ISMG Editors: Cyber Backlash Over the US Ban on Anthropic AI

Anna Delaney • June 19, 2026

In this week's panel, four ISMG editors discussed the fallout from U.S. restrictions on Anthropic's most advanced AI models, the growing debate over frontier AI versus smaller models in cybersecurity and a preview of key themes emerging from upcoming ISMG roundtables.

Critical Infrastructure Security

Cyber Resilience Summit Dallas Prioritizes Risk Management

Latest

Fraud Management & Cybercrime

North Korean IT Workers Try, Try, Try Again

Greg Sirico • June 19, 2026

North Korean IT worker scammers flooded hundreds of thousands of U.S. companies with applications in 2024 and 2025, appropriating identities and using AI to infiltrate technology sector. Nisos began looking into the scam after a suspected North Korean applied for a lead remote AI architect role.

Legislation

NDAA Drafts Bolster Contractor Cyber, AI Rules

Chris Riotta • June 19, 2026

The U.S. House and Senate advanced separate versions of the fiscal year 2027 National Defense Authorization Act, tightening cybersecurity requirements for defense contractors while setting new guardrails on the Pentagon's use of artificial intelligence.

Data Breach Notification

ShinyHunters Threatens to Leak Amazon One Medical Records

Marianne Kolbasuk McGee • June 19, 2026

Prolific digital extortion gang ShinyHunters is threatening to dump on the darkweb 8.8 terabytes of data it allegedly stole from One Medical, a unit of Amazon that provides onsite and virtual primary care services for employees of more than 8,500 U.S. clients.

Governance & Risk Management

Critical Splunk Vulnerability Actively Exploited

Tiffany Wang • June 19, 2026

A disclosed Splunk Enterprise vulnerability, CVE-2026-20253, is under active exploitation and can be chained into unauthenticated remote code execution, prompting a CISA KEV listing and urgent patching guidance for organizations relying on the platform for security operations.

Data Privacy

HIPAA's No Joke: Gag Gift Firm's Health Plan Pays $450K Fine

Marianne Kolbasuk McGee • June 19, 2026

The employer-sponsored health plan of novelty merchandise retailer Spencer Gift has paid a $450,000 HIPAA penalty and agreed to implement a corrective action plan to resolve findings of a federal breach investigation into a 2021 attack by now-defunct ransomware gang Conti.

Artificial Intelligence & Machine Learning

France and Germany Boost Digital Sovereignty Push

David Meyer • June 19, 2026

Europe's push for technological sovereignty continues to accelerate, with France and Germany agreeing a common position and Paris announcing a fund totaling 13 billion euros - $14.9 billion - for French and European tech firms. France has been keen on tech sovereignty for quite some time.

Artificial Intelligence & Machine Learning

New OpenAI Method Forecasts AI Risks Before Deployment

Emilia David • June 19, 2026

OpenAI says a new testing method called Deployment Simulation can better predict how AI models behave after deployment by using real user conversations rather than synthetic benchmarks. But researchers found models often detect when they are being tested, raising questions about the reliability of traditional safety...

Cybercrime

Klue Confirms OAuth Token Theft Led to Salesforce Data Heist

Mathew J. Schwartz • June 19, 2026

Marketing intelligence platform Klue confirmed an attacker breached its infrastructure, saying they used "a compromised legacy credential" to obtain OAuth access tokens for integrated services and stole data directly from Klue customers' Salesforce and Gong instances.

Critical Infrastructure Security

Experts Warn of 'Mismatch' in US Response to OT Hacking

Shaun Waterman • June 19, 2026

A cyberattack of any significant scale against operational technology in America's vital infrastructure and services would almost immediately overwhelm the online and offline resources available to responders, experts said this week.

Cybercrime

Cybercrime Initial Access Service SocGholish Disrupted

Mathew J. Schwartz • June 19, 2026

Long-running initial access service provider SocGholish, tied to Russian cybercrime stalwart Evil Corp, has been disrupted by law enforcement, which seized 106 botnet servers and cleaned 15,000 legitimate WordPress sites subverted by the group to launch ClickFix attacks pushing malware downloaders.

Cybercrime

Multimillion-Dollar Settlement Reached in MCNA Dental Hack

Marianne Kolbasuk McGee • June 18, 2026

MCNA Dental, one of the largest providers of U.S. government-sponsored dental benefits to children, has agreed to a proposed multimillion dollar settlement to resolve class action claims stemming from a 2023 LockBit ransomware attack and data theft that affected nearly 9 million people.

Cybercrime

Breach Roundup: ShinyHunters Leaks 26M MSG Records

Pooja Tikekar • June 18, 2026

This week, ShinyHunters leaked alleged Madison Square Garden data, a U.S. senator pressed CISA on regional staffing cuts, an Arch Linux supply-chain attack, Mackay Sugar began recovery from a ransomware attack, Novo Nordisk faced dueling breach claims - and more compelling cybersecurity news.