KUALA LUMPUR, MALAYSIA – Media OutReach Newswire – 21 June 2025 – Crude oil, which is arguably the world’s most important commodity, is on everybody’s mind right now. The flared up conflict in the Middle East is increasing risks of a major oil supply shock, potentially pushing the price of ‘black gold’ into the stratosphere and completely derailing the global economy. In this article, Octa, a global […]
Tata Consultancy Services confirmed its systems and user infrastructure remain uncompromised following the cyberattack that struck the retailer Marks & Spencer. At its annual shareholder meeting on 19 June, independent director Keki Mistry emphasised, “As no TCS systems or users were compromised, none of our other customers are impacted,” noting the ongoing M&S investigation does not extend to TCS systems.
M&S, which disclosed the cyber incident in April, continues to navigate significant disruption. The attack, attributed to the “highly sophisticated and targeted” Scattered Spider hacking group, reportedly utilised stolen help‑desk credentials from a TCS contractor. This led to the theft of personal data and forced the retailer to suspend online clothing sales for weeks—their online operations remain impaired, with recovery expected to extend into July.
Financial impact estimates remain stark. M&S anticipates a £300 million loss in operating profit, with weekly losses highlighted at approximately £40 million spanning clothing and food services. The retailer has drawn on its robust financial footing—boasting over £400 million in net funds before the incident—to support recovery measures. Insurance claims and cost containment strategies aim to offset roughly half of the losses.
The attack’s disruption extended to in‑store services, including payment systems and “meal‑deal” availability at stations, where stocks dwindled and meal‑deal offers were suspended. M&S CEO Stuart Machin described the incident as triggered by human error, stating that attackers duped a contractor’s help‑desk staff via social engineering tactics. Although M&S has not disclosed ransom payment details, hackers reportedly issued a ransom demand to Machin directly, claiming ransomware deployment across the retailer’s servers.
TCS had been internally probing whether its systems served as the breach gateway, an inquiry reportedly scheduled for completion by the end of May. With Mistry’s public assurance, TCS now distances itself from fault, while confirming its services to other clients—including the UK Co‑op—remained unaffected.
Beyond TCS, UK retailers Co‑op and Harrods have suffered similar breaches in recent weeks, prompting government authorities to call cybercrime “serious organised crime” and urge businesses to elevate cybersecurity priorities. The National Cyber Security Centre is rolling out new software security guidance for the sector.
M&S leadership has kick‑started accelerated IT modernisation, fast‑tracking system upgrades they had planned over two years into the next six months to strengthen defences. CEO Machin reaffirmed the retailer’s resilience, underlining transparency in communication and ongoing support to customers during the disruption.
While TCS’s reassurance quells immediate concerns among its client base, reputational challenges linger. Cybersecurity analysts warn that such high‑profile breaches erode trust in outsourcing vendors. Mumbai‑based brokerage Nirmal Bang commented that linkage to the attack would be “quite embarrassing” for TCS.
TCS’s absence of any formal probe initiation by regulators signals regulatory leniency. However, this episode spotlights the vulnerabilities inherent in third‑party access chains. As M&S works to restore its online footprint and TCS reaffirms its integrity, both firms face ongoing scrutiny over their cybersecurity governance.
Security researchers have uncovered an enormous password cache comprising 16 billion unique login credentials spanning major platforms such as Apple, Facebook, Google, Telegram, GitHub, VPN services and even government portals—making it the largest credential leak known to date. These credentials were harvested via at least 30 substantial datasets, some containing up to 3.5 billion records, indicating multiple infostealer malware operations operating at a large scale during 2025. Researchers found […]
Hackers claiming affiliation with Predatory Sparrow, possibly linked to Israel, have executed a cyber‑strike against Nobitex, Iran’s leading cryptocurrency exchange, erasing approximately $90 million worth of digital assets. The assault began in the early hours of 18 June 2025, when the group transferred diverse cryptocurrencies—including Bitcoin, Ethereum and Dogecoin—into vanishing crypto‑wallets designed without private keys, effectively “burning” the funds to send a deliberate political message.
Blockchain analytics firms, including Elliptic and TRM Labs, analysed the transactions and found the emptied addresses bore anti‑IRGC messages, confirming the operation was ideologically motivated rather than financially driven. Elliptic noted that the assets were moved into vanity addresses with embedded slogans denouncing the IRGC, and that the group leaking the funds would not retain the keys, ensuring permanent loss.
