 4 min read • Last month
Bank blocks confidential data leaks to public AI tools
Data Protection

Bank blocks confidential data leaks to public AI tools

Hundreds of attempted uploads were stopped as a regional investment bank moved to curb analysts' use of public AI tools for sensitive data.

By Karen Joy Bacudo • 4 min read • Last month
AI security incidents expose new criminal tradeoffs
Malware

AI security incidents expose new criminal tradeoffs

Criminals are increasingly using AI for ransomware and credential theft, while flaws in test models are exposing production systems and data.

By Joseph Gabriel Lagonsin • 5 min read • Last month
Mandiant warns of AI agents fuelling new attack risks
Software-as-a-Service

Mandiant warns of AI agents fuelling new attack risks

Autonomous systems are now creating fresh avenues for code theft, remote execution and runaway cloud spending, Mandiant says.

By Sean Mitchell • 3 min read • Last month
CrowdStrike links PhantomRaven malware to bug bounty hunter
Malware

CrowdStrike links PhantomRaven malware to bug bounty hunter

The stealer's use of typosquatted npm packages has raised fears that bug bounty channels are being abused to monetise stolen developer data.

By Sean Mitchell • 4 min read • Last month
Proofpoint expands insider-risk tools to Microsoft 365
Data Protection

Proofpoint expands insider-risk tools to Microsoft 365

Investigators will get a fuller audit trail as the software links Microsoft 365 activity and AI prompts with emails, files and logs.

By Sean Mitchell • 4 min read • Last month
Google warns of AI-powered cyberattacks in live ops
Malware

Google warns of AI-powered cyberattacks in live ops

Defenders now have minutes, not hours, as attackers use agentic AI to automate credential theft, scanning and extortion across live operations.

By Sean Mitchell • 5 min read • Last month
Zscaler launches Agentic SOC to fight AI-driven attacks
Digital Transformation

Zscaler launches Agentic SOC to fight AI-driven attacks

Security teams under pressure from faster intrusions can now use Zscaler's new platform to spot and contain AI-driven attacks at machine speed.

By Sean Mitchell • 4 min read • Last month

Stories from Other Regions

Data exfiltration stories

Canada faces ransomware rate more than twice global
Software-as-a-Service

Canada faces ransomware rate more than twice global

Canadian firms are being hit by ransomware at 18.2% versus a 9.0% global average, with web-delivered attacks now overtaking email.

By Joseph Gabriel Lagonsin • 4 min read • Last month