The hacking group known as "Cyber Av3ngers" targeted a Pennsylvania water municipality in November.

US CISA: Secure Israeli-Made Technology From Iranian Hackers

Chris Riotta • December 4, 2023

The U.S. Cybersecurity and Infrastructure Security Agency encouraged all organizations that use equipment developed by an Israeli technology company called Unitronics to bolster their cyber posture amid the Israel-Hamas war after an Iranian hacking group attacked a Pennsylvania water municipality.

Governance & Risk Management

Police Bust Suspected Ransomware Group Ringleader in Ukraine

Latest

CISO Trainings

Steve Katz, World's First CISO, Dies in Hospice Care

Anna Delaney , Marianne Kolbasuk McGee • December 4, 2023

Steve Katz, the world's first CISO, died Saturday night while under hospice care in Long Island, New York. He left a strong legacy - not just as a pioneer and trailblazer in cybersecurity leadership but also as a beloved colleague and mentor who generously shared his time and wisdom.

Governance & Risk Management

Russian GRU Hackers Target Polish Outlook Inboxes

David Perera • December 4, 2023

Russian military intelligence hackers active in Poland are exploiting a patched flaw in Microsoft Outlook, say cyber defenders from Redmond and Warsaw. Microsoft in a Monday post identifies the hackers as Forest Blizzard, also known as APT28 and Fancy Bear.

Endpoint Security

LogoFAIL Bootup Flaw Puts Hundreds of Devices at Risk

Prajeet Nair • December 4, 2023

Hackers could use a firmware specification designed to flash a corporate logo during computer bootup to deliver a malicious payload that circumvents the industry standard for only loading trusted operating systems. The flaw stems from graphic image parsers embedded into system firmware.

Artificial Intelligence & Machine Learning

ISACA Generative AI Survey: Training Gaps, Focus on Security

Anna Delaney • December 1, 2023

According to a recent pulse poll from ISACA on generative AI, only 6% of respondents' organizations are providing training to all staff on AI, and more than half - 54% - say that no AI training is provided at all, even to teams directly affected by AI.

Cybercrime

TrickBot Developer Pleads Guilty in US Court

David Perera • December 1, 2023

A Russian national pleaded guilty in U.S. federal court for his role in developing TrickBot. Operators of the malware targeted hospitals and healthcare centers with ransomware attacks during the height of the novel coronavirus pandemic. Vladimir Dunaev faces up to 35 years in prison.

Artificial Intelligence & Machine Learning

ISMG Editors: What Did the Sam Altman-OpenAI Saga Teach Us?

Anna Delaney • December 1, 2023

In the latest weekly update, four editors at Information Security Media Group discuss Sam Altman and OpenAI's brief leadership nightmare, the state of generative AI one year after the general release of ChatGPT, and how police nabbed a suspected ransomware group ringleader in Ukraine.

Fraud Management & Cybercrime

Surgical Practice Notifying 437,400 Patients of Data Theft

Marianne Kolbasuk McGee • December 1, 2023

A large, Seattle-based surgical group is notifying nearly 437,400 individuals that their information was potentially compromised in a ransomware and data theft incident earlier this year. The breach is part of a larger, disturbing trend in the healthcare sector in 2023.

Standards, Regulations & Compliance

US Bipartisan Lawmakers Urge Crackdown on Chinese LiDAR

Chris Riotta • December 1, 2023

A bipartisan group of lawmakers urged the Biden administration to consider intensifying restrictions on semiconductor sales to Chinese companies in a bid to ensure that U.S. remote-sensing technology doesn't aid Beijing's national security efforts.

Cryptocurrency Fraud

North Korea's Supercharged State-Backed Cryptocurrency Theft

Mathew J. Schwartz • December 1, 2023

To service the perpetually cash-starved regime of North Korea, hackers will continue their relentless onslaught on cryptocurrency - and all users of it - with state backing to industrialize their hacking and money laundering capabilities, experts warn.

Information Sharing

Okta Delays New Products, Projects 90 Days to Boost Security

Michael Novinson • November 30, 2023

Okta has paused product development and internal projects for 90 days to beef up its security architecture and operations for applications, hardware and third-party vendors. Okta will move to strengthen its cyber posture, including a security action plan and engaging with third-party cyber firms.

Cyberwarfare / Nation-State Attacks

US Sanctions North Korean Cyber Unit After Satellite Launch

Chris Riotta • November 30, 2023

The United States on Thursday sanctioned North Korean cyberespionage threat actor Kimsuky, known for its social engineering campaigns against targets it suspects of holding intelligence on geopolitical events and negotiations affecting the Hermit Kingdom.

Fraud Management & Cybercrime

Capital Health in NJ Is Responding to a Cyberattack

Marianne Kolbasuk McGee • November 30, 2023

New Jersey-based hospital group Capital Health is dealing with a network outage, caused by a cyberattack earlier this week, which is affecting some patient services. Capital Health is at least the second healthcare provider in the Garden State responding to a cyberattack this week.