Chinese Hackers Build Massive Botnet Targeting US Devices

Chris Riotta • September 18, 2024

FBI Director Christopher Wray said Wednesday the bureau seized control of a Chinese-developed botnet that maintained access to thousands of compromised devices across the globe as part of an effort to launch widespread disruptive cyberattacks. The botnet is a Mirai variant.

Artificial Intelligence & Machine Learning

More US Sanctions Against Predator Spyware Maker Intellexa

Latest

Artificial Intelligence & Machine Learning

Beware the Great AI Bubble Popping

Rashmi Ramesh • September 18, 2024

If the bubble isn't popping already, it'll pop soon, say many investors and close observers of the AI industry. If past bubbles are a benchmark, the burst will filter out companies with no solid business models and pave the way for more sustainable growth for the industry in the long term.

Governance & Risk Management

Swiss Post to Strengthen Cybersecurity With Open Systems Buy

Michael Novinson • September 18, 2024

Swiss Post has signed an agreement to acquire Open Systems, a cybersecurity leader specializing in secure access service edge. The deal, expected to close by late 2024, will expand Swiss Post's offerings for secure digital communications for public and private organizations across Switzerland.

Artificial Intelligence & Machine Learning

Intezer's $33M Series C Funding to Fuel AI, Customer Support

Michael Novinson • September 18, 2024

Norwest Venture Partners led a $33 million Series C round to accelerate Intezer's product development, strengthen AI models and broaden security alert coverage. The funding will enable the New York-based company to offer more support for cloud security while growing its customer success teams.

3rd Party Risk Management

How Mega Attacks Are Spotlighting Critical 3rd-Party Risks

Marianne Kolbasuk McGee • September 18, 2024

Recent mega data breaches involving third-party vendors - such as the Change Healthcare cyberattack - are intensifying the spotlight on critical security risk management and governance issues for business associates and other suppliers, said regulatory attorney Rachel Rose.

Leadership & Executive Communication

Use the STAR Method for Your Cybersecurity Job Interview

Brandy Harris • September 18, 2024

The STAR - Situation, Task, Action, Result - method is a widely used framework for answering behavioral interview questions. It allows job candidates to present their experiences in a structured way, making it easier for interviewers to understand their problem-solving skills and real-world impact.

Endpoint Security

Apple Moves to Dismiss Suit Against Spyware Firm NSO Group

Michael Novinson • September 17, 2024

Apple has filed a motion to dismiss its lawsuit against NSO Group, citing concerns over the potential exposure of sensitive threat intelligence information. The tech giant believes continuing the lawsuit could compromise its ability to protect users and lead to the disclosure of sensitive data.

Fraud Management & Cybercrime

UK Orgs Tout Government Help in Ransomware Incidents

Akshaya Asokan • September 17, 2024

Timely notification of ransomware incidents to British law enforcement agencies played a crucial role in understanding the threats and in developing mitigation strategies, the former security heads of Royal Mail and the University of Manchester said.

AI-Based Attacks

BlackCloak Raises $17M to Boost Cybersecurity for Executives

Michael Novinson • September 17, 2024

BlackCloak’s $17 million Series B funding round will help the company triple its engineering and product teams, enhancing cybersecurity for executives and high-net-worth individuals. The funding will help BlackCloak address emerging issues such as deepfakes and threat intelligence and modeling.

Healthcare

Juggling Cyber Challenges, Evolving Threats in Healthcare

Marianne Kolbasuk McGee • September 17, 2024

While cyberthreats facing healthcare continue to evolve, security leaders must juggle a variety of cyber and related tech challenges, said Shawn Parker and Quincy Raybon, IT leaders at two elder medical care providers, and Ram Vaidyanathan of security firm ManageEngine.

CISO Trainings

CyberEdBoard Insights: Christopher Frenz

Marianne Kolbasuk McGee • September 17, 2024

The healthcare sector is plagued by increasingly complex cyberthreats, and simply meeting compliance standards is not doing enough to protect sensitive healthcare data, according to Christopher Frenz, assistant vice president of IT security at Mount Sinai South Nassau.

Cloud Security

CloudImposer RCE Vulnerability Targets Google Cloud Platform

Prajeet Nair • September 16, 2024

Google patched a critical remote execution vulnerability in its cloud platform Cloud Composer service, "CloudImposer," which could have allowed attackers to compromise millions of servers, say researchers from Tenable. The CloudImposer vulnerability could lead to the Jenga Tower effect.

Governance & Risk Management

Breach-Weary Snowflake Moves to MFA, 14-Character Passwords

Akshaya Asokan • September 16, 2024

Data warehousing platform Snowflake rolled out default MFA - as well as a 14-character password minimum - to shore up security in the wake of a series of cyberattacks in June that hit high-profile customers including Santander Bank, Advance Auto Parts, LA Unified School District and Neiman Marcus.