Experts Warn DHS Surveillance Tech Lacks Privacy Protections

Chris Riotta • December 4, 2024

The U.S. Department of Homeland Security is reportedly expanding its use of emerging surveillance tools, including drones and artificial intelligence, without proper safeguards as experts warn of potential privacy violations and risks involving facial recognition and third-party data usage.

Governance & Risk Management

T-Mobile Disputes Claims of Chinese Hack on Customer Data

Latest

Finance & Banking

Russian Money Laundering Services Busted in UK-Led Operation

Akshaya Asokan • December 4, 2024

An international investigation led by the U.K. busted Russian money cash-for-crypto laundering networks in an operation that's led to the arrest of 84 individuals and U.S. sanctions against others. One of the network allegedly laundered extortion money paid to the Ryuk ransomware group.

Endpoint Security

Bug Bounties: Bringing Hackers and Manufacturers Together

Athira Nair • December 4, 2024

Lennert Wouters, a researcher at KU Leuven University in Belgium, has spent the past eight years studying embedded security, analyzing the vulnerabilities of everyday devices and commercial products. He shares his greatest hacks and insights on hardware security industry trends.

AI-Based Attacks

How Hackers Can Manipulate AI to Affect Health App Accuracy

Marianne Kolbasuk McGee • December 4, 2024

Hackers can potentially use AI to manipulate data that's generated and shared by some health apps, diminishing the data's accuracy and integrity, said Sina Yazdanmehr and Lucian Ciobotaru of cybersecurity firm Aplite, describing a recent research project involving Google Health Connect.

Professional Certifications & Continuous Training

World Wide Work: Landing a Cybersecurity Career Overseas

Brandy Harris • December 4, 2024

Organizations ranging from multinational corporations to government agencies and international nonprofits require cybersecurity expertise. These roles often include exciting opportunities for travel or relocation, making them an attractive path for professionals ready to take their careers global.

Government

Sixgen's Kyrus Acquisition Boosts National Cybersecurity

Michael Novinson • December 3, 2024

Sixgen will enhance its cybersecurity operations through the purchase of Washington D.C.-area Kyrus. The move introduces reverse engineering and analytics expertise to Sixgen's portfolio, aligning with its mission to protect critical infrastructure and bolster American cyber defense capabilities.

Cybercrime

'Horns&Hooves' Malware Campaign Hits Over 1,000 Victims

Prajeet Nair • December 3, 2024

A malware campaign targeting Russian retailers and service businesses aims to deploy remote access tools and install infostealer malware. Kaspersky dubbed the campaign "Horns&Hooves," after a fake organization set up by fraudsters in the 1931 Soviet satirical novel "The Little Golden Calf."

Leadership & Executive Communication

CyberEdBoard Profiles in Leadership: Michael Woodson

Michael Novinson • December 3, 2024

As former director of information security and privacy at Sonesta Hotels, Michael Woodson championed a proactive approach to cybersecurity. His leadership philosophy underscores the importance of cultural transformation and continuous learning in building robust security programs.

Governance & Risk Management

16 Zero-Days Uncovered in Fuji Electric Monitoring Software

Jayant Chakravarti • December 3, 2024

Security researchers have uncovered 16 zero-day vulnerabilities in Japanese equipment manufacturer Fuji Electric's Tellus and V-Server remote monitoring software that enable attackers to execute malicious code in devices commonly used by utilities and other critical infrastructure providers.

Cybercrime

European Police Disrupt Matrix Encrypted Service

Akshaya Asokan • December 3, 2024

French and Dutch police led the takedown of an encrypted messaging platform used in international drug and arms trafficking. Dutch police discovered the app, named Matrix, on the phone of a criminal convicted in 2021 of murdering a journalist.

Governance & Risk Management

GoodRx Agrees to Pay $25M to Settle Web Tracker Lawsuit

Marianne Kolbasuk McGee • December 3, 2024

GoodRx has reached a $25 million preliminary settlement of proposed class action litigation alleging the telehealth company violated privacy and an assortment of other laws and statutes when it previously collected and shared consumers' information with third parties through online tracking tools.

Cybercrime

Korean Firm Sold Satellite Receivers With DDoS Feature

Anviksha More • December 3, 2024

A South Korean company exported 240,000 satellite receivers with distributed denial-of-service attack capabilities, leading to the arrest of its CEO by the Korean National Police Agency. The company and its employees face criminal prosecution for allegedly violating South Korea’s cybersecurity laws.

Cybercrime

Russia Slams Life Sentence on Hydra Darknet Market's Founder

Mathew J. Schwartz • December 3, 2024

The founder of the notorious darknet market Hydra has been sentenced by a Moscow judge to serve a life sentence in one of the country's harsh penal colonies, together with 15 of his associates. Following its April 2022 disruption by Western law enforcement, other darknet markets replaced Hydra.