Noble objective remains politically charged
The group, using its Farsi‑named moniker Gonjeshke Darande—or “Predatory Sparrow”—publicly accused Nobitex of facilitating Iran’s sanctions evasion and funding militant groups, claiming the platform had enabled transactions for IRGC‑linked factions such as Hamas and Yemen’s Houthis. Elliptic has traced past ties between Nobitex and IRGC‑affiliated actors, including sanctioned individuals like Amir Hossein Niakeen Ravari and Ahmad Khatibi Aghada.
The hack comes amid heightened Israel‑Iran tensions. Reports indicate that Predatory Sparrow also targeted Iran’s state‑owned Bank Sepah on 17 June, triggering widespread service disruption, including to ATMs and fuel stations. Analysts interpret these cyber‑operations as extensions of conventional military retaliations between the two nations.
Nobitex disruptions raise alarm
Nobitex admitted to unauthorised access affecting both its app and website, temporarily shutting services while conducting assessments. Public updates from the exchange have been sparse, and customer inquiries have reportedly gone unanswered. Plans to recover or rebuild lost assets remain unclear, raising concerns among its claimed user base of over 7 million.
Despite accusations, Israel has not officially claimed responsibility. Media speculation within the country suggests government backing, but no formal confirmation has been issued. Predatory Sparrow, noted for previous impactful operations—from collapsing gas station networks in 2021 to prompting major fires at a steel mill in 2022—added this attack to its growing list of cyber engagements against Iranian infrastructure.
Impact and implications for crypto ecosystem
Cyber‑security analysts have labelled the hack “particularly significant given the comparatively modest size of Iran’s cryptocurrency market,” with Chainalysis intelligence chief Andrew Fierman underscoring the political overtones. The operation exemplifies how digital currencies and blockchain platforms are becoming tactical assets and vulnerabilities within geopolitical conflicts.
U.S. legislators, including Senators Elizabeth Warren and Angus King, previously raised concerns over Nobitex’s facilitation of sanctions avoidance, highlighting its role in enabling Iran’s IRGC and related proxies to move financial resources. This attack may intensify scrutiny on crypto exchanges suspected of abetting questionable transactions in sanctioned jurisdictions.
Decline of Iran’s crypto defences
Crypto adoption in Iran has long served as a hedge against economic instability, with citizens and state‑linked groups alike using digital currencies to escape inflationary pressures and circumvent banking restrictions. Nobitex, in particular, developed significant traction, drawing millions of users seeking alternative financial tools.
However, analysts warn this sabotage could erode investor trust, disrupt public confidence in digital assets, and invite heightened regulatory oversight. Exchanges in politically sensitive regions may now face new security standards and sanctions compliance demands.
A new frontier in cyber‑warfare
This development underlines a shift where cyber‑warfare transcends state boundaries, now targeting third‑party financial networks with tangible consequences. By obliterating rather than stealing funds, Predatory Sparrow signalled that its operation aimed to disrupt Iran’s crypto‑financing rather than profit from it.
Officials tracking these patterns warn that similar tactics may emerge as cyber‑tools of statecraft evolve, affecting financial systems across volatile regions. Experts suggest exchanges handling high‑risk jurisdictions should shore up defences and improve transparency around asset provenance and network resilience.
As Nobitex works to restore functionality, regulators, crypto stakeholders and intelligence services will closely examine the incident. The breach draws attention to the critical role of exchanges in global geopolitics, raising complex questions about neutrality, compliance and cybersecurity in an increasingly fraught digital economy.
Security experts have identified a critical and exploitable chain of vulnerabilities in Sitecore Experience Platform that enables pre-authenticated remote code execution, sparking concern among enterprises that deploy the CMS. The flaws include a hard‑coded single‑character credential in an internal account, coupled with two post-authentication flaws facilitating arbitrary file uploads—one through a zip‑slip path‑traversal and another via Sitecore PowerShell Extensions. The most troubling discovery centres on the sitecoreServicesAPI […]
Abidjan is bracing for a highly polarised presidential election scheduled for 25 October 2025, as President Alassane Ouattara’s ruling party moves to endorse his expected bid for a fourth term. Meanwhile, key opposition figures have been barred from the ballot, prompting protests and allegations of democratic erosion. Official party channels have circulated motions affirming Ouattara, 83, as their preferred candidate under the Rally of Houphouëtists for Democracy […]
Pump.fun’s official X account and that of its co‑founder Alon Cohen have been suspended by X as part of a broader enforcement effort targeting numerous memecoin‑related accounts, according to platform observers. The action, which began on 16 June, affected dozens of handles tied to Solana‑based crypto tools—including GMGN, Bloom Trading, BullX, ElizaOS—and coincided with growing concern over platform manipulation, unauthorised data access and regulatory rumblings.
