EC-Council News, Trends & Updates

💡Cyber exec arrested in case allegedly tied to ShinyHunters hackers Breaking cyber news: Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania! He's facing charges for alleged extortion, with multiple reports connecting his case to the FBI's intensive crackdown on the notorious ShinyHunters hacking group. This marks a significant development in the fight against cybercrime, showing even industry insiders can face serious legal action. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers/

💡Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management Criminal IP introduces AITEM, an AI-powered evolution in Attack Surface Management. Unlike traditional methods focused solely on visibility, AITEM connects exposure discovery with investigation, risk prioritization, and response. This next-generation approach goes beyond merely identifying exposed assets, providing organizations with a comprehensive and integrated solution to actively manage and mitigate cyber threats more effectively. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/criminal-ip-introduces-aitem-as-the-next-evolution-of-attack-surface-management/

Upcoming Webinar Alert! AI and automation are transforming application security across the software lifecycle. Join Ali Chinwala on October 30, 2026, for The Future of Application Security: AI, Automation, & Continuous Protection. Register now: https://shorturl.at/ZZroL Explore how AI can improve vulnerability detection, risk prioritization, remediation, security testing, and continuous protection. #ECCU #Webinar #CyberSecurity #ApplicationSecurity #AISecurity #ArtificialIntelligence #DevSecOps #SecurityAutomation

💡Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks Cybersecurity alert! Hackers are actively abusing Google Ads and legitimate Bing search redirects to spread malware. They lure users with deceptive ads, leading them to fake Claude AI installers which then unleash ClickFix attacks. Always verify software sources and be cautious of suspicious search results to protect your devices. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/

Artificial Intelligence is creating new opportunities for growth, efficiency, and innovation across every industry. However, as AI systems become more deeply integrated into business operations, organizations must also address governance, accountability, compliance, and enterprise risk. Effective AI governance is not simply about meeting regulations. It is about establishing the policies, processes, and oversight needed to ensure AI systems remain trustworthy throughout their lifecycle. In the upcoming webinar, "Operationalizing AI Governance Across the Enterprise," scheduled for October 21, 2026, Prof. Teju Oyewole explores how organizations can operationalize AI governance while supporting innovation and maintaining regulatory readiness. Register here: https://shorturl.at/2qSsF Learn how governance frameworks can strengthen AI oversight, improve compliance, manage enterprise risk, and build greater confidence in AI-powered decision-making. #ECCU #Webinar #CyberSecurity #AIGovernance #ResponsibleAI #Ente

💡Max severity SonicWall SMA1000 flaw now exploited in attacks URGENT: A max-severity flaw (CVE-2026-102255) in SonicWall SMA1000 appliances is actively exploited by attackers. Despite being patched three days ago on Tuesday, this critical vulnerability poses an immediate threat. All users must ensure their SMA1000 devices are updated without delay. Prioritize patching to secure your systems against these ongoing attacks and prevent compromise. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/

Most organizations never ask whether their security controls actually work. On October 14, Elizabeth Wu does more than raise the question — she brings the answers. Register now: https://shorturl.at/jMRiz Get to know the speaker: President of Cybersecurity Auditing Technologies with 25+ years in technology, cybersecurity, and organizational risk IT consultant, IT security auditor, and author Contributor to the Center for Internet Security Author of The Illusion of Cyber Governance: Why Proof Matters More Than Protection Advises leaders on cybersecurity governance, executive accountability, and independent verification Current work extends evidence-based assurance into AI governance and emerging technology risk #CRAGE #ECCouncil #GRC #CyberGovernance #RiskManagement #AuditReadiness #SecurityMetrics #CyberResilience #CyberSecurity #Webinar #TechWebinar

💡FBI disrupts Chinese hacking tools used to breach critical infrastructure FBI just disrupted Chinese state-sponsored hackers, Flax Typhoon! They seized seven domains used for tools MicroScan and FishHub, which breached critical infrastructure and other organizations globally. This swift action prevents further attacks, strengthening cybersecurity worldwide against these persistent threats. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/fbi-disrupts-chinese-hacking-tools-used-to-breach-critical-infrastructure/

💡Ransomware recovery CEO charged over secret ransom payments The CEO of ransomware recovery company MonsterCloud has been charged with fraud. He allegedly defrauded ransomware victims by secretly paying their attackers for decryptors, while falsely claiming his firm used proprietary technology to recover encrypted data. This serious accusation highlights a major breach of trust within the cybersecurity recovery industry. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments/

💡Hackers exploit critical Atlassian flaw after public PoC release Hackers are actively exploiting a critical Atlassian vulnerability, CVE-2026-21589, affecting Jira, Confluence, and Bitbucket. This flaw enables unauthenticated attacks, making it highly dangerous for users. Exploitation intensified following the release of a public Proof-of-Concept (PoC). Organizations using these Atlassian products should prioritize immediate patching to mitigate risks and prevent potential breaches. Stay vigilant against these critical threats. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/

