Mathew J. Schwartz

Executive Editor, DataBreachToday & Europe, ISMG

Schwartz is an award-winning journalist with two decades of experience in magazines, newspapers and electronic media. He has covered the information security and privacy sector throughout his career. Before joining Information Security Media Group in 2014, where he now serves as the executive editor, DataBreachToday and for European news coverage, Schwartz was the information security beat reporter for InformationWeek and a frequent contributor to DarkReading, among other publications. He lives in Scotland.

Russia Slams Life Sentence on Hydra Darknet Market's Founder

Mathew J. Schwartz • December 3, 2024

The founder of the notorious darknet market Hydra has been sentenced by a Moscow judge to serve a life sentence in one of the country's harsh penal colonies, together with 15 of his associates. Following its April 2022 disruption by Western law enforcement, other darknet markets replaced Hydra.

Ransomware Attack on Supply Chain Provider Causes Disruption

Mathew J. Schwartz • November 26, 2024

Major grocery store chains, Starbucks and other large organizations are experiencing disruptions following a ransomware attack against supply chain management service provider Blue Yonder. The provider said it is continuing to probe the attack and has no timeline for service restoration.

Black Basta Ransomware Group Retools for Strategic Attacks

Mathew J. Schwartz • November 25, 2024

The Black Basta ransomware group has been refining its social engineering tactics to amass more victims despite escalating law enforcement disruptions, together with a shift to more "strategic, long-term planning" that security experts said suggests Russian state ties.

US National Security Officials Brief Telecom Executives

Mathew J. Schwartz • November 25, 2024

The White House on Friday hosted U.S. telecommunications executives to review the country's cyber resilience posture and share intelligence pertaining to China's "significant cyberespionage campaign targeting the sector," which the FBI continues to probe.

Zero Days Top Cybersecurity Agencies' Most-Exploited List

Mathew J. Schwartz • November 22, 2024

Which vulnerabilities need fixing first to best block nation-state and other hacking attempts? Enter the latest Five Eyes intelligence partnership list of the 15 flaws most targeted by attackers, of which 11 were zero-days. Many organizations have yet to patch them all.

Will Arrests Squash Scattered Spider's Cybercrime Assault?

Mathew J. Schwartz • November 21, 2024

Will the indictment of five alleged members of the loosely affiliated Scattered Spider cybercrime group disrupt its wider activities? The current count of known attacks tied to the group stands at over 130, but the accused have so far been tied by the FBI to only 45 of the attacks.

Feds Indict 5 Suspects Tied to Scattered Spider Cybercrime

Prajeet Nair , Mathew J. Schwartz • November 21, 2024

The U.S. government on Wednesday unsealed criminal charges against five suspected members of the "loosely organized, financially motivated cybercriminal group" Scattered Spider. The suspects have been tied to 45 attacks, disrupting businesses and stealing cryptocurrency worth millions of dollars.

Criminals 'Ghost Tap' NFC for Payment Cash-Out Attacks

Mathew J. Schwartz • November 20, 2024

Criminals have been caught tapping a new type of relay attack to cash-out stolen payment cards added to legitimate digital wallets. These criminals use money mules who carry an Android device able to capture and relay NFC communications used by ATMs to and from an attacker-controlled device.

Fintech Finastra Confirms Data Theft; Investigation Underway

Mathew J. Schwartz • November 20, 2024

Financial technology firm Finastra is warning customers that it suffered a breach of a secure file transfer system that it uses to relay information to some customers, leading to an unknown quantity of data being exfiltrated by an attacker. The company is still identifying affected customers.

Helldown Ransomware Group Tied to Zyxel's Firewall Exploits

Akshaya Asokan , Mathew J. Schwartz • November 19, 2024

Attackers wielding an emerging strain of ransomware called Helldown have been gaining a foothold in victims' networks by exploiting a previously unknown flaw in their Zyxel firewalls, security researchers warn. Zyxel has warned attackers may be using valid credentials they previously stole.

T-Mobile Hit by Chinese Cyber Spies; Sees Minimal Impact

Mathew J. Schwartz • November 18, 2024

The world's largest telecommunications carrier, T-Mobile U.S., said it was targeted as part of a wide-ranging cyberespionage operation the U.S. government attributes to China but has found no sign of data access or theft. Other known victims of the campaign include AT&T, Verizon and Lumen.

Palo Alto Reports Firewalls Exploited Using an Unknown Flaw

Mathew J. Schwartz • November 15, 2024

Attackers are exploiting a zero-day vulnerability in some types of Palo Alto Networks firewalls, the cybersecurity giant warned. While details of the flaw remain scant - no patch is available - the vendor urged customers to ensure their firewall management interfaces are not internet-exposed.

CyberEdBoard Profiles in Leadership: Brian Brackenborough

Mathew J. Schwartz • November 14, 2024

Brian Brackenborough, CISO at Channel 4, shares insights on transforming cybersecurity from a technical afterthought to a critical business priority. He discusses aligning security with business goals, fostering a security-minded culture and navigating the challenges of AI-powered threats.

White House Slams Russia Over Ransomware's Healthcare Hits

Mathew J. Schwartz • November 11, 2024

With ransomware attacks on the rise and healthcare getting pummeled more than ever, a coalition of UN members urged countries to focus on collective critical infrastructure defense, while a senior White House official slammed Russia for continuing to harbor the criminals involved.

Entrust Will Stop Operating As Trusted Certificate Authority

Mathew J. Schwartz • November 8, 2024

What's the worst-case scenario for a certificate authority? Citing years of "concerning behaviors," Google and Mozilla are set to treat all new digital certificates issued with Entrust as "untrustworthy," and have urged users to obtain new certificates from a trusted CA.

«
1 (current)
2
3
4
…
196
»

«
1 (current)
2
3
4
…
196
»