@ITGRC

Educational Programs on IT, Governance, Risk Management, & Compliance (GRC)

 New York
itcpeacademy.org/itgrcforum
Joined March 2009
  • Tweets2.5K
  • Following21.8K
  • Followers23.6K
2Media
You're invited to join the Governance, Risk & Compliance Community xitter.cf/i/communities/16921970…

1
1
1
20
7,027
US Ransomware Negotiator Suspected of Assisting ShinyHunters Extortion Operation itcpeacademy.org/blog/news-u…

US Ransomware Negotiator Suspected of Assisting ShinyHunters Extortion Operation

Federal investigators are probing whether a US ransomware negotiator secretly helped ShinyHunters run an extortion site used against nearly 100 organizations. The case, linked to arrests following...

itcpeacademy.org
229
Microsoft Exposes Global Phishing Marketplace Selling Cloud Accounts, Kits, and Infrastructure to Criminals itcpeacademy.org/blog/news-m…

Microsoft Exposes Global Phishing Marketplace Selling Cloud Accounts, Kits, and Infrastructure to...

Microsoft uncovered YAM Store, a criminal marketplace selling phishing kits, stolen cloud accounts, and hosting infrastructure used in global scams. The operation enabled over one billion phishing...

itcpeacademy.org
217
IMF and Bank of England Warn Banks: AI‑Driven Cyberattacks Threaten Trust in the Global Financial System itcpeacademy.org/blog/news-i…

IMF and Bank of England Warn Banks: AI‑Driven Cyberattacks Threaten Trust in the Global Financial...

At an IMF/World Bank event, BoE governor Andrew Bailey and IMF chief Kristalina Georgieva warned that AI‑enabled cyberattacks pose a systemic threat to financial stability. They cautioned that trust...

itcpeacademy.org
200
This report analyzes data from 500+ senior practitioners across the US, UK, Germany, and the UAE to help you: 1/ Decode the diagnostic fragmentation between Audit, Risk, and Compliance. 2/ Distinguish between external regulatory complexity and internal governance failures. 3/ Move beyond "high confidence" to a unified, real-time view of resilience posture. optro.ai/resources/ebook/g-s…

Resiliency for financial institutions

Explore why 93% of leaders are confident in their resilience compliance, yet struggle with fragmented ownership. Discover the path to a unified strategy.

optro.ai
1
173
FLock.io Launches Edge‑Optimized Decision Model to Replace Slow, Costly Cloud LLMs itcpeacademy.org/blog/news-f…

FLock.io — Decentralised AI Training Platform

FLock.io is a decentralised AI training platform combining federated learning and blockchain verification so teams can train privacy-preserving models without moving raw data.

flock.io
240
AI‑Driven Research Team Builds Full Chrome Exploit Chain in Six Days Using Three Newly Found Bugs itcpeacademy.org/blog/news-a…

AI‑Driven Research Team Builds Full Chrome Exploit Chain in Six Days Using Three Newly Found Bugs

XBOW researchers used OpenAI‑powered agents to chain three previously unknown Chrome bugs into a full exploit that escapes both sandboxes and executes code on Windows when a user simply loads a...

itcpeacademy.org
246
Don't Let "the AI Intern on Red Bull" Overrun Your Identity Infrastructure itcpeacademy.org/blog/briefi…

Don't Let "the AI Intern on Red Bull" Overrun Your Identity Infrastructure

Learn how AI-driven attack velocity targets Active Directory and Entra ID, and why enterprise cyber defense must shift left to real-time prevention.

itcpeacademy.org
1
1
334
ESET Tracks Two Years of MATCHBOIL Malware Evolution in UAC‑0099 Attacks Against Ukraine itcpeacademy.org/blog/news-e…

ESET Tracks Two Years of MATCHBOIL Malware Evolution in UAC‑0099 Attacks Against Ukraine

ESET analyzed two years of updates to MATCHBOIL, a downloader used by Russia‑aligned UAC‑0099 to deploy the MATCHWOK espionage backdoor on Ukrainian systems. The malware’s delivery chain, persisten...

itcpeacademy.org
1
1
288
Denmark’s Central Population Register Breach Exposes CPR Data of 8.8 Million People itcpeacademy.org/blog/news-d…

Denmark’s Central Population Register Breach Exposes CPR Data of 8.8 Million People

A breach of Denmark’s Central Population Register exposed names, addresses, and CPR numbers of 8.8 million people. Attackers misused a private company’s lawful access to perform mass lookups....

