Moody's Ratings: Cyber Insurance Competition Up, Prices Down

Mathew J. Schwartz • September 6, 2024

Competition has been increasing in the cyber insurance market, leading to a "moderate" decrease in insurance premiums after several years of rate increases. So reports Moody's Ratings, which said that the changes were driven by an influx of new players that is likely to continue.

►

Breach Notification

Exposed AMIs: The Hidden Risk in AWS Environments

Latest

Governance & Risk Management

Absolute Purchases Syxsense to Tackle Cyber Vulnerabilities

Michael Novinson • September 6, 2024

Absolute Security has strengthened its platform with the acquisition of Syxsense, adding powerful automated vulnerability management tools to its existing endpoint security capabilities. The move aims to improve security compliance and simplify complex remediation tasks for organizations.

Cybercrime

Critical GeoServer Flaw Enabling Global Hack Campaigns

Prajeet Nair • September 6, 2024

Cybercriminals are using a critical remote code execution vulnerability in an open-source geospatial data platform to spread malware globally across several industries. GeoServer Project maintainers released a patch on July 1. The vulnerability has a CVSS score of 9.8 out of 10.

Government

White House Launches Cyber, Tech and AI Hiring Sprint

Chris Riotta • September 6, 2024

The White House announced a hiring sprint to fill cyber, technology and artificial intelligence jobs across federal agencies, dubbed Service for America, which aims to attract diverse candidates for critical open positions in the public sector - along with new incentives.

Artificial Intelligence & Machine Learning

Underground Demand for Malicious LLMs Is Robust

Rashmi Ramesh • September 6, 2024

The underground market for illicit large language models is a lucrative one, said academic researchers who called for better safeguards against artificial intelligence misuse. "This laissez-faire approach essentially provides a fertile ground for miscreants to misuse the LLMs."

Endpoint Detection & Response (EDR)

After CrowdStrike Outage: Time to Rebuild Microsoft Windows?

Mathew J. Schwartz • September 6, 2024

The global disruption caused by a faulty CrowdStrike software triggering a kernel panic and computer meltdowns has led government agencies, experts and vendors to call for rethinking Windows operating system resiliency, including the deep-level OS access security tools now require.

Cybercrime

ISMG Editors: How Arrest of Telegram CEO Affects Encryption

Anna Delaney • September 6, 2024

In the latest weekly update, ISMG editors discussed the implications of the recent arrest of Telegram's CEO in Paris for encrypted messaging services, the transformative impact of artificial intelligence in cybersecurity, and the latest regulations designed to curb fraud in electronic payments.

Endpoint Security

Kaspersky US Customers Migrate to Pango's UltraAV After Ban

Michael Novinson • September 5, 2024

Kaspersky is transferring 1 million U.S. antivirus customers to Pango Group's UltraAV product following the Department of Commerce's ban on Kaspersky software sales or updates. The transition ensures users will continue to receive critical cybersecurity updates and services.

Critical Infrastructure Security

FEMA Has Begun Deploying Cyber Advisers to Disaster Zones

Chris Riotta • September 5, 2024

Charles Armstrong, chief information officer of the Federal Emergency Management Agency, told the Billington Cybersecurity Summit his agency has begun deploying cyber advisors to disaster recovery zones to "rapidly and securely" build information technology and operational technology infrastructure.

Artificial Intelligence & Machine Learning

Former OpenAI Scientist's Startup Raises $1B Seed Funding

Rashmi Ramesh • September 5, 2024

A three-month-old startup promising safe artificial intelligence raised $1 billion in an all-cash deal in a seed funding round. Co-founded by former OpenAI Chief Scientist Ilya Sutskever, Safe Superintelligence will reportedly use the funds to acquire computing power.

Cyberwarfare / Nation-State Attacks

US Broadens Indictments Against Russian Intelligence Hackers

Chris Riotta • September 5, 2024

The United States announced a superseding indictment Thursday that adds five Russian military intelligence officers as defendants while warning that Kremlin cyberthreat actors continue to target U.S. and global critical infrastructure.

Cybercrime

Breach Roundup: YubiKey 5 Is Vulnerable to Cloning

Anviksha More • September 5, 2024

This week, YubiKey 5 has a flaw, an Ohio city sued a researcher, the Irish regulator ended its GrokAI case, open-source AI tools exposed data, Starlink blocked X in Brazil, FCC banned Kaspersky, Intel addressed a researcher's claim, and Transport of London is still affected by a cyber incident.

Blockchain & Cryptocurrency

Cryptohack Roundup: Focus on Pig Butchering

Rashmi Ramesh • September 5, 2024

This week, pig-butchering scams and bitcoin ATM scams increased, an update in the FTX case, stolen WazirX funds were laundered, settlements in the SEC-Galois and CFTC-Uniswap cases, Scotland seized crypto in a robbery, North Korea targeted Web3 staff, and the Mt. Gox CEO launched a new crypto firm.