Latest

Cyberwarfare / Nation-State Attacks

Spyware Campaign Targets Sino Minority Groups Via WeChat

Anviksha More  •  December 6, 2024

A possible Chinese state threat group is targeting vulnerabilities in messaging apps to deliver spyware in cross-platform devices used by members of ethnic minorities targeted for repression by Beijing. Trend Micro dubs the group "Earth Minotaur."

Fraud Management & Cybercrime

Dutch Counter-Ransomware Initiative Led to Global Takedowns

Akshaya Asokan  •  December 6, 2024

A Dutch public and private sector anti-ransomware initiative has contributed to ransomware disruptions globally, found an assessment from the University of Leiden. "Project Melissa" was launched in 2023 by Cybersafe Netherlands, the Dutch National Cyber Security Center and security companies.

Artificial Intelligence & Machine Learning

Trump's AI, Crypto Czar David Sacks Faces Conflict Scrutiny

Chris Riotta  •  December 6, 2024

President-elect Donald Trump's appointment of former PayPal executive David Sacks to serve as the inaugural White House czar for artificial intelligence and cryptocurrency is already raising significant concerns about potential conflicts of interest and market favoritism.

CISO Trainings

Protecting the C-Suite in the Wake of UHC CEO's Murder

Marianne Kolbasuk McGee  •  December 6, 2024

The torrents of public hostility directed at health insurers in the aftermath of UnitedHealthCare CEO Brian Thompson's murder are serious signs of intensifying cyber and physical threats facing the C-suites of healthcare and many other sectors, said Chris Pierson, founder and CEO of BlackCloak.

Governance & Risk Management

Here's Where Top Cybersecurity Vendors Stand as 2025 Nears

Michael Novinson  •  December 6, 2024

Three of the world's largest pure-play cybersecurity vendors recently reported earnings, grappling with SIEM and firewall displacement opportunities along with rebounding from a massive outage. Palo Alto Networks continues to reap the benefits of buying IBM's QRadar SaaS business.

Artificial Intelligence & Machine Learning

Weaponized AI: Hot for Fraud, Not for Election Interference

Mathew J. Schwartz  •  December 6, 2024

Artificial intelligence: What's it good for? Per the old song about war, the answer isn't "absolutely nothing," but so far it also isn't "absolutely everything." New findings pinpoint where generative AI and deepfakes are hot - fraud - and where they're not - election interference

►

Email Security & Protection

AI and 'Customer Zero' Practices for Enhanced Usability

Tom Field  •  December 5, 2024

Barracuda's CIO Siroui Mushegian discusses how Barracuda uses AI and strong partnerships to deliver comprehensive cybersecurity solutions. The company builds products on AWS infrastructure, sells them through AWS Marketplace and uses AWS for internal systems.

Cyberwarfare / Nation-State Attacks

Russian Forces Accused of Secretly Planting Spyware on Phone

Chris Riotta  •  December 5, 2024

A Russian activist says security forces covertly installed spyware on his cellphone while he was detained in Moscow for aiding Ukraine. A report published Thursday shows the spyware received a broad range of permissions, from tracking location to reading encrypted messages.

Blockchain & Cryptocurrency

Cryptohack Roundup: Solana npm Package Attack's Wallet Risks

Prajeet Nair  •  December 5, 2024

This week, Solana npm package attack, a Brazilian banking giant entered crypto trading and a Nebraska man pleaded guilty to cryptojacking. Australia tightened rules for crypto businesses and crypto losses dropped in 2024 and DMM Bitcoin will cease operations.

Cybercrime

Breach Roundup: Vodka Maker Bankrupt After Cyberattack

Anviksha More  •  December 5, 2024

This week, a vodka maker in bankruptcy cited its ransomware attack, no ransomware at the Spanish tax agency and cable cuttings in Finland. Data stolen from Japanese shoppers, Chemonics International and law firm KYL. A sweep of Asian cybercrime, trends in the U.K. and ENGlobal ransomware attack.

Cyberwarfare / Nation-State Attacks

Russian APT Hackers Co-Opt Pakistani Infrastructure

Akshaya Asokan  •  December 5, 2024

A Russian state hacking group hijacked the command and control infrastructure of a Pakistan-based espionage network as part of an ongoing intelligence-gathering operation targeting victims in Asia, finds a report from Microsoft and Black Lotus Labs.

Cyberwarfare / Nation-State Attacks

Mitel MiCollab VoIP Software: Zero-Day Vulnerability Alert

Mathew J. Schwartz  •  December 5, 2024

Security researchers warn of a newly discovered zero-day vulnerability in widely used VoIP telephony software, a discovery that comes as the United States struggles to evict Chinese nation-state hackers from telecom networks. The software is the MiCollab software suite from Canada-based Mitel.