itcpeacademy.org
188
The BCM reality checklist optro.ai/resources/ebook/bcm…

The BCM reality checklist

Most BCM programs look complete on paper. Use this checklist to test if your continuity plan actually holds up against real-world disruption.

optro.ai
1
343
CISA Adds Actively Exploited Fortinet FortiMail Path Traversal Flaw to KEV Catalog itcpeacademy.org/blog/news-c…

CISA Adds Actively Exploited Fortinet FortiMail Path Traversal Flaw to KEV Catalog

CISA added a critical FortiMail vulnerability (CVE‑2026‑104286) to the KEV catalog after confirming active exploitation. The flaw allows unauthenticated arbitrary file writes. Fortinet has issued...

itcpeacademy.org
1
304
Pentagon’s DMDC Breach Exposes PII of 2.76 Million Individuals itcpeacademy.org/blog/news-p…

Pentagon’s DMDC Breach Exposes PII of 2.76 Million Individuals

A vulnerability in a Pentagon‑run DMDC file‑sharing system exposed unencrypted PII for 2.76 million living individuals and 294,000 deceased individuals. Unauthorized access persisted for months,...

itcpeacademy.org
1
2
466
EU Cyber Resilience Act Imposes New Security Requirements on Containers, Kubernetes, and Cloud‑Native Supply Chains itcpeacademy.org/blog/news-e…

EU Cyber Resilience Act Imposes New Security Requirements on Containers, Kubernetes, and Cloud‑Na...

The EU Cyber Resilience Act introduces mandatory security, SBOM, reporting, and long‑term update requirements for container images, Kubernetes operators, and cloud‑native products sold in EU markets....

itcpeacademy.org
1
255
Security Mandates — Not Tools — Determine Whether Retail Chain Cyberattacks Spread Across Locations itcpeacademy.org/blog/news-s… @vikingcloudcom

Security Mandates — Not Tools — Determine Whether Retail Chain Cyberattacks Spread Across Locations

A VikingCloud survey of 200 retail and restaurant chains found 86% were attacked last year and 77% saw intrusions spread beyond the first site. No security tool reduced spread — only a corporate‑wide...

itcpeacademy.org
1
296
Human behavior: The AI risk surface GRC can't ignore optro.ai/resources/ebook/hum…

Human behavior: The AI risk surface GRC can't ignore

Discover insights from 800+ GRC experts that underscore the importance of accounting for human behavior in AI governance.

optro.ai
2
311
ShinyHunters Claims FBI Breach Using Alleged PeopleSoft Zero‑Day in Escalating Extortion Campaign itcpeacademy.org/blog/news-s…

ShinyHunters Claims FBI Breach Using Alleged PeopleSoft Zero‑Day in Escalating Extortion Campaign

ShinyHunters claims it breached the FBI, stole employee and applicant data, and defaced the agency’s jobs site using an alleged Oracle PeopleSoft zero‑day. The group disputes FBI statements about...

itcpeacademy.org
2
347
Live CPE Webinar | From Manual to Intelligent: Using AI to Reduce Assessment Fatigue and Strengthen Due Diligence itcpeacademy.org/blog/itgrcf… @SAI_Compliance @ProcessUnity @OneTrust

CPE Webinar | From Manual to Intelligent: Using AI to Reduce Assessment Fatigue and Strengthen Due...

This CPE webinar explores how AI-driven due diligence reduces manual review, uncovers hidden cyber and operational risks, and enables continuous monitoring so teams can work faster, detect anomalies...

itcpeacademy.org
215
40% of Large Enterprises Faced AI Compliance Failures as Process Gaps Trigger Costly Incidents itcpeacademy.org/blog/news-4…

40% of Large Enterprises Faced AI Compliance Failures as Process Gaps Trigger Costly Incidents

A survey of 1,000 senior leaders found 40% of large enterprises experienced AI‑related compliance or governance issues in the past year, with process failures driving 84% of incidents. Employees...

itcpeacademy.org
182
The BCM reality checklist optro.ai/resources/ebook/bcm…

The BCM reality checklist

Most BCM programs look complete on paper. Use this checklist to test if your continuity plan actually holds up against real-world disruption.

optro.ai
1
301
IBM Integrates CUBE’s Global Regulatory Intelligence into watsonx.governance for AI Horizon Scanning itcpeacademy.org/blog/news-i… @the_cube_dev @IBM

IBM Integrates CUBE’s Global Regulatory Intelligence into watsonx.governance for AI Horizon Scanning

IBM and CUBE have partnered to bring global regulatory horizon scanning into watsonx.governance, giving enterprises continuous visibility into AI‑related rules worldwide. The integration centralizes...

itcpeacademy.org
1
1
277
Load more