Latest

Cybercrime

'Horns&Hooves' Malware Campaign Hits Over 1,000 Victims

Prajeet Nair  •  December 3, 2024

A malware campaign targeting Russian retailers and service businesses aims to deploy remote access tools and install infostealer malware. Kaspersky dubbed the campaign "Horns&Hooves," after a fake organization set up by fraudsters in the 1931 Soviet satirical novel "The Little Golden Calf."

►

Leadership & Executive Communication

CyberEdBoard Profiles in Leadership: Michael Woodson

Michael Novinson  •  December 3, 2024

As former director of information security and privacy at Sonesta Hotels, Michael Woodson championed a proactive approach to cybersecurity. His leadership philosophy underscores the importance of cultural transformation and continuous learning in building robust security programs.

Cybercrime

European Police Disrupts Matrix Encrypted Service

Akshaya Asokan  •  December 3, 2024

French and Dutch police led the takedown of an encrypted messaging platform used in international drug and arms trafficking. Dutch police discovered the app, named Matrix, on the phone of a criminal convicted in 2021 of murdering a journalist.

Cybercrime

Korean Firm Sold Satellite Receivers With DDoS Feature

Anviksha More  •  December 3, 2024

A South Korean company exported 240,000 satellite receivers with distributed denial-of-service attack capabilities, leading to the arrest of its CEO by the Korean National Police Agency. The company and its employees face criminal prosecution for allegedly violating South Korea’s cybersecurity laws.

Cybercrime

Russia Slams Life Sentence on Hydra Darknet Market's Founder

Mathew J. Schwartz  •  December 3, 2024

The founder of the notorious darknet market Hydra has been sentenced by a Moscow judge to serve a life sentence in one of the country's harsh penal colonies, together with 15 of his associates. Following its April 2022 disruption by Western law enforcement, other darknet markets replaced Hydra.

Artificial Intelligence & Machine Learning

AWS Unveils Future of Enterprise AI and Cloud at re:Invent

Rahul Neel Mani  •  December 3, 2024

Amazon Web Services hopes to redefine enterprise innovation in the cloud with a slew of announcements made during CEO Matt Garman's keynote speech at re:Invent 2024 in Las Vegas about advancements in compute, storage, databases, generative AI and analytics.

Critical Infrastructure Security

No Timeline for Evicting Chinese Hackers from US Networks

David Perera  •  December 3, 2024

Chinese hackers who penetrated U.S. telecoms likely haven't been fully evicted partially due to shifting tactics made in response to public disclosures, federal officials said Tuesday. Industry and government investigators have revealed in dribs and drabs a campaign of Beijing telecom hacking.

Artificial Intelligence & Machine Learning

China Is Outpacing US in Critical Tech Research Investments

Chris Riotta  •  December 2, 2024

China has surged past the United States in critical technology research, according to a recent report published by the Australian Strategic Policy Institute. Experts warn the shift could have profound global implications, including risks to U.S. cybersecurity, innovation and global leadership.

Cybercrime

SmokeLoader Campaign Targets Taiwanese Companies

Prajeet Nair  •  December 2, 2024

A threat actor is targeting Taiwanese companies using phishing emails and long-standing vulnerabilities to deliver SmokeLoader malware. The threat actor uses plugins for the infamous malware to directly attack systems rather than using SmokeLoader, as its name suggests, as a loader for other malware.

Fraud Management & Cybercrime

Russia Indicts Alleged Ransomware Hacker Wanted by the FBI

Akshaya Asokan  •  December 2, 2024

A suspected, prolific ransomware affiliate hacker and developer has been arrested on criminal charges in Russia, reported Kremlin media. Mikhail Pavlovich Matveev has been wanted by U.S. authorities since 2023 for his alleged participation in the LockBit, Hive and Babuk ransomware groups.

DevSecOps

Sonatype, Snyk, Black Duck Top Comp Analysis Forrester Wave

Michael Novinson  •  November 29, 2024

Sonatype, Snyk and Black Duck remained atop Forrester's software composition analysis rankings as commoditization of core features has led to increased competition. Pressure in the market has increased due to both a saturation of core functionalities and license identification.

Security and Exchange Commission compliance (SEC)

CyberEdBoard Profiles in Leadership: Patrick Benoit

Anna Delaney  •  November 29, 2024

Patrick Benoit, a seasoned security leader and CyberEdBoard member, advises security leaders to lead by example and not worry about showing any of their own vulnerabilities, not least when they make a mistake. "It's OK to fail or misstep … That's what makes you a stronger leader," he said.