No Timeline for Evicting Chinese Hackers from US Networks

David Perera • December 3, 2024

Chinese hackers who penetrated U.S. telecoms likely haven't been fully evicted partially due to shifting tactics made in response to public disclosures, federal officials said Tuesday. Industry and government investigators have revealed in dribs and drabs a campaign of Beijing telecom hacking.

Artificial Intelligence & Machine Learning

AI Startup Execs Say It Should Be Easier to Tap UK Funding

Latest

Government

Sixgen's Kyrus Acquisition Boosts National Cybersecurity

Michael Novinson • December 3, 2024

Sixgen will enhance its cybersecurity operations through the purchase of Washington D.C.-area Kyrus. The move introduces reverse engineering and analytics expertise to Sixgen's portfolio, aligning with its mission to protect critical infrastructure and bolster American cyber defense capabilities.

Cybercrime

'Horns&Hooves' Malware Campaign Hits Over 1,000 Victims

Prajeet Nair • December 3, 2024

A malware campaign targeting Russian retailers and service businesses aims to deploy remote access tools and install infostealer malware. Kaspersky dubbed the campaign "Horns&Hooves," after a fake organization set up by fraudsters in the 1931 Soviet satirical novel "The Little Golden Calf."

Leadership & Executive Communication

CyberEdBoard Profiles in Leadership: Michael Woodson

Michael Novinson • December 3, 2024

As former director of information security and privacy at Sonesta Hotels, Michael Woodson championed a proactive approach to cybersecurity. His leadership philosophy underscores the importance of cultural transformation and continuous learning in building robust security programs.

Governance & Risk Management

16 Zero-Days Uncovered in Fuji Electric Monitoring Software

Jayant Chakravarti • December 3, 2024

Security researchers have uncovered 16 zero-day vulnerabilities in Japanese equipment manufacturer Fuji Electric's Tellus and V-Server remote monitoring software that enable attackers to execute malicious code in devices commonly used by utilities and other critical infrastructure providers.

Cybercrime

European Police Disrupts Matrix Encrypted Service

Akshaya Asokan • December 3, 2024

French and Dutch police led the takedown of an encrypted messaging platform used in international drug and arms trafficking. Dutch police discovered the app, named Matrix, on the phone of a criminal convicted in 2021 of murdering a journalist.

Governance & Risk Management

GoodRx Agrees to Pay $25M to Settle Web Tracker Lawsuit

Marianne Kolbasuk McGee • December 3, 2024

GoodRx has reached a $25 million preliminary settlement of proposed class action litigation alleging the telehealth company violated privacy and an assortment other laws and statues when it previously collected and shared consumers' information with third-parties through online tracking tools.

Cybercrime

Korean Firm Sold Satellite Receivers With DDoS Feature

Anviksha More • December 3, 2024

A South Korean company exported 240,000 satellite receivers with distributed denial-of-service attack capabilities, leading to the arrest of its CEO by the Korean National Police Agency. The company and its employees face criminal prosecution for allegedly violating South Korea’s cybersecurity laws.

Cybercrime

Russia Slams Life Sentence on Hydra Darknet Market's Founder

Mathew J. Schwartz • December 3, 2024

The founder of the notorious darknet market Hydra has been sentenced by a Moscow judge to serve a life sentence in one of the country's harsh penal colonies, together with 15 of his associates. Following its April 2022 disruption by Western law enforcement, other darknet markets replaced Hydra.

Artificial Intelligence & Machine Learning

AWS Unveils Future of Enterprise AI and Cloud at re:Invent

Rahul Neel Mani • December 3, 2024

Amazon Web Services hopes to redefine enterprise innovation in the cloud with a slew of announcements made during CEO Matt Garman's keynote speech at re:Invent 2024 in Las Vegas about advancements in compute, storage, databases, generative AI and analytics.

Artificial Intelligence & Machine Learning

Upwind Raises $100M to Thwart Cloud Security Vulnerabilities

Michael Novinson • December 2, 2024

With $100 million in Series A funding, Upwind plans to enhance its runtime and AI-powered cloud security platform. CEO Amiram Shachar outlines the company's investments in engineering, customer engagement and scaling solutions to address vulnerabilities such as misconfigurations and insecure APIs.

Artificial Intelligence & Machine Learning

Feds Propose AI 'Guardrails' for Medicare Advantage Plans

Marianne Kolbasuk McGee • December 2, 2024

The Centers for Medicare and Medicaid Services has issued proposed "guardrails" to help ensure that the use of artificial intelligence for Medicare Advantage insurance plans does not result in inequitable access to healthcare-related services. The proposed rule will go into effect in 2026.

Cybercrime

SmokeLoader Campaign Targets Taiwanese Companies

Prajeet Nair • December 2, 2024

A threat actor is targeting Taiwanese companies using phishing emails and long-standing vulnerabilities to deliver SmokeLoader malware. The threat actor uses plugins for the infamous malware to directly attack systems rather than using SmokeLoader, as its name suggests, as a loader for other malware.