💡Ninja Forms plugin flaw exploited to hack WordPress sites Hackers are actively exploiting stored XSS vulnerabilities in two WordPress plugins: Ninja Forms and WPC Product Bundles for WooCommerce. This exploitation allows attackers to install backdoors and create unauthorized rogue admin accounts on affected websites. WordPress site owners using these plugins should update them immediately to patch these critical security flaws and protect their installations from compromise. Stay vigilant and secure your sites now. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/ninja-forms-plugin-flaw-exploited-to-hack-wordpress-sites/

Only 2 Days Left! Are your security controls ready for an enterprise where AI agents can plan, reason, access data, use tools, and take autonomous actions? Join Dr. Derek A. Smith on October 8, 2026, for: Are We Ready for the Agentic Enterprise? Closing AI Security Blind Spots Register now: https://shorturl.at/gybK8 Explore the emerging risks surrounding AI autonomy, excessive privileges, identity, delegated access, prompt manipulation, context poisoning, data exposure, insecure tool use, and AI-driven actions. Learn how organizations can establish guardrails, strengthen governance, maintain behavioral visibility, and balance AI autonomy with human oversight. #ECCU #CyberSecurity #Webinar #AgenticAI #AISecurity #AIGovernance

We are pleased to welcome Prof. Teju Oyewole, CISO/CAIO at Brave Federal Technologies LLC, as the featured speaker for "Operationalizing AI Governance Across the Enterprise" on October 21, 2026. Register here: https://shorturl.at/2qSsF A globally recognized cybersecurity and AI governance executive, Prof. Oyewole brings over 25 years of experience helping organizations build secure, compliant, and resilient AI programs. His expertise spans AI governance, cyber resilience, enterprise risk management, regulatory compliance, and responsible AI implementation. This session will provide practical insights into governance frameworks, AI lifecycle management, compliance readiness, and strategies for balancing innovation with accountability. #ECCU #Webinar #SpeakerSpotlight #CyberSecurity #AIGovernance #ResponsibleAI #EnterpriseAI #CyberLeadership

💡OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU OpenAI is rolling out invisible watermarks for text generated by ChatGPT and Codex, starting in the European Union. This new feature will subtly mark AI-created content, aiming to enhance transparency and help identify machine-generated text. Users in the EU will soon experience this implementation across content from these advanced language models, making it easier to distinguish AI's output. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/artificial-intelligence/openai-is-adding-invisible-watermarks-to-chatgpt-and-codex-text-in-the-eu/

💡Alleged dev of Ploutus ATM malware appears in US court after arrest Great news in the fight against cybercrime! The alleged developer of Ploutus ATM malware has been arrested and appeared in US court. This sophisticated malware was used in jackpotting attacks across the United States, stealing millions of dollars. The U.S. Department of Justice announced this significant capture, bringing a key figure behind these financial thefts to justice. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/suspected-dev-of-ploutus-atm-malware-appears-in-us-court-after-arrest/

💡Citrix patches NetScaler SAML zero-day exploited in attacks Citrix just released emergency updates for a new NetScaler denial-of-service vulnerability, CVE-2026-88779. This zero-day flaw has already been actively exploited in attacks. Researchers are investigating if it can also be exploited for remote code execution, highlighting a critical security concern for NetScaler users. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/

Building an AI governance framework is the easy part. Making it work in practice is where most organizations fall short. Register now: https://shorturl.at/aiTcA Governance that stays on paper delivers nothing. On October 23, Bennie Cleveland, vCISO at VanRein Compliance and enterprise risk strategist with 20+ years of experience, closes the 4-part CRAGE webinar series with a session focused entirely on execution — implementation roadmaps, measurable KPIs, continuous monitoring, and scaling governance across the full AI lifecycle. This is the final session of the series. #CRAGE #ECCouncil #AIGovernance #AIRisk #RiskManagement #AICompliance #ResponsibleAI #CyberSecurity #Webinar #TechWebinar

💡Google Gemini could soon get full access to your Mac’s files, apps and the web Google Gemini is poised to gain unprecedented access on macOS, soon capable of accessing any file, opening apps, and browsing the web. Crucially, it could perform these actions without constant permission prompts. This development signifies a major shift in system interaction, prompting users to consider the implications for their data privacy and device security as Gemini integrates deeply with Mac operations. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/google/google-gemini-could-soon-get-full-access-to-your-macs-files-apps-and-the-web/

Register - https://shorturl.at/gezmM

💡The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations Cybersecurity is rapidly evolving, reshaped by expanding cloud, AI, and distributed systems within complex digital environments. As organizations manage more identities, devices, data, and internet-facing infrastructure, security is shifting. The focus is now on continuous visibility, control, and the ability to respond to risk at scale, ensuring robust defense against modern threats. Source: [ thehackernews.com ] https://thehackernews.com/2026/10/the-state-of-cybersecurity-in-2026key.html