Latest

Cybercrime

Internet Archive Data Breach Exposes 31 Million Accounts

Mathew J. Schwartz  •  October 10, 2024

The nonprofit Internet Archive has been hit by hackers, who stole usernames and for 31 million accounts, including email addresses and bcrypt-hashed passwords. In recent days, the digital archive has also suffered defacement and repeat denial-of-service attacks.

Incident & Breach Response

Marriott Pays $52M to Settle US States' Breach Litigation

David Perera  •  October 9, 2024

The world's largest hotel chain agreed Wednesday to pay $52 million and submit to 20 years of third-party monitoring of its cybersecurity program to settle a rash of data breaches affecting millions of guests. The sizeable payout is part of a settlement reached with 50 U.S. attorneys general.

Breach Notification

Australia May Require Businesses to Report Ransom Payments

Jayant Chakravarti  •  October 9, 2024

Ransom payments are typically tightly held secrets between cybercriminals and their victims, but the Australian government has introduced a cybersecurity bill in Parliament that would require larger businesses to report ransom payments to the government.

Artificial Intelligence & Machine Learning

US DOJ Developing Guidelines for AI Use in Law Enforcement

Chris Riotta  •  October 9, 2024

The U.S. Department of Justice is drafting new guidelines for law enforcement on the use of artificial intelligence and facial recognition tools to enhance public safety while safeguarding civil rights and ensuring ethical deployment, a senior official said Wednesday.

Breach Notification

County 911 Service Notifying 180,000 About Breach in July

Marianne Kolbasuk McGee  •  October 9, 2024

An Oklahoma county provider of medical, fire, police and other 911 emergency services is notifying 180,000 individuals that their health information may have been compromised in a recent ransomware attack. The incident affects patients receiving emergency medical care as far back as 2011.

Governance & Risk Management

Ivanti CSA Customers Targeted in New Zero-Day Attacks

Anviksha More  •  October 9, 2024

Internet appliance maker Ivanti warned customers Tuesday that attackers are actively exploiting new vulnerabilities in Cloud Services Appliance instances by chaining three security flaws with a zero-day patched in September. The company advised customers to update to version 5.0.

Cybercrime

UK to Continue Disruptive Actions Targeting Cybercrime

Akshaya Asokan  •  October 9, 2024

The British government will continue disruptive actions against ransomware and malware operators, a top U.K. government official vowed Wednesday. Stephen Doughty, Minister of State, said the recently elected U.K. government views security as a core pillar of economic and strategic growth.

Cybercrime

Malicious Pixels: Criminals Revamp QR Code Phishing Attacks

Mathew J. Schwartz  •  October 9, 2024

Attackers are moving beyond using QR code images added to phishing emails to trick victims into visiting malicious sites, and using ASCII "full block" characters to build working QR codes designed to evade optical character recognition defenses, warns cybersecurity firm Barracuda Networks.

CISO Trainings

Career Spotlight: The Growing Demand for OT Security Experts

Brandy Harris  •  October 9, 2024

As digital transformation continues to reshape industries, the convergence of operational technology and cybersecurity has emerged as a critical area of focus. But there's a noticeable gap in the workforce. Professionals who truly understand both OT and cybersecurity are in short supply.

Finance & Banking

EU Strengthens Sanctions Against Russian Hackers

Akshaya Asokan  •  October 8, 2024

The European Council on Tuesday introduced a new sanctions framework to target Russian nationals and organizations engaged in malicious cyber activities such as election misinformation and disruptive cyberattacks. It seeks to address activities such as influence operations and hacking.

Cloud Security

Cloudflare Acquires Kivera to Fuel Preventive Cloud Security

Michael Novinson  •  October 8, 2024

With the acquisition of New York-based startup Kivera, Cloudflare will enhance its Cloudflare One platform, adding proactive controls that secure cloud environments, prevent misconfigurations and improve regulatory compliance for businesses using multiple cloud providers.

Cybercrime

UN Says Asian Cybercrime Cartels Are Rising Global Threat

Jayant Chakravarti  •  October 8, 2024

Cybercrime syndicates across Southeast Asia have teamed up with human traffickers, money launderers and cryptocurrency services to build an increasingly effective cybercrime ecosystem that can survive law enforcement crackdowns, according to a new United Nations report.