Cyberwarfare Funding Accelerates and Everyone is at Risk Nations are investing heavily in offensive cyber capabilities. The proposed 2026 US defense budget earmarks an additional $1 billion in funding for offensive cyber operations, specifically to the US Indo-Pacific Command (USINDOPACOM). In 2025, the Department of Defense spent over $14 billion on cyber, with $6.4 billion allocated to offensive operations. An extra billion dollars buys a significant boost in attack…
@M.Rosenquist in May 2025
Microsoft Listens to Security Concerns and Delays New OneDrive Sync Misuse of the newly announced Microsoft OneDrive synchronization feature puts corporate security and personal privacy at serious risk in ways not likely understood by the users. Microsoft wants people to connect their personal OneDrive file share with their work systems, synchronizing potentially private files onto their enterprise managed PCs. The problem is having these files copied to enterprise machines…
PowerSchool Data Breach – Round 2 Extortions The PowerSchool data breachnightmare of 2024 doesn’t end. Here is a quick rundown to catch up, before I call out some key learnings: https://www.theregister.com/2025/05/08/powerschool_data_extortionist/ In December 2024, PowerSchool was breached by ransomware attackers who claimed to have copied 62 million records, a figure that PowerSchool has declined to specify. Forensic assessments indicated the company failed to apply basic…
OneDrive’s New Sync May be a Privacy and Security Nightmare https://youtu.be/hZVjJNPrWIM There are many cybersecurity and privacy risks to consider, both from the user and the enterprise, when it comes to Microsoft's new OneDrive feature that will connect their personal OneDrive with their work device! LinkedIn:https://www.linkedin.com/in/matthewrosenquist/ YouTube:https://www.youtube.com/CybersecurityInsights Follow me on Substack:https://substack.com/@matthewrosenquist For…
Cybersecurity Leadership Coaching Very excited to share that I’m now offering cyber security leadership coaching! With over 35 years of experience, I have become an outspoken advocate, mentor, and respected authority in the field of cybersecurity. I can work with you on… ✅ Understanding emerging threats, opportunities, and the fundamental factors that drive the industry, in pursuit of optimal security levels ✅ Strengthening expertise in risk management leadership and career…
Coinbase Hacked and Turns the Tables on the Cybercriminals! This is how you handle cybercrime digital extortion! Cybercriminals attempted to extort $20 million from Coinbase, but Coinbase refused and will instead fund a $20 million bounty for those that provide information that leads to the attacker’s arrest! This is AWESOME and should be the playbook for every company out there that is at risk of ransomware or other digital extortion! Never fund your enemy or make yourself…
Serviceaide Data Breach is Part of a Larger Healthcare Trend https://www.youtube.com/watch?v=4Iqmgv3JXkQ Another big healthcare sector data breach, impacting 480 thousand Catholic Health patients. Their 3rd party vendor Serviceaide is the root cause of this exposure. This is the latest in many healthcare data breaches this year! Year-to-Date we are at a 25% increase in incidents as compared to the 2024 average! U.S. Department of Health and Human Services (HHS) @Office for…
War & Cyber: 3 Years of Struggle and Lessons for Global Security Russia is one of the most aggressive nations when it comes to state coordinated cyberattacks — and Ukraine has been at the center of their crosshairs for 3 years. This report, provided the State Service of Special Communications and Information Protection of Ukraine contains an incredible amount of cybersecurity insights, showcasing the coordinated aggressive cyberwarfare campaigns of Russia against Ukraine. It…
Shameful Lobbying: Bankers Association’s Attack on Cybersecurity Transparency https://www.youtube.com/watch?v=zkWj0UqzoK0 Banking industry lobbyists are pressuring the SEC to gut the four-day breach disclosure rule — an essential safeguard for shareholders and potential victims. Their arguments are misleading, self-serving, and designed to protect profits over public trust. This video breaks down their claims and exposes the real motivations behind this disgraceful effort to…