Caitlin Emma, a spokesperson for CBO, told TechCrunch on Friday that the agency is investigating the breach and "has identified the security incident, has taken immediate action to contain it, and has implemented additional monitoring and new security controls to further protect the agency's systems going forward." CBO is a nonpartisan agency that provides economic analysis and cost estimates to lawmakers during the federal budget process, including after legislative bills get approved at the committee level in the House and Senate.
As of November 3, 2025, it has delivered a jaw-dropping 297% one-year return and an almost unbelievable 4,034% over three years. What makes AppLovin special isn't just its growth rate. It's the company's AXON 2.0 technology that's the real star, using AI to match advertisers with the right app users. The results speak for themselves: 35% lower customer acquisition costs for AppLovin's clients and 56% operating margins that would make most software companies jealous.
In a market where many investors chase yesterday's winners at sky-high valuations, it takes both patience and conviction to find tomorrow's breakout growth stocks at a reasonable price. In this market, three compelling opportunities combine explosive growth potential with business models that are built to last: digital advertising expert AppLovin (NASDAQ: APP), cybersecurity giant CrowdStrike (NASDAQ: CRWD), and experience-focused coffee chain Dutch Bros (NYSE: BROS). Where to invest $1,000 right now? Our analyst team just revealed what they believe are the 10 best stocks to buy right now. These aren't your typical growth-at-any-price plays. Each company operates in a massive addressable market, holds sustainable competitive advantages, and shows clear paths to long-term profitability. Here's why these three stocks deserve a spot in your portfolio for the next decade.
Armis, a nine-year-old cybersecurity startup based out of San Francisco, intends to follow in these companies' footsteps. The company said on Wednesday that it has raised a $435 million pre-IPO round led by Growth Equity at Goldman Sachs Alternatives. CapitalG made a significant investment in the round, and new investor Evolution Equity Partners also participated. The round values Armis at $6.1 billion, a meaningful jump from the $4.5 billion tender offer valuation the startup announced in August.
The infosec program run by the US' Consumer Financial Protection Bureau (CFPB) "is not effective," according to a fresh audit published by the Office of the Inspector General (OIG). A summary of the report, dated October 31 and published on Monday, stated that since the OIG's previous audit, the CFPB's overall cybersecurity posture has decreased from level-4 maturity, defined as "managed and measurable," to level-2 maturity - "defined."
Williams, a 39-year-old Australian citizen who was known inside the company as "Doogie," admitted to prosecutors that he stole and sold eight exploits, or " zero-days," which are security flaws in software that are unknown to its maker and are extremely valuable to hack into a target's devices. Williams said some of those exploits, which he stole from his own company Trenchant, were worth $35 million, but he only received $1.3 million in cryptocurrency from the Russian broker.
According to the Office for National Statistics, there were 4.2 million fraud incidents in England and Wales for the year ending March 2025 (ONS). That's a massive 31% increase year-on-year. It's the highest number of fraud instances since the ONS records began in 2017. The issue is that online fraud is becoming so much more sophisticated than it ever was because of artificial intelligence. Fraud is more convincing than ever, so the strategy is emerging to use the same technology for detection and deterrence.
Once a fringe curiosity, the deepfake economy has grown to become a $7.5 billion market, with some predictions projecting that it will hit $38.5 billion by 2032. Deepfakes are now everywhere, and the stock market is not the only part of the economy that is vulnerable to their impact. Those responsible for the creation of deepfakes are also targeting individual businesses, sometimes with the goal of extracting money and sometimes simply to cause damage.
It was a sunny morning in late April when a massive power outage suddenly rippled across Spain, Portugal, and parts of southwestern France, leaving tens of millions of people without electricity for hours. Cities were plunged into darkness. Trains stopped and metro lines had to be evacuated. Flights were cancelled. Mobile networks and internet providers went down. Roads were gridlocked as traffic lights stopped working.
But ultimately, this is all the result of bad software, ridden with vulnerabilities. "We don't have a cybersecurity problem. We have a software quality problem," she said. The main reason for this was software vendors' prioritization of speed to market and reducing cost over safety. AI is making attackers more capable, helping them create stealthier malware and "hyper-personalized phishing," and also to spot and surface vulnerabilities and flaws more quickly.
