More US Sanctions Against Predator Spyware Maker Intellexa

Akshaya Asokan • September 16, 2024

The U.S. Department of the Treasury ramped up pressure on makers and sellers of Predator commercial spyware through sanctions on five individuals and a Caribbean company accused of enabling tens of millions of dollars of surveillance malware transactions.

Cyberwarfare / Nation-State Attacks

US Prepares to Gather AI Foundational Model Developer Info

Latest

Cybercrime

Ivanti Vulnerability Again Forces Emergency Patches

David Perera • September 16, 2024

Customers of internet appliance maker Ivanti face yet another hackable vulnerability. The Utah company warned customers Friday about exploitation of a Cloud Service Appliance detected in the wild. Ivanti said the vulnerability doesn't affect version 5; it released a patch on Sept. 10.

CISO Trainings

CyberEdBoard Profiles in Leadership: John F. Banghart

Marianne Kolbasuk McGee • September 16, 2024

John F. Banghart has spent 30 years in cybersecurity, and he appreciates the importance of creative thinking, upskilling and collaboration. Looking back on the Heartbleed vulnerability, Banghart said the incident demonstrates the need to address software supply chain risks causing problems today.

Fraud Management & Cybercrime

Clinical Considerations When Recovering From Ransomware

Marianne Kolbasuk McGee • September 16, 2024

Preparing healthcare organizations to respond to and rebound from a disruptive ransomware attack is akin to implementing a "12-step program," said Dr. Eric Liederman, CEO of consultancy CyberSolutionsMD and recently retired long-serving director of medical informatics at Kaiser Permanente.

Artificial Intelligence & Machine Learning

Strider Secures $55M to Fuel AI Growth and Global Expansion

Michael Novinson • September 13, 2024

Strider Technologies has raised $55 million in a Series C funding round to strengthen its AI capabilities and fuel global expansion efforts. The money will enhance the company’s AI-driven insights, support business with government agencies, and fuel international expansion in Europe and Asia.

Critical Infrastructure Security

Remote Access Tool Sprawl Increases OT Risks

Prajeet Nair • September 13, 2024

Excessive deployment of remote access tools in operational technology environments expands attack surfaces and creates operational challenges, warn security researchers from Claroty. Remote access tools are essential, but they introduce numerous potential vulnerabilities that threat actors exploit.

Fraud Management & Cybercrime

Should UK Cut Fraud Reimbursement Cap for Smaller Banks?

Suparna Goswami • September 13, 2024

The U.K. Payment Systems Regulator wants to reduce the reimbursement cap on authorized push payment fraud to ease the burden on smaller banks. That's unacceptable and would undermine the financial system's integrity, said Jonathan Frost, board member at the Stop Scams Alliance.

Business Continuity Management / Disaster Recovery

ISMG Editors: Will Microsoft Rethink Windows Security?

Anna Delaney • September 13, 2024

In the latest weekly update, ISMG editors discussed the fallout from the CrowdStrike global IT outage on endpoint security tools, Mastercard's monumental acquisition of Recorded Future to bolster its cybersecurity portfolio, and the latest efforts by U.S. officials to secure the 2024 election.

Artificial Intelligence & Machine Learning

Irish Data Protection Commission Probes Google's AI Model

Akshaya Asokan • September 13, 2024

The Irish data regulator launched an investigation to determine Google's compliance with a European privacy law when it was developing its PaLM 2 artificial intelligence model. Google launched the multilingual generative AI model last year.

Cybercrime

Chinese-Speaking Hackers Manipulate SEO Rankings Globally

Prajeet Nair • September 13, 2024

A Chinese search engine optimization operation hacked more than 35 web servers and stole credentials in a campaign to boost the online rankings of malicious porn sites. Researchers from Cisco Talos dubbed the threat cluster DragonRank.

Artificial Intelligence & Machine Learning

Black Hat/DEF CON 2024: Latest Insights on Security and AI

Information Security Media Group • September 13, 2024

Welcome to Information Security Media Group's Black Hat and DEF CON 2024 Compendium featuring latest insights from the industry's top cybersecurity researchers and ethical hackers, as well as perspectives from CEOs, CISOs and government officials on the latest trends in cybersecurity and AI.

Governance & Risk Management

Eliminating the Need for Stored Credentials in Healthcare

Marianne Kolbasuk McGee • September 13, 2024

Authentication requiring stored credentials is not only vulnerable to phishing and other compromises, but using these credentials can also be cumbersome for busy clinicians, said Tina Srivastava, co-founder of Badge, a provider of deviceless, tokenless authentication technology.

Business Continuity Management / Disaster Recovery

Kernel Mode Under the Microscope at Windows Security Summit

Michael Novinson • September 12, 2024

Cutting kernel mode dependencies and adopting safe deployment practices will make endpoint systems more resilient and secure for Windows customers. Tuesday's meeting came two months after a faulty CrowdStrike update disrupted 8.5 million Windows machines and caused $5.4 billion in direct losses.