Whistleblower sues IBM, AT&T over hidden foreign hacks

SecurityWeek's weekly roundup highlights critical cybersecurity developments:

1. **IBM and AT&T Lawsuit**: A whistleblower claims the companies covered up foreign hacks to retain federal contracts.

2. **University of Oxford Data Breach**: Access to alumni and employer data was compromised, affecting user accounts on CareerConnect.

3. **Google Layoffs**: Layoffs in Google's cybersecurity division, particularly in Mandiant, with no exact numbers disclosed.

4. **Microsoft AI Incident Response**: Microsoft released a playbook for handling security incidents in Microsoft 365 Copilot and Azure AI Services.

5. **CISA Vulnerability Alert**: A command injection flaw in BerriAI LiteLLM has been added to CISA’s catalog due to active exploitation.

6. **Coupang's $400 Million Fine**: South Korea's PIPC issued a fine over security failures impacting 30 million customers.

7. **Nokia's Security Platform**: Introduction of Deepfield Genome Shield to protect against DDoS attacks using proxy botnets.

8. **ICS Exposure Report**: Industrial control systems are seeing a flat exposure rate, but the overall risk profile is increasing.

9. **ENISA Collective EU Resilience**: EU aims to improve collective response capabilities in the face of cyber incidents.

10. **Crypto Laundering Operation Disrupted**: A global operation dismantled a major cryptocurrency laundering network linked to ransomware.