According to PwC's 2025 Global Compliance Survey, [1] more than 40% of global companies reported at least one compliance failure that led to fines, penalties, or back pay. Staying on top of regulatory compliance requirements has only gotten more complex, and the stakes have never been higher. TD Bank's USD 3.1 billion penalty for "pervasive and systemic failure to maintain an adequate" anti-money laundering (AML) compliance program [2] demonstrates this and has incentivized companies of all sizes to invest in compliance training platforms that can be used to demonstrate compliance in audits and regulatory defense scenarios.
Cyber Security Festival 2025, one of the regions premier cybersecurity event, is set to bring together over 1,200 IT professionals, experts, and thought leaders - including David Heinemeier Hansson, the creator of Ruby on Rails, co-founder of 37signals, and New York Times-bestselling author. Two days of discussions, hands-on workshops, and networking await participants. Taking place on November 4-5, 2025, at TAP1 in Copenhagen, the festival will tackle the most pressing challenges in cybersecurity, from AI-driven threats to geopolitical cyber warfare.
The victims included a municipal water facility where pressure values were changed, an oil and gas company whose tank gauge was tampered with, and a farm silo where drying temperatures were altered, "resulting in potentially unsafe conditions if not caught on time." Officials stressed these weren't sophisticated, state-sponsored operations but opportunistic intrusions that caused real-world disruption ranging from false alarms to degraded service. The attackers didn't need custom malware or insider access either - just a connection and curiosity.
Meanwhile, in Warsaw and Vilnius, shoppers flee as flames engulf two of the largest city malls. Investigators soon discover the arsonists are teenagers recruited online, guided by encrypted messages, and paid by actors connected to hostile state agencies. The chaos sows fear, erodes social trust, and sends shockwaves through European communities-proxy sabotage that destabilizes societies while providing plausible deniability to those orchestrating the acts.
According to some estimates, tech debt, or the costs incurred when having to constantly fix aging or clunky software systems, has ballooned to more than $1.52 trillion in the U.S. alone. With technology like agentic AI being heavily embedded on top of companies' aging technology systems and operations, this rising cost of tech debt makes sense. Many organizations are quickly implementing new technologies without addressing underlying systems first.
Cisco's recent AI Readiness Index shows that in EMEA, only 11% of companies are completely ready for AI compared to 13% worldwide. This is a number that hasn't changed much in three years. While 82% of organizations intend to use AI, and 44% anticipate a significant increase in AI workloads within a year, only 30% believe their current IT infrastructure can support today's AI technologies.
One only has to look at the official figures released by the UK's Gambling Commission to see that online gambling is a booming sector. Now worth £6.9 billion a year, it outstrips the land-based activity that recorded a gross revenue of £4.6 billion for the period between April 2023 and March 2024. The real stars of the show are the online casinos, responsible for £4.4 billion in revenue and,
The AI company launched Atlas on Tuesday, with the goal of introducing an AI browser that can eventually help users execute tasks across the internet as well as search for answers. Someone planning a trip, for example, could also use Atlas to search for ideas, plan an itinerary, and then ask it to book flights and accommodations directly. ChatGPT Atlas has several new features, such as "browser memories," which allow ChatGPT to remember key details from a user's web browsing to improve chat responses.
New York State Department of Financial Services (DFS) Acting Superintendent Kaitlin Asrow today issued new cybersecurity guidance addressing the risks associated with entities becoming increasingly reliant on third-party service providers (TPSPs). The guidance builds on the Department's ongoing work to protect New Yorkers and DFS-regulated entities from cybersecurity risks through its nation-leading cybersecurity regulation.
On a weekday morning in suburban Maryland, a behavioral health therapist logs into her dashboard before meeting her first client. The screen displays real-time caseloads, treatment plans, and risk alerts. One name flashes yellow-a client whose recent history suggests heightened hospitalization risk. Rather than waiting for crisis, the therapist addresses this proactively. This moment illustrates how thoughtfully designed digital systems don't replace human care; they sharpen it.
The United States Department of Justice (DOJ) has intensified its nationwide crackdown on schemes involving North Korean information technology (IT) workers who fraudulently obtained employment at U.S. businesses. Over the past few years, the U.S. government issued multiple advisories to detect and combat the North Korean remote IT workers' attempts to infiltrate U.S. businesses, the latest of which came in July this year.