Latest

Cybercrime

UK to Continue Disruptive Actions Targeting Cybercrime

Akshaya Asokan  •  October 9, 2024

The British government will continue disruptive actions against ransomware and malware operators, a top U.K. government official vowed Wednesday. Stephen Doughty, Minister of State, said the recently elected U.K. government views security as a core pillar of economic and strategic growth.

Cybercrime

Malicious Pixels: Criminals Revamp QR Code Phishing Attacks

Mathew J. Schwartz  •  October 9, 2024

Attackers are moving beyond using QR code images added to phishing emails to trick victims into visiting malicious sites, and using ASCII "full block" characters to build working QR codes designed to evade optical character recognition defenses, warns cybersecurity firm Barracuda Networks.

Finance & Banking

EU Strengthens Sanctions Against Russian Hackers

Akshaya Asokan  •  October 8, 2024

The European Council on Tuesday introduced a new sanctions framework to target Russian nationals and organizations engaged in malicious cyber activities such as election misinformation and disruptive cyberattacks. It seeks to address activities such as influence operations and hacking.

Cloud Security

Cloudflare Acquires Kivera to Fuel Preventive Cloud Security

Michael Novinson  •  October 8, 2024

With the acquisition of New York-based startup Kivera, Cloudflare will enhance its Cloudflare One platform, adding proactive controls that secure cloud environments, prevent misconfigurations and improve regulatory compliance for businesses using multiple cloud providers.

Cybercrime

UN Says Asian Cybercrime Cartels Are Rising Global Threat

Jayant Chakravarti  •  October 8, 2024

Cybercrime syndicates across Southeast Asia have teamed up with human traffickers, money launderers and cryptocurrency services to build an increasingly effective cybercrime ecosystem that can survive law enforcement crackdowns, according to a new United Nations report.

Cyberwarfare / Nation-State Attacks

CISA Issues Guidance to Counter Iran's Election Interference

Chris Riotta  •  October 8, 2024

The Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation have issued new guidance to help U.S. political campaigns defend against increasing cyber threats from Iran, recommending stronger multifactor authentication, phishing-resistant protocols and vigilance against social...

Cyberwarfare / Nation-State Attacks

MI5 Chief Warns of Cyberthreats to the UK

Akshaya Asokan  •  October 8, 2024

Nation-state actors are investing aggressively in advanced cyber operations to target government information and technology in a bid to sow "mayhem on British and European streets," warned a top British intelligence official. Russia, Iran and China are using proxies and hacking agencies.

►

Leadership & Executive Communication

CyberEdBoard Profiles in Leadership: Dom Lucas

Akshaya Asokan  •  October 8, 2024

Dom Lucas, head of security at British International Investment, reflects on how his law enforcement background shaped his approach to cybersecurity, focusing on the value of communication and continuous learning. He advises new security leaders to be open to learning from failures.

Critical Infrastructure Security

Largest US Water Utility Hit by Cybersecurity Incident

Chris Riotta  •  October 8, 2024

The largest regulated water and wastewater company in the United States told customers it was investigating a cybersecurity incident that led the utility to shut down its customer service portal and immediately notify law enforcement of an apparent breach.

Legislation & Litigation

IronNet Settles Securities Fraud Class Action Suit for $6.6M

Michael Novinson  •  October 7, 2024

IronNet and several former executives agreed to a $6.6 million settlement, ending a class action lawsuit accusing the company of misleading investors with inflated revenue projections. The settlement aims to provide relief for investors misled by allegedly inaccurate revenue projections.

Fraud Management & Cybercrime

Ukrainian Pleads Guilty for Role in Raccoon Stealer Malware

David Perera  •  October 7, 2024

A Ukrainian national pleaded guilty Monday in U.S. federal court to one count of conspiracy to commit computer intrusion in connection with his role in the Raccoon malware-as-a-service info stealer criminal operation. Dutch authorities extradited him in February after arresting him in March 2022.

Cyberwarfare / Nation-State Attacks

DHS Warns Election Security Risks May Persist Into 2025

Chris Riotta  •  October 7, 2024

The latest Homeland Security threat assessment lists this year’s election cycle as a top concern for 2025 and a potential trigger for domestic terrorism. The agency says foreign adversaries and violent extremists may take advantage of the outcome to further sow discord in the United States.