Latest

►

Healthcare

CyberEdBoard Insights: Phil Englert and Errol Weiss

Marianne Kolbasuk McGee  •  September 10, 2024

Healthcare organizations often face obstacles in sharing cybersecurity information. Phil Englert and Errol Weiss from Health-ISAC advocate for shifting the focus from legal risks to business risks, improving incident response and building resilience through collaboration and transparency.

Network Firewalls, Network Access Control

Quad7 Botnet Operators Expand Targets, Aim for Stealth

Prajeet Nair  •  September 10, 2024

Operators behind a mysterious botnet named for a TCP routing port number are expanding the universe of targeted devices and taking steps to hide their infrastructure, warn Sekoia researchers. The 7777 - or Quad7 - botnet appears to have emerged in 2023.

Incident & Breach Response

CrowdStrike Has Yet to See Any Customer Lawsuits Over Outage

Mathew J. Schwartz  •  September 10, 2024

Cybersecurity firm CrowdStrike has yet to see any lawsuits get filed against it by customers, following its July 19 faulty software update crashing systems worldwide. Does that speak to the company having run a well-executed crisis management strategy?

Governance & Risk Management

Progress Software Fixes Critical LoadMaster Vulnerability

Prajeet Nair  •  September 9, 2024

Progress Software released an urgent patch Thursday to fix a critical vulnerability that hackers could exploit to launch remote attacks. The company is no stranger to urgent patching. It was at the center of a Memorial Day 2023 mass hacking incident.

Network Detection & Response

Darktrace CEO Swap: Gustafsson Steps Down; Popelka Steps Up

Michael Novinson  •  September 9, 2024

Darktrace has promoted COO Jill Popelka to CEO, replacing long-time leader Poppy Gustafsson. As the cybersecurity AI vendor prepares to finalize its sale to Thoma Bravo, Popelka will steer Darktrace into its next phase of growth. Gustafsson will join the board as a non-executive director.

Blockchain & Cryptocurrency

FBI Report Says Cryptocurrency Scams Surged in 2023

Chris Riotta  •  September 9, 2024

The FBI's Internet Crime Complaint Center on Monday issued a report revealing victims filed more than 69,000 public complaints related to cryptocurrency fraud and $5.6 billion in financial losses in 2023, while investment scams made up the bulk of losses throughout the year.

Breach Notification

Acadian Ambulance Notifying Nearly 3 Million of Data Theft

Marianne Kolbasuk McGee  •  September 9, 2024

A Louisiana-based ambulance company that provides emergency medical care services in four states is notifying nearly 3 million people that their sensitive health information was potentially stolen in a June hack. Ransomware gang Daixin claims to have published the data on its dark web leak site.

Cyberwarfare / Nation-State Attacks

German Cyber Agency Investigating APT28 Phishing Campaign

Akshaya Asokan  •  September 9, 2024

The German cyber agency is reportedly investigating a phishing campaign tied to Russian state hacking group APT28 that used a bogus website mimicking an influential think tank. The campaign, which ran for months, used variations of the institute's legitimate IfW-Kiel web domain to lure victims.

Governance & Risk Management

Patch Alert Issued for Veeam Backup & Replication Software

Mathew J. Schwartz  •  September 9, 2024

Security experts are urging all Veeam Backup & Replication users to immediately update their software to patch a flaw that attackers can remotely exploit to take full control of a system. Experts say ransomware groups likely will target the critical-severity vulnerability for double extortion.

Healthcare

Texas AG Hopes to Upend HIPAA Rules to Investigate Abortions

Marianne Kolbasuk McGee  •  September 6, 2024

Texas Attorney General Ken Paxton is suing the Biden administration, alleging that "unlawful" HIPAA Privacy Rule regulations are hindering the state's law enforcement investigations into abortion cases and other reproductive health care cases.

Governance & Risk Management

Absolute Purchases Syxsense to Tackle Cyber Vulnerabilities

Michael Novinson  •  September 6, 2024

Absolute Security has strengthened its platform with the acquisition of Syxsense, adding powerful automated vulnerability management tools to its existing endpoint security capabilities. The move aims to improve security compliance and simplify complex remediation tasks for organizations.

Cybercrime

Feds Warn Health Sector to Patch Apache Tomcat Flaws

Marianne Kolbasuk McGee  •  September 6, 2024

Federal authorities are alerting healthcare entities of vulnerabilities - including older flaws - that put Apache Tomcat at risk for attacks if left unmitigated. The open-source web server is heavily used in healthcare for hosting electronic health record and other systems and applications.