GPS Modernization Stalls as Pentagon Faces Chip Shortages

Chris Riotta • September 12, 2024

The Space Force is suffering from years of delays, setbacks and shortcomings in its Global Positioning System modernization program, according to a Government Accountability Office report, which found major deficiencies and testing issues that could hinder the United States competitiveness in space.

Critical Infrastructure Security

White House Launches Cyber, Tech and AI Hiring Sprint

Latest

Business Continuity Management / Disaster Recovery

Kernel Mode Under the Microscope at Windows Security Summit

Michael Novinson • September 12, 2024

Cutting kernel mode dependencies and adopting safe deployment practices will make endpoint systems more resilient and secure for Windows customers. Tuesday's meeting came two months after a faulty CrowdStrike update disrupted 8.5 million Windows machines and caused $5.4 billion in direct losses.

Fraud Management & Cybercrime

Why Aren't More Rural Hospitals Accepting Free Cyber Help?

Marianne Kolbasuk McGee • September 12, 2024

Rural and small hospitals and other healthcare providers often complain that a lack of resources is a major factor stunting their cybersecurity maturity. But even when offered free or discounted cyber assistance, many of these organizations aren't signing up.

Cybercrime

Android Trojans Still Pose a Threat, Researchers Warn

Mathew J. Schwartz • September 12, 2024

Android malware first seen in the wild in late 2023 has been targeting users' bank and online payment accounts, bolstered by its ability to steal one-time access codes sent via SMS. The banking Trojan, which security researchers call Ajina, appears to be a joint endeavor with affiliates.

Cybercrime

Breach Roundup: Mexico in Hacker Spotlight

Anviksha More • September 12, 2024

This week, cyberthreats rising in Mexico; FBI warned of BEC scams; U.K. police arrested hacking suspect; Avis, Slim CD, Medicare and Fortinet disclosed breaches; Highline public schools reopened after cyberattack; a critical flaw was found in WHOIS; and Konni upped attacks on Russia, South Korea.

Blockchain & Cryptocurrency

Cryptohack Roundup: $20.5M Indodax Theft

Rashmi Ramesh • September 12, 2024

This week, Indodax was hacked, Angel Drainer resurfaced, Russia developed Infra crypto, GS Partners settled with U.S. states, Caroline Ellison to be sentenced Sept. 24, FCA prosecuted first unregistered crypto case, Nigeria set new crypto regulations, and India may approve offshore crypto firms.

Next-Generation Technologies & Secure Development

Mastercard Buys Threat Intel Firm Recorded Future for $2.65B

Michael Novinson • September 12, 2024

Mastercard plans to buy threat intelligence firm Recorded Future for $2.65 billion to enhance cyber resilience and offer greater protection and trust around digital transactions. The deal will enhance Mastercard's identity, fraud prevention services by helping businesses identify and mitigate risk.

Fraud Management & Cybercrime

NoName Apparently Allies With RansomHub Operation

Prajeet Nair • September 11, 2024

Up-and-coming online criminal extortion group RansomHub appears to have a new affiliate - NoName, a midtier actor whose main claim to fame so far has been impersonating the LockBit ransomware-as-a-service operation. NoName is known for exploiting years-old vulnerabilities.

Finance & Banking

Geopolitical Tensions Fuel Growth in Cross-Border Fraud

Suparna Goswami • September 11, 2024

Geopolitical tensions have heightened cross-border fraud, with criminals exploiting technological advances and regulatory gaps between countries. Shilpa Arora, head of anti-financial crime products at ACAMS, discusses ways banks can tackle cross-border fraud schemes.

CISO Trainings

CyberEdBoard Profiles in Leadership: George Chacko

Marianne Kolbasuk McGee • September 11, 2024

George Chacko, executive director of information security and compliance at New York Blood Center, shares his journey in cybersecurity, the challenges for nonprofit organizations with limited budgets and resources, and collaborative initiatives to improve security programs.

Governance & Risk Management

Mental Health Records Database Found Exposed on Web

Marianne Kolbasuk McGee • September 11, 2024

An AI-powered virtual care provider's unsecured database allegedly exposed thousands of sensitive mental health and substance abuse treatment records between patients and their counselors on the internet - where they were available to anyone, said the security researcher who discovered the trove.

Governance & Risk Management

Bashing Windows Bugs, Take 2: Microsoft Restores Nixed Fixes

Mathew J. Schwartz • September 11, 2024

Microsoft has issued a slew of software updates to patch numerous flaws, including three zero-day vulnerabilities that are already being exploited via in-the-wild attacks. Another fix addresses a prior update that inadvertently reintroduced vulnerable components to Windows 10.

Governance & Risk Management

ColorTokens Strengthens Zero Trust With PureID Acquisition

Michael Novinson • September 11, 2024

ColorTokens purchased PureID, expanding its zero trust framework with identity-based segmentation for cloud and hybrid environments. The acquisition focuses on securing cloud applications, microservices and APIs through advanced identity-based authentication.