The affected accounts were removed around 19:30 UTC on 16 June, leaving followers unable to access official communications. Platforms such as GMGN and Bloom Trading also noted unexplained suspensions, prompting speculation about an “internal enforcement sweep” rather than mass reporting. Notably, X has not issued any formal explanation of policy breaches or rule changes that prompted the action.
Some within the crypto community suggest the crackdown may stem from unauthorised use of X’s API infrastructure. Observers point to tools linked to Pump.fun and others that scrape tweet data or emulate automated trading without premium API access—activities that could trigger platform enforcement. However, neither X nor any of the suspended entities have confirmed such allegations.
The broader context involves mounting regulatory and ethical pressures on the Solana‑based memecoin ecosystem. Pump.fun, launched in January 2024 by Alon Cohen, Noah Tweedale and Dylan Kerler, has been prolific in facilitating meme token launches—over 6 million coins had been created via the platform by early 2025, according to Wired. But token launches have grown increasingly controversial. A livestreaming feature, later suspended, was tied to extreme promotional tactics, including staged threats of suicide or violence during broadcasts.
Earlier this year, the platform faced a class‑action lawsuit in New York alleging it operated as an unregistered securities offering and facilitated pump‑and‑dump schemes, notably involving a token called PNUT. This suit highlights regulators’ concerns that Pump.fun may operate in a legal grey zone. In addition, the UK Financial Conduct Authority warned the platform in late 2024 about offering unlicensed financial services.
Market data following the suspensions reveals immediate ripples: within an hour of X account removals, new tokens referencing the bans flooded Pump.fun, generating over US $10 million in volume. Five such suspension‑themed tokens ranked among the top‑ten daily by trading volume.
Crypto traders and observers are divided. Some see the suspensions as overdue intervention against manipulative tools; others raise concerns about opaque enforcement and potential overreach. Affected platforms, such as GMGN, have assured users that operations remain intact while formal appeals with X are underway.
Technical analysis indicates this episode is unlikely to halt memecoin activity. Indeed, pump‑and‑dump cycles continue: behavioural studies show short‑term spikes in token value followed by longer‑term declines averaging 30 per cent over 12 months. In the absence of clear regulation or platform transparency, speculative launches keep drawing liquidity.
Global law enforcement has dismantled over 20,000 malicious IP addresses and domains used to serve 69 variants of information‑stealing malware, in a sweeping cybercrime operation spanning 26 countries across the Asia‑Pacific region. The coordinated effort—dubbed Operation Secure—uncovered the digital infrastructure behind credential‑harvesting malware, led to the seizure of 41 servers, over 100 GB of illicit data, and the arrest of 32 suspects, officials said. The four‑month initiative, conducted […]
A major ransomware assault on a leading diagnostic and pathology services provider has sent healthcare operations into disarray, pausing thousands of patient procedures, crippling essential services like blood transfusions and cancer screenings, and exposing sensitive patient data across multiple hospitals. Investigators have attributed the attack to the Qilin ransomware group, known to operate under Russia’s ransomware-as-a-service infrastructure. The breach exploited weak multi-factor authentication, excessive privileged access, orphaned […]
OpenAI acknowledged an unexpected outage affecting ChatGPT and related services, leaving users across multiple regions unable to access the platform or receive responses. The disruption, which emerged late on 10 June 2025, triggered a surge in user complaints and widespread concern over the reliability of the generative‑AI tool. Disruption began unfolding as error messages such as “Hmm… something seems to have gone wrong” and “A network error […]
The five-year acceleration in user activity reflects a maturing market that has gradually moved from speculative volatility toward widespread utility and integrated applications. Analysts link this exponential climb not only to rising asset prices but also to expanding real-world use cases and adoption in emerging markets where crypto offers alternatives to unstable fiat currencies or limited banking access.
Between 2020 and 2021, crypto markets experienced a spike in retail investor interest as Bitcoin and Ethereum reached new price highs. But the subsequent years saw a more diversified set of contributors to active user growth. These included Layer-2 solutions that reduced transaction costs, central bank scrutiny that validated digital assets as long-term economic factors, and increased capital flows into decentralised applications that are now used for lending, trading, and payments.
