EC-Council News, Trends & Updates

💡Vanderbilt University hit in BYOD ransomware attack, data theft claimed Vanderbilt University is urgently responding to a cyberattack, with the BYOD ransomware gang claiming responsibility. The attackers allege they've encrypted university databases and stolen sensitive student, employee, and research data. This significant breach impacts critical academic operations and confidential information, prompting immediate action from the university. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/vanderbilt-university-hit-in-byod-ransomware-attack-data-theft-claimed/

More than thirty years in cybersecurity. An EC-Council Hall of Fame inductee. An expert spanning security engineering, Zero Trust, AI, and digital forensics. Corey Green joins us on November 18. Register now: https://shorturl.at/Sh2v8 Get to know the speaker: • AI and Cybersecurity Consultant at Evergreen Technology Systems with 30+ years of IT experience • Expertise spans security engineering, security architecture, digital forensics, Zero Trust, AI, vulnerability management, and compliance scanning • Holds CEH, CHFI, and ACISO certifications • Inducted into the EC-Council Hall of Fame in 2025 #CSA #ECCouncil #SOC #AIThreatDetection #AdaptiveDefense

💡Ukraine dismantles crypto scam network that stole €4.3 million Ukrainian law enforcement has successfully dismantled a major cryptocurrency investment scam network. Four suspects were arrested for operating call centers that defrauded victims of over €4.3 million. This significant operation showcases Ukraine's ongoing efforts to combat high-tech financial crime and protect individuals from sophisticated digital fraud schemes. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/ukraine-dismantles-crypto-scam-network-that-stole-43-million/

💡Iris Ohyama data cloud breach exposes info of 7.7 million customers Alert! Japanese manufacturer Iris Ohyama has reported a data cloud breach potentially exposing personal information of 7.7 million customers. Unauthorized access to a third-party cloud service they used led to this incident. If you're an Iris Plaza user, remain vigilant. This highlights ongoing supply chain security challenges. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/

💡 CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands CTM360 exposes rampant fake gift card scams where cybercriminals impersonate major brands and celebrities. These schemes lure consumers with promises of giveaways, then use deceptive verification steps and affiliate networks to collect personal information and trick them into unwanted subscriptions. The goal is revenue generation, with no actual rewards delivered. Stay alert to avoid these traps! Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/ctm360-exposes-fake-gift-card-scams-exploiting-trusted-brands/

2 Days Left! Don’t miss Michael Shost’s session on November 10, 2026, The Autonomous SOC: How Agentic AI Is Reshaping Cyber Defense. Register now: https://shorturl.at/9Itpd Explore agentic AI, autonomous security operations, human oversight, AI-driven decision-making, SOC efficiency, and the roadmap toward an autonomous SOC. #ECCU #Webinar #CyberSecurity #AutonomousSOC #AgenticAI #AISecurity #AIGovernance #CyberDefense

💡Hackers pull off $133 million French bank heist via service provider French cooperative bank Crédit Mutuel Arkéa experienced a major cyberattack, enabling hackers to pull off a $133 million heist through fraudulent transactions. This significant breach, reportedly executed via a service provider, forced the bank to suspend crucial systems. The incident underscores critical cybersecurity risks, especially those involving third-party vendors, for financial institutions. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider/

AI governance policies may look comprehensive on paper. But can organizations prove those policies are actually being followed? Register now: https://shorturl.at/12sb7 As generative and agentic AI become more integrated into business operations, auditors face new challenges in evaluating risks, controls, and accountability. On November 20, Elizabeth Wu, Founder and CEO of Cybersecurity Auditing Technologies, explores how auditors can move beyond documented policies to assess the effectiveness of AI governance through independent examination and objective evidence. #CRAGE #ECCouncil #AIGovernance #ResponsibleAI #AIAuditing

💡Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub 🚨 Security Alert! Claude Code's "Don't Ask Again" feature has exposed user secrets. Passwords and API keys entered in commands were saved word-for-word in project settings files, making them publicly accessible on GitHub. Apiiro discovered 1,122 public copies where anyone can read sensitive data. If you've used Claude Code, your keys might be compromised. Source: [ thehackernews.com ] https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html

Speaker Spotlight! Meet Dr. Sanjay Vaid, Founder and Director of Invocore Consulting Services Pvt. Ltd. Join him on November 16, 2026, for Governing AI Securely: Bridging Infosec, Privacy, and Business Risk. Register now: https://shorturl.at/s3cMD Explore AI governance, cybersecurity, data privacy, enterprise risk management, responsible AI, and digital transformation. #ECCU #CyberSecurity #Webinar #SpeakerSpotlight #AIGovernance #AISecurity #DataPrivacy #ResponsibleAI

💡SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks SonicWall has issued urgent security updates for SonicOS firewalls, addressing seven vulnerabilities. A critical SSL-VPN authentication bypass flaw is among them, actively exploited in attacks. Users are strongly advised to update immediately to patch these serious security holes. Protect your networks by applying these crucial fixes now to prevent unauthorized access and secure your devices. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/

