Latest

Cybercrime

Breach Roundup: Mexico in Hacker Spotlight

Anviksha More  •  September 12, 2024

This week, cyberthreats rising in Mexico; FBI warned of BEC scams; U.K. police arrested hacking suspect; Avis, Slim CD, Medicare and Fortinet disclosed breaches; Highline public schools reopened after cyberattack; a critical flaw was found in WHOIS; and Konni upped attacks on Russia, South Korea.

Fraud Management & Cybercrime

NoName Apparently Allies With RansomHub Operation

Prajeet Nair  •  September 11, 2024

Up-and-coming online criminal extortion group RansomHub appears to have a new affiliate - NoName, a midtier actor whose main claim to fame so far has been impersonating the LockBit ransomware-as-a-service operation. NoName is known for exploiting years-old vulnerabilities.

Governance & Risk Management

ColorTokens Strengthens Zero Trust With PureID Acquisition

Michael Novinson  •  September 11, 2024

ColorTokens purchased PureID, expanding its zero trust framework with identity-based segmentation for cloud and hybrid environments. The acquisition focuses on securing cloud applications, microservices and APIs through advanced identity-based authentication.

Cybercrime

Critical GeoServer Flaw Enabling Global Hack Campaigns

Prajeet Nair  •  September 6, 2024

Cybercriminals are using a critical remote code execution vulnerability in an open-source geospatial data platform to spread malware globally across several industries. GeoServer Project maintainers released a patch on July 1. The vulnerability has a CVSS score of 9.8 out of 10.

Artificial Intelligence & Machine Learning

Underground Demand for Malicious LLMs Is Robust

Rashmi Ramesh  •  September 6, 2024

The underground market for illicit large language models is a lucrative one, said academic researchers who called for better safeguards against artificial intelligence misuse. "This laissez-faire approach essentially provides a fertile ground for miscreants to misuse the LLMs."

Cyber Insurance

Moody's Ratings: Cyber Insurance Competition Up, Prices Down

Mathew J. Schwartz  •  September 6, 2024

Competition has been increasing in the cyber insurance market, leading to a "moderate" decrease in insurance premiums after several years of rate increases. So reports Moody's Ratings, which said that the changes were driven by an influx of new players that is likely to continue.

Endpoint Detection & Response (EDR)

After CrowdStrike Outage: Time to Rebuild Microsoft Windows?

Mathew J. Schwartz  •  September 6, 2024

The global disruption caused by a faulty CrowdStrike software triggering a kernel panic and computer meltdowns has led government agencies, experts and vendors to call for rethinking Windows operating system resiliency, including the deep-level OS access security tools now require.

►

Cybercrime

ISMG Editors: How Arrest of Telegram CEO Affects Encryption

Anna Delaney  •  September 6, 2024

In the latest weekly update, ISMG editors discussed the implications of the recent arrest of Telegram's CEO in Paris for encrypted messaging services, the transformative impact of artificial intelligence in cybersecurity, and the latest regulations designed to curb fraud in electronic payments.

Cyberwarfare / Nation-State Attacks

US Broadens Indictments Against Russian Intelligence Hackers

Chris Riotta  •  September 5, 2024

The United States announced a superseding indictment Thursday that adds five Russian military intelligence officers as defendants while warning that Kremlin cyberthreat actors continue to target U.S. and global critical infrastructure.

Cybercrime

Breach Roundup: YubiKey 5 Is Vulnerable to Cloning

Anviksha More  •  September 5, 2024

This week, YubiKey 5 has a flaw, an Ohio city sued a researcher, the Irish regulator ended its GrokAI case, open-source AI tools exposed data, Starlink blocked X in Brazil, FCC banned Kaspersky, Intel addressed a researcher's claim, and Transport for London is still affected by a cyber incident.

Blockchain & Cryptocurrency

Cryptohack Roundup: Focus on Pig Butchering

Rashmi Ramesh  •  September 5, 2024

This week, pig-butchering scams and bitcoin ATM scams increased, an update in the FTX case, stolen WazirX funds were laundered, settlements in the SEC-Galois and CFTC-Uniswap cases, Scotland seized crypto in a robbery, North Korea targeted Web3 staff, and the Mt. Gox CEO launched a new crypto firm.

►

Standards, Regulations & Compliance

Banks Brace for DORA Cybersecurity Deadline on Jan. 17

Anna Delaney  •  September 5, 2024

The Digital Operational Resilience Act aims to reshape the financial services industry by introducing strict cybersecurity standards. Financial institutions must comply with the new rules by Jan. 17, 2025, or face severe penalties, said Richard Breavington, head of cyber and tech insurance at RPC.