IT GRC Forum (@ITGRC) header
IT GRC Forum (@ITGRC) profile picture

IT GRC Forum

@ITGRC

Educational Programs on IT, Governance, Risk Management, & Compliance (GRC)

 New York
itcpeacademy.org/itgrcforum
Joined March 2009
  • Tweets2.5K
  • Following21.8K
  • Followers23.6K
2Media
Photo by IT GRC Forum (@ITGRC)
You're invited to join the Governance, Risk & Compliance Community nitter.cf/i/communities/16921970…

1
1
1
20
7,043
Binance Suffers Record-Breaking $6.3B Crypto Theft Linked to Suspected North Korean Hackers itcpeacademy.org/blog/news-b…
Binance Suffers Record-Breaking $6.3B Crypto Theft Linked to Suspected North Korean Hackers

Binance Suffers Record-Breaking $6.3B Crypto Theft Linked to Suspected North Korean Hackers

Binance is probing what may be the largest crypto theft ever: about $6.3B stolen in a multi-chain attack linked to North Korea's TraderTraitor group. Over $2.7B is frozen, customer losses will be...

itcpeacademy.org
1
159
Coinbase Discloses Customer Data Exposure Following Breach at Third‑Party Analytics Vendor itcpeacademy.org/blog/news-c…
Coinbase Discloses Customer Data Exposure Following Breach at Third‑Party Analytics Vendor

Coinbase Discloses Customer Data Exposure Following Breach at Third‑Party Analytics Vendor

Coinbase says a security incident at analytics provider Amplitude exposed contact information for a small subset of customers. The crypto exchange reported no breach of its own systems, no impact on...

itcpeacademy.org
176
85% of Organizations Cite Cyber at Top 5 Risk optro.ai/resources/ebook/ris…
Risk in Focus 2027: North America

Risk in Focus 2027: North America

Discover the top 5 risks for internal auditors in North America, including digital disruption, cybersecurity, and geopolitical uncertainty, based on the 2026 survey.

optro.ai
3
226
Cyberattack Disrupts University of New Mexico Health System as Extortion Group Claims Massive Data Theft itcpeacademy.org/blog/cisa-c…
Cyberattack Disrupts University of New Mexico Health System as Extortion Group Claims Massive Data...

Cyberattack Disrupts University of New Mexico Health System as Extortion Group Claims Massive Data...

A cyberattack forced the University of New Mexico Health Sciences Center to divert ambulances, cancel appointments, and suspend classes. An extortion group claims to have stolen sensitive student,...

itcpeacademy.org
185
CISA Unveils 2030 Strategy to Strengthen Cyber Defense and Critical Infrastructure Resilience itcpeacademy.org/blog/cisa-u…
CISA Unveils 2030 Strategy to Strengthen Cyber Defense and Critical Infrastructure Resilience

CISA Unveils 2030 Strategy to Strengthen Cyber Defense and Critical Infrastructure Resilience

CISA’s new 2030 strategy outlines a national plan to defend critical infrastructure against cyber, physical, and geopolitical threats. Built around the pillars Defend, Harden, and Prevail, the...

itcpeacademy.org
159
Managing Enterprise Access Risk in a Multi-Application World itcpeacademy.org/blog/briefi… @pathlock
Managing Enterprise Access Risk in a Multi-Application World

Managing Enterprise Access Risk in a Multi-Application World

Scale third-party due diligence across 300,000+ annual regulatory shifts. Discover how AI eliminates vendor assessment fatigue, accelerates threat detection, and ensures audit defensibility in TPRM....

itcpeacademy.org
2
191
Capcom Confirms CAPCOM ID Breach Exposing 11.7M Customer Records itcpeacademy.org/blog/news-c…
Capcom Confirms CAPCOM ID Breach Exposing 11.7M Customer Records

Capcom Confirms CAPCOM ID Breach Exposing 11.7M Customer Records

Capcom says attackers accessed 11.7M CAPCOM ID records, changed passwords on 196 accounts, and may send fraudulent emails using stolen data. The company reset credentials, notified authorities, and...

itcpeacademy.org
1
165
Don't Let "the AI Intern on Red Bull" Overrun Your Identity Infrastructure itcpeacademy.org/blog/briefi…
No Regulator Gives You a Heads-Up: Scaling Third-Party Due Diligence Across 300,000+ Annual...

No Regulator Gives You a Heads-Up: Scaling Third-Party Due Diligence Across 300,000+ Annual...

Scale third-party due diligence across 300,000+ annual regulatory shifts. Discover how AI eliminates vendor assessment fatigue, accelerates threat detection, and ensures audit defensibility in TPRM.

itcpeacademy.org
235
CPE Webinar Today @ 1pm EST - From Manual to Intelligent: Using AI to Reduce Assessment Fatigue and Strengthen Due Diligence itcpeacademy.org/blog/itgrcf… @onetrust @processunity @forrester @SAI_Compliance
From Manual to Intelligent: Using AI to Reduce Assessment Fatigue and Strengthen Due Diligence

From Manual to Intelligent: Using AI to Reduce Assessment Fatigue and Strengthen Due Diligence

This webinar explores how AI-driven due diligence reduces manual review, uncovers hidden cyber and operational risks, and enables continuous monitoring so teams can work faster, detect anomalies...

