EC-Council News, Trends & Updates

Artificial Intelligence is rapidly becoming an essential part of modern cybersecurity, helping organizations improve threat detection, automate response, and strengthen cyber resilience. At the same time, AI introduces new security, governance, and compliance challenges that organizations cannot afford to ignore. Join our webinar "The Intelligent Defense: How AI is Transforming Modern Cybersecurity," on September 22, 2026, featuring cybersecurity expert Ashish Mehta. Register now: https://shorturl.at/rAkFv Discover how AI is transforming SOC operations, threat intelligence, vulnerability management, incident response, and enterprise security while learning practical approaches to AI governance and responsible implementation. #ECCU #Webinar #CyberSecurity #ArtificialIntelligence #AISecurity #SOC #CyberDefense

💡Anthropic wants Claude to analyze your bank account and financial data Anthropic is testing "Claude Money," a new personal finance feature for its AI assistant Claude. This allows users to directly connect their bank accounts, aiming for Claude to "understand your money" by analyzing financial data. This direct integration of AI with sensitive financial information sparks important discussions around data privacy and security for users considering the service. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/artificial-intelligence/anthropic-wants-claude-to-analyze-your-bank-account-and-financial-data/

Building AI is no longer enough. Building AI that is trustworthy, accountable, and audit-ready is the real challenge. Register now: https://shorturl.at/2FLp1 As AI becomes deeply embedded in business operations, organizations face growing pressure around bias, privacy, model misuse, and evolving global regulations. On September 28, Pedro Nunes Oliveira Machado, Data Protection Officer at Ageas Portugal Group and Group Information Security Officer at Ageas Brussels, delivers a practical session on building AI governance frameworks that balance innovation with accountability. #CRAGE #ECCouncil #AIGovernance #TrustworthyAI #AICompliance #ResponsibleAI #DataGovernance #CyberSecurity #Webinar #TechWebinar

💡Acronis warns of actively exploited flaw in its cPanel backup plugin Acronis issued an urgent warning regarding a high-severity Linux local privilege escalation vulnerability found in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk. This critical flaw is actively being exploited in the wild, allowing attackers to gain elevated system privileges. Users must be aware of this serious threat and take immediate action to secure their servers. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/acronis-warns-of-actively-exploited-flaw-in-its-cpanel-backup-plugin/

💡CISA: Critical VMware RCE flaw now exploited by ransomware gangs Urgent CISA alert! Ransomware gangs are actively exploiting a critical VMware vCenter RCE flaw, previously patched in July. This vulnerability presents a significant risk as it's now part of ongoing attacks. Organizations must prioritize immediate patching to defend against potential ransomware compromises. Secure your VMware vCenter instances without delay! Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/cisa-critical-vmware-vcenter-rce-flaw-now-exploited-by-ransomware-gangs/

LIVE NOW | Join Us! Join Creating an Enterprise Data Governance Strategy for the AI Era featuring Dr. Jonathan Reichental. Discover how strong data governance can support data security, privacy, compliance, and responsible AI adoption. Join live now: https://shorturl.at/T0fAa #ECCU #Webinar #CyberSecurity #DataGovernance #AI #AIGovernance

Shadow AI does not ask for permission. And by the time most organizations notice it, the damage is already done. Register now:https://shorturl.at/XGzd7 On September 23, Bennie Cleveland, vCISO at VanRein Compliance and an enterprise risk strategist with 20+ years of experience, returns for Session 3 of the four-part CRAGE webinar series with a real-world, use-case-driven session on tackling the AI governance challenges already inside your organization. AI risks surface through unauthorized tool adoption, ungoverned third-party integrations, and data exposure that nobody planned for. This session shows you how to identify, assess, and control them. Missed the earlier sessions? Catch up here: Session 1: https://youtu.be/bMtN4r9lm4s?si=6v8LQtC2KAD6BzjS Session 2: https://youtu.be/pQtG2CAOfMU?si=sNSYDIe4vAEu5rnM #CRAGE #ECCouncil #ShadowAI #AIGovernance #DataLeakage #ModelRisk #AIRisk #ResponsibleAI #CyberSecurity #Webinar

💡Microsoft releases emergency Windows updates to fix RDS failures Microsoft released emergency Windows updates to fix critical Remote Desktop Services (RDS) failures. These issues were caused by this month's security updates. The out-of-band patch also addresses Hyper-V and USB audio problems affecting certain Windows versions, restoring stability and functionality. Users are advised to apply these urgent updates promptly. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-windows-updates-to-fix-rds-failures/

💡Webinar: How malicious OAuth apps can lead to Google Workspace breaches Discover how malicious OAuth apps, combined with social engineering, can breach Google Workspace, letting attackers access your data without solely relying on stolen passwords. This webinar details two attack scenarios, showing their unfolding and essential security controls to prevent them. Learn to protect your Google Workspace from these sophisticated threats. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/webinar-how-malicious-oauth-apps-can-lead-to-google-workspace-breaches/

💡Hackers exploit Tencent app flaw to deploy GrayRabbit malware A China-aligned espionage group is exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows. Threat actors are leveraging this flaw to successfully deploy the GrayRabbit backdoor malware. This targets users of the popular input method, exposing them to compromise via the exploited software. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/