The upswing has also been aided by a shift in demographics. Users between the ages of 18 and 35 continue to dominate, but there is a discernible rise in users over 50 participating in digital asset portfolios through robo-advisors and automated wealth apps. Fintech platforms have played a central role in onboarding new users, offering wallet services directly within traditional mobile banking interfaces, especially in Southeast Asia, Latin America, and Sub-Saharan Africa.
Regulatory tailwinds have also contributed to this surge. After years of ambiguity, several governments began laying out clearer frameworks for crypto usage and taxation. The European Union’s Markets in Crypto-Assets regulation, now in force, has created greater legal clarity for wallet providers and stablecoin issuers. Meanwhile, jurisdictions such as Singapore, the UAE, and Hong Kong have developed regulatory sandboxes that attract developers without compromising on compliance. The clarity around Know-Your-Customer norms and licensing requirements has encouraged institutional custodians and payment processors to enter the space, further legitimising its growth.
Daily active wallet addresses, which measure unique addresses interacting with blockchain networks, are now being driven by utility rather than speculation. Decentralised social media platforms, blockchain-based gaming, and metaverse transactions contribute heavily to user engagement. On-chain metrics show that average wallet-to-wallet transactions have grown in both frequency and diversity, indicating a broader shift from holding digital assets to actively using them.
Stablecoins remain a major catalyst. With daily transaction volumes frequently surpassing those of major card networks, these tokens are increasingly used for remittances, salaries, and cross-border commerce. Businesses in Argentina, Nigeria, and the Philippines now routinely accept stablecoins to hedge against inflation and currency volatility. Dollar-pegged tokens such as USDT and USDC remain dominant, but a new wave of regionally anchored stablecoins linked to the euro, yen, and dirham are gaining traction.
This growth has coincided with new product launches by global crypto service providers. Coinbase, Binance, and OKX have all introduced wallet products tailored for mobile-first users, while decentralised apps like MetaMask and Trust Wallet have streamlined onboarding by integrating fiat-to-crypto gateways and social recovery features. Wallet-as-a-service solutions have also proliferated, allowing e-commerce platforms and loyalty programmes to integrate tokenised rewards and payments.
However, the expansion hasn’t been without setbacks. Security breaches and phishing attacks continue to pose significant threats, especially on mobile wallets lacking robust encryption or biometric safeguards. In 2024 alone, more than $600 million was reportedly lost to wallet-targeted hacks. This has forced wallet providers to enhance security protocols and increase user education around seed phrase storage and recovery mechanisms.
The surge in user activity also raises questions about scalability and environmental impact. Ethereum’s successful shift to a proof-of-stake consensus has alleviated some concerns, reducing energy consumption by over 99 percent, but congestion on other chains like Solana and BNB Smart Chain persists during peak usage periods. Developers are now turning to zero-knowledge rollups and modular chain architectures to manage the growing demand without compromising on decentralisation or throughput.
Investment in wallet infrastructure has sharply increased, with venture funding in crypto wallet startups exceeding $2.5 billion over the past year. Several firms are focusing on embedded crypto solutions that operate invisibly behind e-commerce and payment interfaces, enabling crypto usage without requiring users to understand blockchain mechanics. This backend integration has become crucial to onboarding the next 100 million users, according to fintech consultants.
On the macroeconomic front, crypto wallets are increasingly being viewed as components of digital identity. National digital currency trials in countries like Brazil and India are exploring hybrid models that link sovereign wallets to decentralised ones, potentially enabling programmable money systems that maintain user agency while complying with monetary policy.
As blockchain integration deepens across sectors, from healthcare to real estate, wallet functionality is expanding beyond currency storage. New generations of wallets offer token-gated access, voting rights in decentralised autonomous organisations, and certification for digital credentials. These features are pushing crypto adoption beyond financial speculation into everyday life.