itcpeacademy.org
150
Global Governments Urge Emergency Action as Critical PHP Flaws Trigger Website Shutdowns Worldwide itcpeacademy.org/blog/news-g…
Global Governments Urge Emergency Action as Critical PHP Flaws Trigger Website Shutdowns Worldwide

Global Governments Urge Emergency Action as Critical PHP Flaws Trigger Website Shutdowns Worldwide

Governments and security agencies worldwide are urging urgent fixes for two critical PHP vulnerabilities that power much of the internet. The flaws prompted Finland, the Netherlands, the BBC, and...

itcpeacademy.org
232
TeamUpdraft Breach Exposes Connection Keys Used to Backdoor WordPress Sites itcpeacademy.org/blog/news-t…
TeamUpdraft Breach Exposes Connection Keys Used to Backdoor WordPress Sites

TeamUpdraft Breach Exposes Connection Keys Used to Backdoor WordPress Sites

Unknown attackers breached TeamUpdraft’s website and accessed customer connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, enabling backdoor installations on WordPress sites. The...

itcpeacademy.org
160
US Ransomware Negotiator Suspected of Assisting ShinyHunters Extortion Operation itcpeacademy.org/blog/news-u…
US Ransomware Negotiator Suspected of Assisting ShinyHunters Extortion Operation

US Ransomware Negotiator Suspected of Assisting ShinyHunters Extortion Operation

Federal investigators are probing whether a US ransomware negotiator secretly helped ShinyHunters run an extortion site used against nearly 100 organizations. The case, linked to arrests following...

itcpeacademy.org
297
Microsoft Exposes Global Phishing Marketplace Selling Cloud Accounts, Kits, and Infrastructure to Criminals itcpeacademy.org/blog/news-m…
Microsoft Exposes Global Phishing Marketplace Selling Cloud Accounts, Kits, and Infrastructure to...

Microsoft Exposes Global Phishing Marketplace Selling Cloud Accounts, Kits, and Infrastructure to...

Microsoft uncovered YAM Store, a criminal marketplace selling phishing kits, stolen cloud accounts, and hosting infrastructure used in global scams. The operation enabled over one billion phishing...

itcpeacademy.org
1
236
IMF and Bank of England Warn Banks: AI‑Driven Cyberattacks Threaten Trust in the Global Financial System itcpeacademy.org/blog/news-i…
IMF and Bank of England Warn Banks: AI‑Driven Cyberattacks Threaten Trust in the Global Financial...

IMF and Bank of England Warn Banks: AI‑Driven Cyberattacks Threaten Trust in the Global Financial...

At an IMF/World Bank event, BoE governor Andrew Bailey and IMF chief Kristalina Georgieva warned that AI‑enabled cyberattacks pose a systemic threat to financial stability. They cautioned that trust...

itcpeacademy.org
224
This report analyzes data from 500+ senior practitioners across the US, UK, Germany, and the UAE to help you: 1/ Decode the diagnostic fragmentation between Audit, Risk, and Compliance. 2/ Distinguish between external regulatory complexity and internal governance failures. 3/ Move beyond "high confidence" to a unified, real-time view of resilience posture. optro.ai/resources/ebook/g-s…
Resiliency for financial institutions

Resiliency for financial institutions

Explore why 93% of leaders are confident in their resilience compliance, yet struggle with fragmented ownership. Discover the path to a unified strategy.

optro.ai
2
199
FLock.io Launches Edge‑Optimized Decision Model to Replace Slow, Costly Cloud LLMs itcpeacademy.org/blog/news-f…
FLock.io — AI Research, Training & Inference

FLock.io — AI Research, Training & Inference

FLock.io develops AI research and infrastructure for decentralised model training, federated learning, and model inference.

flock.io
255
AI‑Driven Research Team Builds Full Chrome Exploit Chain in Six Days Using Three Newly Found Bugs itcpeacademy.org/blog/news-a…
AI‑Driven Research Team Builds Full Chrome Exploit Chain in Six Days Using Three Newly Found Bugs

AI‑Driven Research Team Builds Full Chrome Exploit Chain in Six Days Using Three Newly Found Bugs

XBOW researchers used OpenAI‑powered agents to chain three previously unknown Chrome bugs into a full exploit that escapes both sandboxes and executes code on Windows when a user simply loads a...

itcpeacademy.org
1
264
Don't Let "the AI Intern on Red Bull" Overrun Your Identity Infrastructure itcpeacademy.org/blog/briefi…
Don't Let "the AI Intern on Red Bull" Overrun Your Identity Infrastructure

Don't Let "the AI Intern on Red Bull" Overrun Your Identity Infrastructure

Learn how AI-driven attack velocity targets Active Directory and Entra ID, and why enterprise cyber defense must shift left to real-time prevention.

itcpeacademy.org
2
1
345
ESET Tracks Two Years of MATCHBOIL Malware Evolution in UAC‑0099 Attacks Against Ukraine itcpeacademy.org/blog/news-e…
ESET Tracks Two Years of MATCHBOIL Malware Evolution in UAC‑0099 Attacks Against Ukraine

ESET Tracks Two Years of MATCHBOIL Malware Evolution in UAC‑0099 Attacks Against Ukraine

ESET analyzed two years of updates to MATCHBOIL, a downloader used by Russia‑aligned UAC‑0099 to deploy the MATCHWOK espionage backdoor on Ukrainian systems. The malware’s delivery chain, persisten...

itcpeacademy.org
1
1
296
Load more