Latest

Cybercrime

Ivanti Vulnerability Again Forces Emergency Patches

David Perera  •  September 16, 2024

Customers of internet appliance maker Ivanti face yet another hackable vulnerability. The Utah company warned customers Friday about exploitation of a Cloud Service Appliance detected in the wild. Ivanti said the vulnerability doesn't affect version 5; it released a patch on Sept. 10.

Cyberwarfare / Nation-State Attacks

More US Sanctions Against Predator Spyware Maker Intellexa

Akshaya Asokan  •  September 16, 2024

The U.S. Department of the Treasury ramped up pressure on makers and sellers of Predator commercial spyware through sanctions on five individuals and a Caribbean company accused of enabling tens of millions of dollars of surveillance malware transactions.

Artificial Intelligence & Machine Learning

Strider Secures $55M to Fuel AI Growth and Global Expansion

Michael Novinson  •  September 13, 2024

Strider Technologies has raised $55 million in a Series C funding round to strengthen its AI capabilities and fuel global expansion efforts. The money will enhance the company’s AI-driven insights, support business with government agencies, and fuel international expansion in Europe and Asia.

Critical Infrastructure Security

Remote Access Tool Sprawl Increases OT Risks

Prajeet Nair  •  September 13, 2024

Excessive deployment of remote access tools in operational technology environments expands attack surfaces and creates operational challenges, warn security researchers from Claroty. Remote access tools are essential, but they introduce numerous potential vulnerabilities that threat actors exploit.

►

Business Continuity Management / Disaster Recovery

ISMG Editors: Will Microsoft Rethink Windows Security?

Anna Delaney  •  September 13, 2024

In the latest weekly update, ISMG editors discussed the fallout from the CrowdStrike global IT outage on endpoint security tools, Mastercard's monumental acquisition of Recorded Future to bolster its cybersecurity portfolio, and the latest efforts by U.S. officials to secure the 2024 election.

Artificial Intelligence & Machine Learning

Irish Data Protection Commission Probes Google's AI Model

Akshaya Asokan  •  September 13, 2024

The Irish data regulator launched an investigation to determine Google's compliance with a European privacy law when it was developing its PaLM 2 artificial intelligence model. Google launched the multilingual generative AI model last year.

Critical Infrastructure Security

Chinese Crane Giant Poses Cybersecurity Threat to US Ports

Chris Riotta  •  September 13, 2024

Congress' Select Committee on the Chinese Communist Party published a report warning that Beijing could use a Chinese state-owned crane company that currently dominates the global ship-to-shore port crane market to disrupt and manipulate the United States maritime supply chain.

Cybercrime

Chinese-Speaking Hackers Manipulate SEO Rankings Globally

Prajeet Nair  •  September 13, 2024

A Chinese search engine optimization operation hacked more than 35 web servers and stole credentials in a campaign to boost the online rankings of malicious porn sites. Researchers from Cisco Talos dubbed the threat cluster DragonRank.

Artificial Intelligence & Machine Learning

Black Hat/DEF CON 2024: Latest Insights on Security and AI

Information Security Media Group  •  September 13, 2024

Welcome to Information Security Media Group's Black Hat and DEF CON 2024 Compendium featuring latest insights from the industry's top cybersecurity researchers and ethical hackers, as well as perspectives from CEOs, CISOs and government officials on the latest trends in cybersecurity and AI.

Critical Infrastructure Security

GPS Modernization Stalls as Pentagon Faces Chip Shortages

Chris Riotta  •  September 12, 2024

The Space Force is suffering from years of delays, setbacks and shortcomings in its Global Positioning System modernization program, according to a Government Accountability Office report, which found major deficiencies and testing issues that could hinder the United States competitiveness in space.

Business Continuity Management / Disaster Recovery

Kernel Mode Under the Microscope at Windows Security Summit

Michael Novinson  •  September 12, 2024

Cutting kernel mode dependencies and adopting safe deployment practices will make endpoint systems more resilient and secure for Windows customers. Tuesday's meeting came two months after a faulty CrowdStrike update disrupted 8.5 million Windows machines and caused $5.4 billion in direct losses.

Cybercrime

Android Trojans Still Pose a Threat, Researchers Warn

Mathew J. Schwartz  •  September 12, 2024

Android malware first seen in the wild in late 2023 has been targeting users' bank and online payment accounts, bolstered by its ability to steal one-time access codes sent via SMS. The banking Trojan, which security researchers call Ajina, appears to be a joint endeavor with affiliates.