Ex-Threat Intel Exec Accuses IBM and AT&T of Hiding Hacks

A former IBM VP of Threat Intelligence alleges that IBM and AT&T failed to implement basic security controls—failing to retain logs for AT&T-managed VPN access and lacking network segmentation—allowing foreign (nation-state) hackers to move freely within IBM cloud services; the allegations are part of a False Claims Act lawsuit unsealed after the government declined to join.