The Cactus ransomware gang claims to have stolen 1.5 terabytes of data from Schneider Electric, an OT manufacturer, and posted a sample online as proof. The stolen data reportedly includes US passports and non-disclosure agreements. Shawn Wiora, CEO of Token, warns this could result in a record ransomware payment. He notes that such losses are often due to reliance on outdated MFA technology to counter AI-driven cyberattacks. Schneider Electric confirmed that data from its Sustainability Business Division was compromised during the attack.
AWS wants GuardDuty to automate the first steps of threat investigations
Amazon GuardDuty investigation agent is now in public preview. The feature provides AI-powered investigations of GuardDuty findings, AWS accounts and AWS organizations, helping security teams
