Our audience has spoken. Here are this week’s trending cybersecurity stories so far.

Protecting the systems, data, and intellectual property of one of the world’s leading research institutions is no small undertaking. MIT has named a new Chief Information Security Officer to oversee cybersecurity across its academic and research operations, bringing in a seasoned security executive from another Ivy League institution. With sensitive research and a complex technology environment to safeguard, the role comes with significant responsibility. See who MIT has tapped to lead the charge.

A Florida cybersecurity CEO is facing federal fraud charges after prosecutors alleged his company secretly paid hackers for decryption keys while telling customers it could recover their data without paying a ransom. The alleged scheme involved over $19 million in client payments, with the company reportedly charging victims significantly more than the original ransom demands. In one case, prosecutors say the company paid hackers just $8,200 before billing the customer approximately $150,000. The CEO has pleaded not guilty as the federal investigation continues.

The FBI has linked the massive $6.3 billion cryptocurrency theft from Binance to TraderTraitor, a North Korean hacking operation previously connected to the $1.5 billion Bybit attack in 2025. The October 29 breach marks the group’s largest publicly attributed crypto theft yet, with investigators now racing to trace billions in stolen assets as hackers move funds across digital currencies and platforms. Binance says it has already replenished approximately 90% of the stolen assets and is working to restore normal operations.

Shadow AI, deepfake attacks, third-party vulnerabilities, and sensitive data slipping into platforms organizations can't control. The list of cybersecurity concerns is growing faster than many security teams can keep up with. Contributing CIO Rafael Pimentel-Pinto explores six uncomfortable questions every leadership team should be asking as AI introduces new risks and challenges traditional security practices. There's no simple framework for getting a good night's sleep, but knowing where your organization stands is a good place to start.