Latest

Cyberwarfare / Nation-State Attacks

US, Microsoft Seize Domains Used in Russian Spear-Phishing

David Perera  •  October 3, 2024

The U.S. Department of Justice and Microsoft seized more than 100 websites allegedly used by a Russian intelligence cyberespionage operation with a fondness for spear phishing. Targets include the national security apparatus and journalists, think tanks, and non-governmental organizations.

Blockchain & Cryptocurrency

Cryptohack Roundup: Guilty Plea in $37M Theft Case

Rashmi Ramesh  •  October 3, 2024

This week, a guilty plea for $37M stolen, a $3.8M Onyx hack, a first conviction for illegal crypto ATM operations, Zort owner fraud, WazirX's post-hack liability, U.S. congressmen ask for Binance exec's release, a U.S. court denied Tornado Cash exec's motion and a SEC-Mango Markets settlement.

Governance & Risk Management

Warnings Mount Over Fake North Korean IT Workers

Akshaya Asokan  •  October 2, 2024

The German federal domestic intelligence agency is adding to warnings over North Korean IT workers obtaining remote work in Western tech companies. The world's most secretive and repressive regime looks for multiple ways to circumvent strict economic sanctions.

Cybercrime

Evil Corp Protected by Ex-Senior FSB Official, Police Say

Mathew J. Schwartz  •  October 1, 2024

Russian intelligence agencies tasked the notorious Russian-speaking cybercrime syndicate Evil Corp with conducting cyberattacks and cyberespionage operations on behalf of the Russian government, British police said Tuesday. Evil Corp has stolen at least $100 million from victims.

Fraud Management & Cybercrime

White House Pledges Major Deliverables at Ransomware Summit

Chris Riotta  •  September 30, 2024

The International Counter Ransomware Initiative is kicking off a four-day summit Monday in Washington that aims to coordinate the group’s 68 member nations around a series of global efforts designed to enhance information sharing and develop strategies to deter ransomware attacks.

►

CISO Trainings

CyberEdBoard Profiles in Leadership: Shervin Evans

Anna Delaney  •  September 30, 2024

Shervin Evans began his career as a programmer but he always knew his future was in cybersecurity. Now, 20 years later as an information security officer, he evangelizes about cybersecurity to employees in his organization, his family and the broader community.

Cybercrime

Alleged Russian Cybercrime Money Launderer Indicted in US

Rashmi Ramesh  •  September 27, 2024

The United States on Thursday criminally charged an alleged key money laundering figure in the Russian cybercriminal underground on the same day Western authorities shut down virtual currency exchanges by seizing web domains and servers associated with Russian cybercrime.

Identity & Access Management

NIST Calls for Major Overhaul in Typical Password Practices

Chris Riotta  •  September 26, 2024

The National Institute of Standards and Technology is calling for longer, randomized passwords instead of memorized phrases containing combinations of upper and lowercase letters in new guidance that aims to modernize current password practices across the public and private sectors.

Cybercrime

Breach Roundup: How to Spot North Korean IT Workers

Anviksha More  •  September 26, 2024

This week, advice on spotting North Korean staff; ransomware attacks rose; MoneyGram back online; FCC fined political operative; CISA warned of water system attacks; Ukraine restricted Telegram use; North Korean hackers used new malware; U.K. arrested alleged hacker; PSNI is in data leak talks.

Blockchain & Cryptocurrency

Cryptohack Roundup: BingX, Truflation Exploits

Rashmi Ramesh  •  September 26, 2024

This week, BingX, Truflation, OpenAI X account hacked; Germany shut 47 exchanges; Caroline Ellison sentenced; two got crypto theft charges; one got crypto scam fine; Banana Gun will refund victims; WazirX, Liminal in dispute; SEC settled with TrueCoin, TrustToken; CFTC may settle with Mango Markets.

Fraud Management & Cybercrime

Sophos: Attacks Drop in Nearly All Sectors But Healthcare

Marianne Kolbasuk McGee  •  September 26, 2024

Ransomware attacks are declining across many sectors - but not in healthcare, where an ongoing surge is reaching a four-year high in incidents, according to new research from security firm Sophos, which surveyed 5,000 IT leaders across 15 sectors and 14 countries between January and February.

Artificial Intelligence & Machine Learning

US FTC Targets AI Firms in Crackdown on Deceptive Practices

Chris Riotta  •  September 25, 2024

The U.S. Federal Trade Commission on Wednesday announced a series of law enforcement actions targeting companies the commission said is using deceptive artificial intelligence practices to defraud consumers, from promising "AI lawyers" to generating countless fake reviews.