Latest

►

Email Security & Protection

AI and 'Customer Zero' Practices for Enhanced Usability

Tom Field  •  December 5, 2024

Barracuda's CIO Siroui Mushegian discusses how Barracuda uses AI and strong partnerships to deliver comprehensive cybersecurity solutions. The company builds products on AWS infrastructure, sells them through AWS Marketplace and uses AWS for internal systems.

Cyberwarfare / Nation-State Attacks

Russian Forces Accused of Secretly Planting Spyware on Phone

Chris Riotta  •  December 5, 2024

A Russian activist says security forces covertly installed spyware on his cellphone while he was detained in Moscow for aiding Ukraine. A report published Thursday shows the spyware received a broad range of permissions, from tracking location to reading encrypted messages.

Blockchain & Cryptocurrency

Cryptohack Roundup: Solana npm Package Attack Risks Wallets

Prajeet Nair  •  December 5, 2024

This week, Solana npm package attack, a Brazilian banking giant entered crypto trading and a Nebraska man pleaded guilty to cryptojacking. Australia tightened rules for crypto businesses and crypto losses dropped in 2024 and DMM Bitcoin will cease operations.

Cybercrime

Breach Roundup: Vodka Maker Bankrupt After Cyberattack

Anviksha More  •  December 5, 2024

This week, a vodka maker in bankruptcy cited its ransomware attack, no ransomware at the Spanish tax agency and cable cuttings in Finland. Data stolen from Japanese shoppers, Chemonics International and law firm KYL. A sweep of Asian cybercrime, trends in the U.K. and ENGlobal ransomware attack.

Cyberwarfare / Nation-State Attacks

Russian APT Hackers Co-Opt Pakistani Infrastructure

Akshaya Asokan  •  December 5, 2024

A Russian state hacking group hijacked the command and control infrastructure of a Pakistan-based espionage network as part of an ongoing intelligence-gathering operation targeting victims in Asia, finds a report from Microsoft and Black Lotus Labs.

Cyberwarfare / Nation-State Attacks

Mitel MiCollab VoIP Software: Zero-Day Vulnerability Alert

Mathew J. Schwartz  •  December 5, 2024

Security researchers warn of a newly discovered zero-day vulnerability in widely used VoIP telephony software, a discovery that comes as the United States struggles to evict Chinese nation-state hackers from telecom networks. The software is the MiCollab software suite from Canada-based Mitel.

Cloud Security

Tenable's Amit Yoran Takes Medical Leave; Interim CEOs Named

Michael Novinson  •  December 5, 2024

Longtime Tenable CEO Amit Yoran is temporarily stepping aside for cancer treatment and recovery, with top deputies Stephen Vintz and Mark Thurmond stepping up to lead the organization. Yoran was diagnosed in March with a treatable form of cancer, but recently learned he needs additional treatment.

Artificial Intelligence & Machine Learning

Experts Warn DHS Surveillance Tech Lacks Privacy Protections

Chris Riotta  •  December 4, 2024

The U.S. Department of Homeland Security is reportedly expanding its use of emerging surveillance tools, including drones and artificial intelligence, without proper safeguards as experts warn of potential privacy violations and risks involving facial recognition and third-party data usage.

Governance & Risk Management

US FTC Cracks Down Geolocation Data Brokers

Anviksha More  •  December 4, 2024

Two data brokers pledged to stop using geolocation data gleaned from smartphones to sell services that provide a window to the intimate lives of Americans. "Surreptitious surveillance by data brokers undermines our civil liberties," an U.S. Federal Trade Commission official said.

Cybercrime

Police Shutter Largest German-Speaking Criminal Marketplace

Akshaya Asokan  •  December 4, 2024

German police arrested the suspected administrator of the largest German-speaking underground markets for illegal goods and services. Crimenetwork, online since 2012, was used to sell stolen data, drugs and forged documents. The platform had more than 100,000 users and 100 sellers.

Artificial Intelligence & Machine Learning

Regulator Accuses AI Video Firm of Deceptive Marketing

Mathew J. Schwartz  •  December 4, 2024

Facial recognition software maker IntelliVision has reached a settlement with the U.S. Federal Trade Commission after the regulator accused the AI-powered software vendor of deceptive marketing claims, including that its tools have "zero gender or racial bias" and market-leading levels of accuracy.

Professional Certifications & Continuous Training

World Wide Work: Landing a Cybersecurity Career Overseas

Brandy Harris  •  December 4, 2024

Organizations ranging from multinational corporations to government agencies and international nonprofits require cybersecurity expertise. These roles often include exciting opportunities for travel or relocation, making them an attractive path for professionals ready to take their careers global.