IBM Bets $5 Billion on Open-Source Security

Risk-aware identity governance: Prioritize what truly matters

Continuously monitor identity-based risks and spot deviations that could lead to exposure. ADManager Plus automatically starts access reviews, remediations, and maintains a clean, auditable identity posture without manual overhead.

🔎 Cyber Watch 🔎

Auto lender IAC warns 79,000+ people of data breach that leaked SSNs

New England-based Industrial Acceptance Corporation (IAC) has disclosed a data breach affecting 79,216 individuals following a ransomware attack discovered in February 2025. According to the company's notification, attackers gained access to files containing personal information, including names, Social Security numbers, and driver's license numbers.

IAC states that the ransomware incident was claimed by the Inc ransomware group. However, the company was also listed on the leak site of the Akira ransomware gang in March 2025, where attackers alleged they stole 60 GB of data. IAC has not publicly confirmed Akira's claim, and the exact method of intrusion remains unknown.

Key takeaways

  • Industrial Acceptance Corporation disclosed a breach affecting 79,216 people.

  • Exposed data includes names, Social Security numbers, and driver's license numbers.

  • IAC attributes the incident to the Inc ransomware group.

  • The Akira ransomware gang separately claimed responsibility for stealing 60 GB of data.

  • The company took systems offline after discovering unauthorized network activity.

  • Affected individuals are being offered 12 months of credit monitoring services.

🎙️ Tech Briefing On‑Air 🎙️

AI & MDR - The Future of Cybersecurity Detection and Response

This week's recommendation is AI & MDR – The Future of Cyber Security Detection & Response from Cyber Security America. The discussion explores how AI is influencing managed detection and response services, where automation can help analysts, and where human expertise remains essential. One of the recurring themes is that AI can accelerate investigations and reduce alert fatigue, but organizations still need skilled analysts to validate findings and make decisions during incidents.

Takeaways

  • AI is becoming a core component of MDR services.

  • Automation can reduce repetitive analyst workloads.

  • Human oversight remains essential for incident response.

  • Organizations should balance automation with expertise.

  • Detection speed continues to be a major competitive advantage.

🤝 Partner Intel 🤝

ManageEngine AD Solutions

ManageEngine’s Active Directory solutions help organizations improve visibility, security, and control across hybrid identity environments. Tools such as ADManager Plus, ADAudit Plus, and ADSelfService Plus support user lifecycle management, privilege oversight, compliance reporting, and self-service password management.

For security teams, the real value lies in reducing manual administration while improving audit readiness. Stronger identity governance also helps organizations respond faster to threats tied to credential misuse or privilege abuse.

Key Features

  • Automates user provisioning and deprovisioning

  • Improves auditing and compliance reporting

  • Strengthens privileged access oversight

  • Reduces help desk workload through self-service capabilities

🤖 AI Runtime 🤖

IBM Bets $5 Billion on Open-Source Security

IBM and Red Hat have announced Project Lightwell, a $5 billion initiative focused on securing open-source software through AI-driven vulnerability detection, validation, and remediation. The project brings together more than 20,000 engineers and aims to create a centralized clearinghouse where organizations can receive tested patches and security guidance for open-source components. Early participants include major financial institutions that rely heavily on open-source software in production environments.

📊 By the Numbers 📊

🗳️ Your Monday Take 🗳️

Cast your vote on our weekly poll.

Your Security Team Gets One Extra Budget Dollar. Where Would You Spend It?

Login or Subscribe to participate in polls.

📩 We’ll share the results in the Friday issue.

Advertise with Comparitech
Does your business offer services or products in cybersecurity? Get your product seen by IT leaders and professionals.

Advertise with us →

Until Wednesday’s edition - Let’s keep that zero-day count at zero!