African Union’s African Peer Review Mechanism has challenged Fitch Ratings’ downgrade of the African Export‑Import Bank, arguing the move rests on a misinterpretation of its sovereign loan portfolio. On 4 June, Fitch lowered Afreximbank’s long‑term foreign‑currency issuer rating from BBB to BBB‑—a notch above junk—with a negative outlook. The agency attributed the downgrade to elevated credit risk, citing an estimated non‑performing loan ratio of 7.1 %, primarily due […]
Governor Gavin Newsom has labelled the federal deployment of California National Guard troops to Los Angeles as unlawful and a breach of state sovereignty. He formally requested their withdrawal in a letter to the defence secretary, emphasising that law enforcement agencies on both the state and local level were equipped to manage the protests without military reinforcement. Approximately 2,000 National Guard members, federalised under Title 10 of the […]
The UAE Football Association has imposed substantial sanctions on Sharjah FC’s Khalid Al Dhanhani and Shabab Al Ahli’s Sultan Adil, levying fines of Dh500,000 each and domestic bans spanning five matches. Both clubs have expressed full support for the association’s decision and announced plans to initiate internal reviews into the conduct of the players involved.
The disciplinary measures follow an investigation into conduct deemed inappropriate during recent fixtures in the UAE Pro League. The Football Association’s decision signals a firm stance on maintaining discipline and sportsmanship standards in the country’s top-tier football competitions. Sharjah and Shabab Al Ahli, two of the UAE’s most prominent clubs, have publicly committed to cooperation with the governing body’s directives and have vowed to undertake rigorous internal probes aimed at preventing future breaches.
Officials from Sharjah FC described the imposed sanctions as “just and necessary,” underscoring the club’s zero-tolerance policy towards behaviour that undermines the integrity of the sport. Similarly, Shabab Al Ahli representatives reiterated their support for the Football Association’s rulings, stressing the importance of upholding the reputation of UAE football on domestic and regional stages.
The cases against Al Dhanhani and Adil reportedly involved incidents that breached the association’s code of conduct, though specific details about the nature of the violations have been withheld from public disclosure to protect all parties involved. Observers note that the magnitude of the fines and bans reflects the association’s increased commitment to enforcing discipline and deterring misconduct in a league that continues to grow in regional prominence.
This move aligns with broader efforts by the UAE Football Association to professionalise the sport locally and align with international standards of governance and fairness. The recent enforcement of hefty penalties on high-profile players sends a message to the football community that violations, irrespective of player status, will attract stringent consequences.
Inside the clubs, internal investigations are expected to scrutinise not only the incidents leading to the penalties but also the systemic factors that may have contributed to the lapses in conduct. Sharjah and Shabab Al Ahli’s initiatives aim to reinforce codes of behaviour, improve player education regarding sportsmanship, and implement monitoring mechanisms to prevent recurrence.
The UAE Pro League, which features many international talents alongside local stars, has seen increased scrutiny over player behaviour and match officiating standards in recent seasons. The Football Association’s disciplinary committee has stepped up its vigilance to safeguard the league’s competitive integrity and enhance its appeal to sponsors and fans alike.
Football experts within the region have welcomed the decisive action taken by the association, noting that maintaining discipline is crucial as UAE clubs seek to compete more effectively in continental competitions such as the AFC Champions League. The implementation of fair play principles is viewed as integral to sustaining the sport’s development and nurturing young talent under professional frameworks.
While the penalties levied are severe, they also serve as an opportunity for the players to reflect on their professional conduct and align with the expectations set by their clubs and governing bodies. Both Al Dhanhani and Adil remain key figures within their teams, and their return following suspension will likely come with an emphasis on exemplary behaviour.
The financial fines represent a significant deterrent, especially in a league where clubs are increasingly investing in player welfare and development. The sanctions highlight the balance sought between disciplinary action and the need to foster a positive competitive environment that encourages respect among players, coaches, and officials.
The Football Association’s handling of this matter has been consistent with international best practices, reflecting a growing maturity in sports governance within the UAE. Clubs across the league are anticipated to reinforce internal policies and promote awareness to ensure alignment with the standards enforced by the governing body.
The disciplinary episode involving Al Dhanhani and Adil has also drawn attention to the broader cultural and professional expectations within UAE football, emphasising accountability and ethical behaviour as non-negotiable elements of athlete performance. As clubs prepare for the next stages of the season, the message from the association and participating teams is clear: professionalism and discipline will be upheld at all costs.
