Yazılar

Leonardo Acquires 24.55% Stake in Finland’s SSH to Bolster Cybersecurity, Marking Progress in European Defence Integration

/in /tarafından

Italy’s defence giant Leonardo will acquire a 24.55% stake in Finnish cybersecurity firm SSH Communications Security, the companies announced Tuesday, marking a significant step in Europe’s efforts to deepen defence cooperation and consolidate its security industry.

With this deal, Leonardo becomes SSH’s largest shareholder, underscoring the growing importance of cybersecurity in multi-domain defence systems. Leonardo, known for its aerospace and defence platforms, views cyber capabilities as critical components of modern warfare, particularly as systems become increasingly interconnected.

SSH CEO Rami Raulas emphasized that the Western defence sector is shifting from national protectionism to international collaboration, noting Leonardo’s investment as part of a broader movement toward shared capabilities and joint ventures across borders. He also cited the BAE-Japan-Leonardo partnership for a next-generation combat jet as an example of this trend.

Raulas added that a growing European sentiment of “Europeans for Europe”—spurred in part by concerns over U.S. foreign policy under Donald Trump—is encouraging intra-European defence partnerships, reducing reliance on American investments.

Leonardo, which posted €18 billion ($21.2 billion) in revenue in 2024, expects its cybersecurity segment to achieve double-digit growth in the coming years. “Cybersecurity will increasingly be embedded into defence platforms and will become a core component of global security solutions,” said Giuseppe Panizzardi, Leonardo’s head of M&A, during a conference call.

The agreement involves €20 million worth of newly issued SSH shares purchased by Leonardo. Upon completion, Accendo Capital, previously SSH’s largest investor, will hold a 20.87% stake.

SSH is recognized for its quantum-safe encryption and Zero Trust architecture—an approach that assumes all users and devices could be threats unless verified. Leonardo said the deal supports the formation of a “Made in Europe” Zero Trust ecosystem, aligning with the EU’s ambitions for digital sovereignty and homegrown cybersecurity infrastructure.

US Judge Approves $177 Million Settlement in AT&T 2024 Data Breach Lawsuits

/in /tarafından

A U.S. judge granted preliminary approval on Friday to a $177 million settlement resolving class-action lawsuits against telecom giant AT&T (T.N) over data breaches in 2024 that exposed personal information of tens of millions of customers. U.S. District Judge Ada Brown in Dallas ruled that the settlement was fair and reasonable.

The settlement addresses claims stemming from breaches announced by AT&T in May and July of last year. Depending on the breach, customers who suffered losses “fairly traceable” to the incidents can receive payments of up to $2,500 or $5,000. After direct loss claims are paid, remaining funds will be distributed to customers whose personal data was accessed.

AT&T denied responsibility for the criminal acts but agreed to the settlement to avoid prolonged and costly litigation. The company expects final approval by the end of 2025 and plans to begin issuing payments early next year.

One breach involved the illegal download of about 109 million customer accounts from AT&T’s Snowflake cloud platform, exposing six months of call and text logs from 2022 for nearly all its customers. In March 2024, AT&T revealed a related data set released on the dark web, affecting approximately 7.6 million current and 65.4 million former account holders, with data dating back to 2019 or earlier.

The Federal Communications Commission (FCC) is also investigating the incidents. Last September, AT&T agreed to pay $13 million to settle an FCC probe into a 2023 data breach involving a cloud vendor that affected 8.9 million wireless customers. The FCC said the exposed data covered customers from 2015 to 2017 and should have been deleted by 2017 or 2018.

Aflac Investigates Potential Data Breach Following Cyberattack

/in /tarafından

Aflac, a health and life insurer, announced on Friday that it is investigating a cyberattack on its U.S. network that may have exposed customers’ personal data. The breach was detected on June 12 and is believed to have been conducted by the cybercrime group Scattered Spider, known for targeting multiple companies in the same industry through coordinated waves of attacks.

Scattered Spider, active since May 2022, is notorious for using identity-based tactics such as scamming help desks to reset credentials and bypass multi-factor authentication. This group has been linked to recent service disruptions at Philadelphia Insurance Companies and Erie Indemnity.

Aflac’s investigation is still in the early stages, and the insurer has not disclosed the number of affected customers or the timeline for completing the review. The company handles personal, medical, and financial data of over 50 million policyholders in the U.S. and Japan, including accident and pet insurance customers.

The attack potentially exposed sensitive information, including social security numbers and health details. Aflac reported that it stopped the intrusion within hours and has engaged third-party cybersecurity experts to assist with the investigation. Despite the breach, Aflac stated that it continues to operate normally while addressing the incident.

This attack follows a wave of cyber threats in the healthcare and insurance sectors, including a major breach last year of UnitedHealth’s Change unit by the hacking group ALPHV, also known as BlackCat.