Latest

Cyberwarfare / Nation-State Attacks

Spyware Campaign Targets Sino Minority Groups via WeChat

Anviksha More  •  December 6, 2024

A possible Chinese-state threat group is targeting vulnerabilities in messaging apps to deliver spyware in cross-platform devices used by members of ethnic minorities targeted for repression by Beijing. Trend Micro dubs the group "Earth Minotaur."

Email Security & Protection

Insider Breach, Email Attacks Net $1.7M in HIPAA Fines

Marianne Kolbasuk McGee  •  December 6, 2024

An insider breach at a Florida pain management firm and an email breach at a Colorado pediatric hospital have resulted in more than $1.7 million in fines for HIPAA violations found by federal investigators. The two incidents affected fewer than 50,000 people.

Fraud Management & Cybercrime

Dutch Counter-Ransomware Initiative Led to Global Takedowns

Akshaya Asokan  •  December 6, 2024

A Dutch public and private sector anti-ransomware initiative has contributed to ransomware disruptions globally, found an assessment from the University of Leiden. "Project Melissa" was launched in 2023 by Cybersafe Netherlands, the Dutch National Cyber Security Center and security companies.

►

Artificial Intelligence & Machine Learning

ISMG Editors: China Outpacing US in Critical Technology R&D

Mathew J. Schwartz  •  December 6, 2024

In the latest weekly update, ISMG editors discussed China outpacing the U.S. in critical technology research investments, why all 10 RSA Conference 2025 Sandbox Innovation finalists will receive a $5 million investment, and how artificial intelligence dominated the AWS re:Invent 2024 conference.

CISO Trainings

Protecting the C-Suite in the Wake of UHC CEO's Murder

Marianne Kolbasuk McGee  •  December 6, 2024

The torrents of public hostility directed at health insurers in the aftermath of UnitedHealthCare CEO Brian Thompson's murder are serious signs of intensifying cyber and physical threats facing the C-suites of healthcare and many other sectors, said Chris Pierson, founder and CEO of BlackCloak.

Governance & Risk Management

Here's Where Top Cybersecurity Vendors Stand as 2025 Nears

Michael Novinson  •  December 6, 2024

Three of the world's largest pure-play cybersecurity vendors recently reported earnings, grappling with SIEM and firewall displacement opportunities along with rebounding from a massive outage. Palo Alto Networks Continues to reap the benefits of buying IBM's QRadar SaaS business.

Artificial Intelligence & Machine Learning

Weaponized AI: Hot for Fraud, Not for Election Interference

Mathew J. Schwartz  •  December 6, 2024

Artificial intelligence: What's it good for? Per the old song about war, the answer isn't "absolutely nothing," but so far it also isn't "absolutely everything." New findings pinpoint where generative AI and deepfakes are hot - fraud - and where they're not - election interference

►

Email Security & Protection

AI and 'Customer Zero' Practices for Enhanced Usability

Tom Field  •  December 5, 2024

Barracuda's CIO Siroui Mushegian discusses how Barracuda uses AI and strong partnerships to deliver comprehensive cybersecurity solutions. The company builds products on AWS infrastructure, sells them through AWS Marketplace and uses AWS for internal systems.

Blockchain & Cryptocurrency

Cryptohack Roundup: Solana npm Package Attack's Wallet Risks

Prajeet Nair  •  December 5, 2024

This week, Solana npm package attack, a Brazilian banking giant entered crypto trading and a Nebraska man pleaded guilty to cryptojacking. Australia tightened rules for crypto businesses and crypto losses dropped in 2024 and DMM Bitcoin will cease operations.

Artificial Intelligence & Machine Learning

CEO's Murder Sparks Outcry Over UHC's Coverage Denials

Marianne Kolbasuk McGee  •  December 5, 2024

Law enforcement investigating murder of Brian Thompson, CEO of UnitedHealthcare, are examining potential motives. But shell casings reportedly found at the crime scene spotlight one of the top motives speculated - anger over the company's alleged denial of coverage practices. Where does AI fit in?

Business Continuity Management / Disaster Recovery

Veeam Closes $2B Offering to Boost Data Resilience, Eyes IPO

Michael Novinson  •  December 5, 2024

CEO Anand Eswaran explains how Veeam's $2 billion secondary offering strengthens its financial position as the data resilience vendor prepares for an initial public offering. He discusses the company’s commitment to innovation and strategic pacts with Splunk, CrowdStrike and Palo Alto Networks.

Cybercrime

Breach Roundup: Vodka Maker Bankrupt After Cyberattack

Anviksha More  •  December 5, 2024

This week, a vodka maker in bankruptcy cited its ransomware attack, no ransomware at the Spanish tax agency and cable cuttings in Finland. Data stolen from Japanese shoppers, Chemonics International and law firm KYL. A sweep of Asian cybercrime, trends in the U.K. and ENGlobal ransomware attack.