KUALA LUMPUR, MALAYSIA – Media OutReach Newswire – 5 June 2025 – May proved to be a rather challenging month for gold traders. XAUUSD, the primary financial instrument for trading gold, fluctuated in a relatively broad range between $3,120 and $3,435 per ounce (oz), but finished the month virtually unchanged, narrowly recording a fifth consecutive monthly gain. Although trading started on a bearish note, XAUUSD found support […]
The Central Bank of the UAE has levied a Dh3.5 million fine on an unnamed exchange house for breaches of anti-money laundering and counter-terrorism financing regulations. This action is part of a broader enforcement initiative targeting financial institutions failing to meet compliance standards. The penalty was imposed under Article 14 of Federal Decree Law No. of 2018, which governs AML/CFT measures in the UAE. An examination by […]
Elon Musk has announced the rollout of XChat, a new messaging feature on the X platform, integrating end-to-end encryption, vanishing messages, and support for various file types. Developed in Rust, XChat also offers audio and video calling capabilities without requiring a phone number, marking a significant shift in the platform’s communication tools.
The introduction of XChat follows the discontinuation of X’s previous encrypted direct messaging system, which had been available to paid subscribers for two years. The new system is gradually being made accessible to premium users, with broader availability expected in the coming weeks.
Central to XChat’s security is its “Bitcoin-style” encryption, a term Musk uses to describe the platform’s adoption of elliptic curve cryptography . This method, also employed in Bitcoin transactions, provides robust security with smaller key sizes, enhancing performance and reducing resource consumption. While specific details about the encryption implementation remain undisclosed, the approach suggests a focus on decentralized and secure communication.
The choice of Rust as the programming language for XChat underscores a commitment to safety and performance. Rust’s emphasis on memory safety helps mitigate vulnerabilities common in other languages, such as memory corruption, which has been a significant source of security issues in software development.
XChat’s features extend beyond encryption. Users can send messages that automatically disappear after a set period, enhancing privacy. The platform supports the transfer of various file types, catering to diverse communication needs. Notably, audio and video calls can be made without linking to a phone number, allowing for greater anonymity and flexibility across devices.
This development aligns with Musk’s broader vision of transforming X into a comprehensive “everything app,” akin to China’s WeChat. By integrating messaging, calling, and file-sharing functionalities, X aims to become a central hub for users’ digital interactions. Plans are also underway to introduce X Money, a digital wallet service developed in partnership with Visa, enabling peer-to-peer payments and further expanding the platform’s ecosystem.
As XChat enters the competitive messaging landscape, it positions itself against established players like Signal and Telegram. While these platforms have long prioritized user privacy and security, XChat’s integration into the broader X platform offers a unique proposition. However, experts advise caution, noting that XChat has yet to undergo independent security audits, a standard practice for verifying the robustness of encryption protocols.
The move towards enhanced privacy features reflects a growing demand among users for secure communication channels. With increasing concerns over data breaches and surveillance, platforms that prioritize user confidentiality are gaining traction. XChat’s emphasis on encryption and user control over messages indicates an awareness of these concerns and a response to the evolving digital landscape.
KUALA LUMPUR, MALAYSIA – Media OutReach Newswire – 2 June 2025 – June 2025 is shaping up to be one of the most eventful months of the year for global markets. For traders, this means opportunity—but also volatility. The economic calendar is packed with macroeconomic data releases and central bank meetings, while geopolitical risks remain close to the surface. Beyond the usual inflation prints and interest rate […]
A major security breach has compromised the Cetus Protocol, a decentralised exchange operating on the Sui blockchain, resulting in the loss of approximately $260 million in digital assets. The exploit has raised serious concerns about the security of decentralised finance platforms and the robustness of blockchain-based trading systems. The breach was identified when users reported irregularities in transaction processing and unexpected asset movements within the Cetus ecosystem. […]
Companies handling sensitive customer data are increasingly adopting SOC 2 audit readiness as a strategic imperative, not merely a compliance checkbox. This proactive approach is becoming essential for businesses aiming to secure partnerships, streamline operations, and fortify their reputations in a competitive digital landscape.
SOC 2, developed by the American Institute of Certified Public Accountants , evaluates an organisation’s controls related to security, availability, processing integrity, confidentiality, and privacy. Achieving SOC 2 compliance demonstrates a company’s commitment to data protection and operational excellence.
A SOC 2 readiness assessment serves as a preliminary evaluation to identify and address potential gaps in an organisation’s control environment before undergoing the formal audit. This process involves a thorough review of policies, procedures, and systems to ensure they align with the Trust Services Criteria. By conducting this assessment, companies can proactively mitigate risks and enhance their security posture.
