Cyber

• CrowdStrike disclosed on April 25, 2026, a sophisticated cyberattack via compromised third-party software affecting 2.5 million patient records at UnitedHealth's Change Healthcare subsidiary. • Attackers, linked to North Korean Lazarus Group, exfiltrated data over 72 hours before detection, demanding $22 million ransom. • Incident highlights vulnerabilities in US healthcare IT supply chains, prompting HHS emergency directives for 500+ providers.

• The First Trust NASDAQ Cybersecurity ETF (CIBR) experienced a pullback in recent trading sessions amid market volatility. • Investors assess buy-the-dip opportunities as the ETF tracks key US cybersecurity firms. • RAD Intel, a holding, scaled from $10 million to over $220 million valuation since acquiring its AI engine in 2021, achieving 5,400% growth.

• OpenAI and Microsoft expanded their cybersecurity partnership to jointly combat emerging cyber threats through deployment of advanced artificial intelligence tools and enhanced security protocols. • Microsoft will leverage its cybersecurity expertise to strengthen protections for OpenAI's systems and customer environments, while OpenAI's powerful AI models will be made accessible to Microsoft's security operations. • The collaboration aims to address rising AI-driven cyber risks and establish industry standards for AI security defense.

• OpenAI and Microsoft announced an expanded cybersecurity partnership aimed at combating emerging cyber threats in the AI era. • The two companies plan to deploy advanced artificial intelligence tools to enhance security capabilities across their platforms. • This collaboration reflects the growing recognition that AI-powered security solutions are essential to address increasingly sophisticated cyber threats.

• Cyware was again named to the Cyber66 list of hottest privately held security companies, announced via PRNewswire on April 23, 2026. • The recognition highlights Cyware's leadership in AI-powered threat intelligence operationalization and secure threat sharing. • Company emphasizes agentic AI for accelerating targeted threat responses and collaboration.

• IBM announced IBM Autonomous Security on April 15, 2026, deploying coordinated AI agents to detect and contain threats at machine speed without human intervention. • The service addresses a critical gap: attackers now achieve full network lateral movement in as little as 27 seconds, compared to an average of 29 minutes in 2024—a 65% speed improvement driving urgent demand for AI-powered defenses. • AI-enabled attacks surged 89% year-over-year in 2025, with a 44% increase in assaults exploiting public-facing applications, prompting major security vendors to adopt autonomous AI defense strategies.

• Anthropic is investigating unauthorized access to its Mythos AI tool, a critical cybersecurity system, after reports revealed that an unauthorized group breached the platform via a vendor vulnerability. • The incident raises fresh concerns about security gaps within advanced AI systems and amplifies questions about the trustworthiness of AI tools handling sensitive security functions. • The breach exemplifies broader risks in the interconnected tech ecosystem, where vendor compromises can cascade into exposures of high-value AI infrastructure.

• Cowbell Cyber Inc. launched Prime One, a new U.S. cyber insurance product for organizations with $250 million to $1 billion in annual revenue. • The policy provides up to $10 million in coverage limits and includes affirmative protection for AI-related incidents and quantum computing risks. • Prime One addresses unauthorized use or access to AI systems in business operations, targeting advanced digital risk profiles.