Microsoft: Russian Cyber Proxies Targeting Harris Campaign

Chris Riotta • September 19, 2024

Microsoft warned the Kremlin is targeting the 2024 presidential election campaign of Vice President Kamala Harris with its wide-ranging election interference operations. Russian groups likely aligned with the Kremlin have shifted their focus to the Harris campaign in recent months.

Governance & Risk Management

US Indicts Chinese National for Phishing for NASA Tech

Latest

Cybercrime

Tor Says Platform Is Safe After German Police Interception

Akshaya Asokan • September 19, 2024

The Tor Project on Wednesday reassured users that they will remain anonymous after media reported that German police successfully used Tor to trace the alleged administrator of a child pornography site. Tor users can continue to use the browser "securely" and the "Tor Network is healthy," it said.

Attack Surface Management

Picus Security Receives $45M to Enhance Exposure Management

Michael Novinson • September 19, 2024

Picus Security has received $45 million in funding led by Riverwood Capital. The investment will accelerate product development in exposure management, including attack surface management and automated pen testing. The company plans to expand further in the Americas, targeting key growth areas.

Critical Infrastructure Security

Raptor Train Botnet Infects 260,000 Devices Globally

Prajeet Nair • September 19, 2024

A Chinese state-sponsored botnet called Raptor Train has infected more than 260,000 IoT and office network devices to target critical infrastructure globally. The hackers used zero-days and known vulnerabilities to compromise more than 20 different types of devices to expand their botnet.

Finance & Banking

Are Pure-Play Threat Intel Vendors a Vanishing Breed?

Michael Novinson • September 19, 2024

Despite high-profile acquisitions in the space, pure-play threat intelligence firms still have a future in the marketplace, but they need to offer specialized intelligence capabilities that cyber defense teams can't find elsewhere, said Forrester analyst Brian Wrozek.

Cybercrime

Breach Roundup: Cyberwar Is Too Hot for Insurers

Anviksha More • September 19, 2024

Munich Re said it can't insure cyberwar, it was Rhysida that hit the Seattle airport, Meta banned RT, Ivanti disclosed a flaw, hackers exploited construction software, AT&T settled with FCC, Transport of London is checking users, web servers pose big risk, and police disrupted a phishing network.

Anti-Phishing, DMARC

Fake Job Lures Target Employees of Aerospace, Energy Firms

Jayant Chakravarti • September 19, 2024

A North Korean cyberespionage group is posing as job recruiters and targeting aerospace and energy sector employees with lucrative job offers, according to Mandiant. The hackers use email and WhatsApp messages to lure victims into clicking a link that deploys backdoor malware onto their devices.

Blockchain & Cryptocurrency

Cryptohack Roundup: Delta Prime, Ethena Exploits

Rashmi Ramesh • September 19, 2024

This week, Delta Prime and Ethena were hacked, Lazarus' funds were frozen, the SEC settled with Prager Metis and Rari Capital, Sam Bankman-Fried sought a new trial, the SEC accused NanoBit and CoinW6 of scams, the CTFC sought to fight pig butchering, and Wormhole integrated World ID and Solana.

CISO Trainings

Should CIOs and CISOs Wear One Hat?

Sandhya Michu • September 19, 2024

As cloud computing, DevOps and automation continue to evolve, the lines between IT functions are fading, making security integral to these processes. Hiren Dave, CIO and CISO at Essen Health Care, shares how combining the roles of CIO and CISO improves risk management and communication.

Cyber Insurance

Cyber Insurers Are Intensely Scrutinizing Healthcare Clients

Marianne Kolbasuk McGee • September 19, 2024

As threat actors continue to evolve their attacks to circumvent security measures, cyber insurers are raising the bar for prospective healthcare security clients. Underwriters are increasing their scrutiny and adding new coverage requirements, said Chris Henderson of cybersecurity company Huntress.

Endpoint Security

What's Next for Secure Communication After Exploding Pagers?

Mathew J. Schwartz • September 19, 2024

Secure communications in an age of network insecurity has focused mostly on encryption and fears of surveillance tracking. But as this week revealed to the dismay of terrorists and criminals alike, no OPSEC measure is bulletproof to the effects of a corrupted supply chain.

Artificial Intelligence & Machine Learning

Beware the Great AI Bubble Popping

Rashmi Ramesh • September 18, 2024

If the bubble isn't popping already, it'll pop soon, say many investors and close observers of the AI industry. If past bubbles are a benchmark, the burst will filter out companies with no solid business models and pave the way for more sustainable growth for the industry in the long term.

Governance & Risk Management

Swiss Post to Strengthen Cybersecurity With Open Systems Buy

Michael Novinson • September 18, 2024

Swiss Post has signed an agreement to acquire Open Systems, a cybersecurity leader specializing in secure access service edge. The deal, expected to close by late 2024, will expand Swiss Post's offerings for secure digital communications for public and private organizations across Switzerland.