The benefits of SOC 2 readiness extend beyond compliance. Organisations that complete the assessment often experience increased efficiency in their audit processes, reduced time and resources spent on remediation, and improved confidence among stakeholders. Furthermore, a successful SOC 2 audit can serve as a competitive differentiator, signalling to clients and partners that the company prioritises data security and integrity.
In sectors where data breaches can have significant financial and reputational consequences, SOC 2 readiness is particularly valuable. It enables companies to identify vulnerabilities, implement robust controls, and establish a culture of continuous improvement in their security practices. This proactive stance not only safeguards sensitive information but also positions organisations as trustworthy and reliable partners.
Five leading financial industry groups, including the American Bankers Association and the Securities Industry and Financial Markets Association , have formally urged the U.S. Securities and Exchange Commission to revoke its rule mandating public companies to disclose material cybersecurity incidents within four business days. The coalition contends that the regulation compromises ongoing investigations, exposes sensitive information, and may inadvertently aid cybercriminals.
The SEC’s rule, adopted in July 2023, requires companies to report significant cyber incidents promptly, unless disclosure poses a substantial risk to national security or public safety. The financial groups argue that this timeline is insufficient for thorough internal assessments and coordination with law enforcement, potentially leading to premature disclosures that could hinder response efforts and mislead investors.
A recent cyberattack on Coinbase, a major cryptocurrency exchange, underscores the concerns raised by these financial entities. Hackers infiltrated Coinbase’s systems by bribing third-party customer service agents, obtaining personal data of approximately 97,000 users. The attackers demanded a $20 million ransom, which Coinbase refused to pay, opting instead to offer a $20 million reward for information leading to their arrest. The breach is expected to cost Coinbase between $180 million and $400 million in remediation and customer reimbursements.
The financial groups emphasize that mandatory rapid disclosure could alert other malicious actors to vulnerabilities before companies have secured their systems. They advocate for a more flexible approach that allows organizations to manage incidents effectively without the pressure of an inflexible reporting deadline.
The SEC maintains that timely disclosure of cyber incidents is crucial for investor protection and market integrity. However, the financial industry coalition insists that the current rule may do more harm than good, potentially exacerbating the very risks it aims to mitigate.
Coinbase, the leading U.S.-based cryptocurrency exchange, is under intensified scrutiny as it confronts a new class-action lawsuit filed on behalf of investors who purchased company shares between April 14, 2021, and May 14, 2025. The lawsuit alleges that Coinbase and its executives failed to disclose critical information and did not adequately protect user data, leading to significant financial losses for shareholders following a sharp decline in stock value.
The legal action centers on claims that Coinbase misrepresented its ability to safeguard customer assets, particularly in the event of bankruptcy. Investors argue that the company did not sufficiently inform them that customer assets could be considered part of Coinbase’s bankruptcy estate, potentially making customers unsecured creditors. This concern was exacerbated when, on May 10, 2022, Coinbase disclosed in a regulatory filing that customer assets could be at risk in the event of bankruptcy, leading to a more than 26% drop in the company’s share price the following day.
Further compounding investor concerns, Coinbase recently revealed a significant data breach where cybercriminals bribed overseas support agents to access sensitive user information, including names, contact details, government ID images, and account histories. The breach affected up to 97,000 users and led to a ransom demand of $20 million, which Coinbase refused to pay. The company estimates the incident could cost between $180 million and $400 million in fixes and refunds. Following the disclosure, Coinbase’s stock dropped over 7%, shortly after it had surged 24% on news of its impending inclusion in the S&P 500.
The lawsuit also points to Coinbase’s alleged failure to disclose its engagement in proprietary trading. Despite public statements denying such activities, reports emerged in September 2022 indicating that Coinbase had formed a unit specifically for proprietary trading, investing $100 million in these trades. This revelation led to further declines in the company’s stock price, causing additional losses for investors.
In response to these allegations, Coinbase maintains that it has been transparent with its investors and is committed to addressing any concerns. The company has stated that it is cooperating with law enforcement regarding the data breach and has taken steps to enhance its security measures, including establishing a new U.S. support hub and implementing stronger protections against insider threats. Coinbase has also fired the implicated insiders and is pursuing criminal charges against them.
Canonical’s Ubuntu 20.04 LTS, known as Focal Fossa, will reach the end of its standard five-year support period on 31 May 2025. This transition affects millions of users across enterprise, cloud, and personal environments, who must now decide between upgrading to a newer release or subscribing to extended support to maintain security compliance. Ubuntu LTS releases are designed to provide five years of free security updates and […]
