Cashing Out: ATM Jackpotting Attacks Surging Across US

Mathew J. Schwartz • February 20, 2026

Malware-wielding criminals "jackpotted" ATMs across the United States last year to walk away with $20 million thanks to "cash-out" attacks. Tracking that collective haul, the FBI said such attacks are on the rise, and urged operators to implement a range of physical and hardware-level defenses.

►

Agentic AI

Face-Swapping Tools Pose Elevated 'Know Your Customer' Risks

Latest

Fraud Management & Cybercrime

Massiv Attack: Android Trojan Targets IPTV Users

Greg Sirico • February 19, 2026

Security researchers warn of "Massiv," an Android Trojan - disguised as an IPTV app - targeting users who sideload streaming apps. The malware enables screen capture, overlays and credential theft - and may soon be marketed on criminal underground forums as malware as a service.

Anti-Money Laundering (AML)

Bretton AI Gets $75M to Use AI for Financial Crime Compliance

Michael Novinson • February 12, 2026

Bretton AI has raised $75 million in Series B funding led by Sapphire Ventures to scale AI agents for anti-money laundering sanctions and KYC compliance. CEO Will Lawrence says the company is targeting large banks with automation designed to reduce manual investigations and improve auditability.

Data Governance

Reco Secures $30M as Enterprises Struggle With Governing AI

Michael Novinson • February 10, 2026

Reco's $30 million Series B round will fuel expansion of its AI SaaS governance platform as enterprises adopt generative AI at scale. CEO Ofer Klein says traditional security tools can't keep up with the explosion of AI agents embedded across SaaS environments.

Data Loss Prevention (DLP)

Zscaler Purchases SquareX to Secure Browsers Without Agents

Michael Novinson • February 6, 2026

Zscaler has acquired SquareX to deliver browser security through extensions rather than endpoint agents or stand-alone browsers. CEO Jay Chaudhry said the approach speeds deployment, improves security for unmanaged devices and accelerates time-to-market by up to a year.

Artificial Intelligence & Machine Learning

StrongDM Acquisition Expands Delinea's Cloud PAM Scope

Michael Novinson • January 16, 2026

Delinea's acquisition of StrongDM will combine strengths across legacy, cloud-native and developer-first infrastructure. The move supports just-in-time privilege delivery and AI agent access, delivering unified policy enforcement across IT, developer and machine users.

Access Management

JumpCloud Grows Presence in Brazil With MSP MacSolution Buy

Michael Novinson • January 8, 2026

JumpCloud has acquired MacSolution, a longtime partner and its largest MSP in the Americas, to enhance global service delivery and deepen its IT modernization capabilities. The move positions Sao Paulo, Brazil, as a strategic hub and strengthens support for partners and customers in Latin America.

Cybercrime

RondoDox Botnet Exploiting Devices With React2Shell Flaw

Akshaya Asokan • January 2, 2026

Security firm CloudSEK has uncovered a botnet campaign that is exploiting the React2Shell vulnerability in the Meta-developed, open-source React framework across a variety of devices since December. The security firm attributed the campaign to RondoDox.

Encryption & Key Management

Why 47-Day TLS and SSL Certificate Renewal Cycles Alarm CIOs

Sandhya Michu • January 2, 2026

Moving to 47-day TLS and SSL certificate renewal cycles by 2029 will turn certificate management into an enterprise risk. "Automation and crypto-governance are now board-level imperatives. Enterprises can prepare for continuous renewal cycles without losing resilience," says Sectigo CEO Kevin Weiss.

Cybercrime

2025 in Health Data Breaches and Predictions for 2026

Marianne Kolbasuk McGee • December 30, 2025

If 2025 lacked a signature attack, hundreds of hospitals, health systems, clinics, physician practices, business associates and other vendors nonetheless experienced breaches in 2025 that cumulatively affected tens of millions of Americans. Hackers will try again harder in 2026.

Cryptocurrency Fraud

Cryptohack Roundup: FCA Outlines UK Crypto Rules

Rashmi Ramesh • December 25, 2025

This week, the U.K. FCA mapped a path to U.K. crypto regulation, iComTech promoter sentenced in Ponzi case, the U.S. SEC sought public company bans for former FTX and Alameda executives, a trader lost $50M in USDT in an address poisoning scam and a Brooklyn man indicted over $16M Coinbase phishing scam.

Artificial Intelligence & Machine Learning

AI Transforms MDR for Expanding Enterprise Environments

Tom Field • December 23, 2025

Gaurav Sheth of Kroll says modern MDR must pair AI, identity telemetry and machine-speed response to cut business impact as organizations defend growing IoT and OT ecosystems.

Identity & Access Management

Cyderes Bets on Lucidum to Drive AI-Backed Identity Security

Michael Novinson • December 16, 2025

Cyderes has acquired Lucidum to expand its identity threat detection capabilities. Lucidum’s unique tagging and data integration will strengthen Cyderes' AI engine, enabling earlier detection of threats and human risk-based response by unifying off-SIEM telemetry with identity data.