Healthcare cybersecurity goes beyond protecting digital systems. It is about safeguarding patient information, maintaining secure operations, and meeting regulatory requirements. Debi Carr brings her expertise in healthcare cybersecurity and compliance to our November 17 webinar. Register now: https://shorturl.at/CY3NR Get to Know the Speaker: Founder and CEO of DK Carr and Associates LLC, a consulting firm focused on healthcare cybersecurity and compliance Recognized cybersecurity and compliance expert specializing in protecting sensitive healthcare information Experienced in helping healthcare organizations navigate HIPAA requirements and the NIST Cybersecurity Framework Works with small and medium-sized healthcare practices to strengthen data security, maintain secure operations, and achieve regulatory compliance #CCT #ECCouncil #HealthcareCybersecurity #DataProtection #CybersecurityAwareness

💡D-Link warns of multiple zero-days in DGS-3130 Series switches 🚨 D-Link warns of multiple critical zero-day security flaws discovered in its DGS-3130 Series managed Gigabit stackable switches. As these flaws are currently unpatched, D-Link has released essential mitigation measures. Users are strongly advised to implement these steps immediately to protect their networks from potential exploitation. Act fast to secure your systems! Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/d-link-warns-of-multiple-zero-days-in-dgs-3130-series-switches/

From securing NASA Mission Control to co-authoring NIST SP 800-201, Ross A. Leo has spent four decades shaping how information security is practiced. He brings that expertise to November 13. Register now: https://shorturl.at/dI5DR Get to know the speaker: CEO of Cyber Assurance Institute | 40+ years in information security Background spans security consulting, operational risk, healthcare information governance, and professional education Prior engagements include IBM, Computer Sciences Corporation, and Rockwell International 22 years supporting NASA | Program Manager of Security Engineering and Chief Security Architect for Mission Control at Johnson Space Center Former CISO, University of Texas Medical Branch Managed Care Division Co-author of NISTIR 8006 and NIST SP 800-201, Cloud Computing Forensic Reference Architecture Author of The HIPAA Program Reference Handbook | Upcoming book: HIPAA Compliance: From Design to Operations (CRC Press, early 2027) #NDE #ECCouncil #NetworkSecurity #ZeroTrust #Cy

💡FBI, CISA warn of cyberattacks targeting refrigeration systems 🚨 Urgent Cyber Alert from FBI & CISA! Hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide. These malicious cyberattacks threaten to cause widespread food spoilage, significant equipment damage, and serious fire hazards. Organizations managing these critical systems must enhance security measures immediately to prevent disruptions. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/fbi-cisa-warn-of-cyberattacks-targeting-refrigeration-systems/

A cyber incident can disrupt business operations in minutes. How effectively an organization responds can determine the extent of the damage and its ability to recover. Register now: https://shorturl.at/QwMRy Effective incident response goes beyond containing threats. It requires structured processes, cross-functional coordination, and alignment with business priorities. On November 19, Eder Ribeiro, Director, Global Incident Response at TransUnion, explores how organizations can build a comprehensive incident response playbook to strengthen cyber resilience and business continuity. #ECIH #ECCouncil #IncidentResponse #CyberResilience #BusinessContinuity

💡OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run OpenAI's new AI pipeline generated 948 Linux root escalation exploits in a 30-hour run. This cyber-focused AI model validated and helped patch these local privilege escalation vulnerabilities, identifying 2,308 findings and reproducing 1,724. The entire process incurred $1.2 million in API costs, demonstrating AI's powerful capability in cybersecurity research and vulnerability management. Source: [ thehackernews.com ] https://thehackernews.com/2026/11/openai-ai-pipeline-generates-948-linux.html

Laura Patterson has helped more than 300 B2B companies build measurable strategies. Her work centers on a question that matters even more as companies invest in AI: Are we getting the results we expected? Join Laura on November 12 for The AI Value Equation: From Strategy to Measurable Business Results. Get to know the speaker: · Founded VisionEdge Marketing in 1999 and serves as its president · Expert in customer-centric growth and marketing performance management · Architect of the Circle of Traction™️ framework · Award-winning author of Fast-Track Your Business · Inventor of Accelance®️, a patented SaaS application connecting business results with the tactics used to achieve them · International speaker, executive advisor, and board member Register now: https://shorturl.at/qG6E4 #CAIPM #ECCouncil #AIStrategy #AIValue #BusinessOutcomes

💡Vercel rolls out new protection against stolen session cookie attacks Vercel is rolling out Device Bound Session Credentials (DBSC) across its platform, a significant new defense against stolen session cookie attacks. This crucial security update aims to combat information stealer malware by binding user sessions to specific devices. DBSC makes it far more difficult for attackers to hijack accounts even if session cookies are compromised, enhancing overall platform security for all users. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/vercel-rolls-out-new-protection-against-stolen-session-cookie-attacks/

Autonomous AI is transforming security operations. "Automate the work. Never automate the accountability." Michael Shost Join Michael Shost on November 10 for The Autonomous SOC: How Agentic AI Is Reshaping Cyber Defense. Register here: https://shorturl.at/9Itpd Explore agentic AI, autonomous security actions, human oversight, AI-driven decision-making, SOC efficiency, and stronger security controls. #ECCU #CyberSecurity #Webinar #AutonomousSOC #AgenticAI #AISecurity #AIGovernance #CyberDefense