TEDx speaker. Bestselling author. Board advisor. Series finale. Preity Gupta is back on September 21. Register now: https://shorturl.at/IIERJ About the Speaker: ✔ Global Security Board Advisor at EC-Council ✔ Enterprise AI Security Architect at Wipro ✔ Founder of Preity Gupta SecureBiz ✔ 20+ years in multi-cloud security and AI governance ✔ Certifications: CISM, AZ-500, SC-100, AWS SAA-C02 ✔ Author of Cost Savvy Secure Cloud #CAIPM #ECCouncil #AIROI #AISecurity #AIGovernance #CyberSecurity #Webinar

💡Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data Attackers are using passkey phishing to hijack Microsoft Cloud accounts and exfiltrate data. They exploit third-party email infrastructure to blast millions of financial fraud scam emails, often impersonating CEOs. Microsoft disclosed two campaigns, detailing one where over a million scam messages were sent in just three days (Aug 3-5, 2026). These evolving social engineering tactics target cloud environments. Source: [ thehackernews.com ] https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html

Only 2 Days Left! Join Dr. Jonathan Reichental on September 15 for Creating an Enterprise Data Governance Strategy for the AI Era. Explore how organizations can strengthen data quality, security, ownership, privacy, and AI governance. Register now: https://shorturl.at/T0fAa #ECCU #Webinar #CyberSecurity #DataGovernance #AI #AIGovernance

💡CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV CISA has added five actively exploited security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities are being actively exploited in the wild, prompting CISA to urge federal agencies to address them. Users of these platforms should prioritize patching to mitigate immediate risks from ongoing attacks. Source: [ thehackernews.com ] https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html

Thirty-five years in digital transformation. A portfolio grown from $285M to $385M. A 2026 Faculty of the Year award. Darrell W. Gunter joins us on September 17. Register now: https://shorturl.at/DrNnW About the Speaker: ✔ Managing Director, Gunter Media Group ✔ Former SVP at Elsevier | Launched ScienceDirect and Scopus ✔ Former EVP and CMO at Collexis | Grew revenues 15x ✔ Faculty at Seton Hall University | 2026 Adjunct Faculty of the Year ✔ Host of Leadership with Darrell W. Gunter on WSOU 89.5 FM ✔ Author of two books | MBA, Wharton and MIT Sloan certificates #CRAGE #ECCouncil #AIRegulation #AIGovernance #EUAIAct #CyberSecurity #Webinar

💡When the Whole Company Adopts AI: What It Does to Your SOC Company-wide AI adoption is dramatically increasing security alerts in SOCs. This surge isn't from AI attacks, but the everyday operational footprint of staff using AI tools – developers with coding agents, and non-technical employees signing into consumer AI. This new class of alerts is growing faster than any other, presenting significant new challenges for enterprise security teams. Source: [ thehackernews.com ] https://thehackernews.com/2026/09/when-whole-company-adopts-ai-what-it.html

Big Four consulting experience. Board of Directors. vCISO advisor. AI governance strategist. Emanuel Ohlsen brings all of that to September 18. Register now: https://shorturl.at/97p5V About the Speaker: • Cyber Risk and AI Governance Executive Advisor and Principal Security Consultant at Cyderes, advising enterprise clients in a vCISO capacity • Expertise spans AI governance, cybersecurity strategy, exposure management, GRC modernization, and executive risk oversight • Associate Director on the Board of Directors of Xplore Federal Credit Union • Drawing on Big Four and boutique consulting experience across continuous governance, secure AI adoption, and board-level risk • Holds MBA, CCISO, CISSP, CISM, CRISC, CCAR-P, and NCP-AAI credentials • Frequent speaker on secure AI adoption, continuous governance, and enabling innovation with accountability #CCISO #ECCouncil #AIGovernance #CISOLeadership #AIStrategy #CyberRisk #ResponsibleAI #GRC #CyberSecurity #Webinar #TechWebinar

💡Hackers abused Claude to extract secrets from 1.8M Android apps Anthropic confirms hackers, including financially motivated and state-sponsored groups from Russia and China, abused its Claude AI model. These threat actors leveraged Claude to extract sensitive secrets from approximately 1.8 million Android apps. This incident highlights a new frontier in cyberattacks, where advanced AI models are weaponized to compromise application security and harvest private data on a large scale. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/hackers-abused-claude-to-extract-secrets-from-18m-android-apps/

💡GitLab urges users to patch max severity path traversal flaw GitLab has issued an urgent advisory for users to immediately patch their servers. A maximum-severity path traversal vulnerability, tracked as CVE-2026-85706, requires prompt action. This critical flaw poses a significant risk to installations. All users are strongly advised to update their systems without delay to mitigate potential exploits and enhance security. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/

💡New Android malware encrypts files, steals data, and harasses victims A new Android malware strain, Mantax Otax, has been discovered. It's a dangerous ransomware-spyware hybrid that encrypts files, steals sensitive data, and spams or harasses victims. This potent combination targets user data and device integrity, marking an evolving threat to mobile security. Stay vigilant and protect your Android devices. Source: [ bleepingcomputer.com ] https://www.bleepingcomputer.com/news/security/new-android-malware-encrypts-files-steals-data-and-harasses-victims/