Content by Dan Gunderman

Poly Network Hacker Reportedly Returns Most of Stolen Funds

Dan Gunderman  •  August 13, 2021

The hacker behind the $612 million breach of the blockchain-based Poly Network system has reportedly returned all stolen assets. Security experts have highlighted a critical vulnerability and a need for further DeFi security regulations.

Lawmakers Want Federal Cybersecurity Leaders' Roles Clarified

Dan Gunderman  •  August 12, 2021

In a letter sent to National Cyber Director Chris Inglis this week, a bipartisan group of lawmakers says clearer lines of demarcation are needed to better define the responsibilities of federal officials involved in cybersecurity.

23 Charged in European Email Fraud Scheme

Dan Gunderman  •  August 12, 2021

Europol says it used a sting operation to derail an organized crime group that waged an email fraud campaign that stole about 1 million euros ($1.1 million).

Poly Network Says $600 Million in Cryptocurrency Stolen

Dan Gunderman  •  August 10, 2021

A hacker breached the blockchain-based Poly Network platform to steal more than $600 million in cryptocurrency, the platform announced Tuesday. But Wednesday, it appeared the hacker had returned some of the stolen assets.

2 Plead Guilty in Vast Money Laundering Scheme

Dan Gunderman  •  August 9, 2021

Two Latvian men tied to an extensive international money laundering operation that aided prominent cybercriminals have pleaded guilty to conspiracy charges.

FTC Warns: SMS Phishing Scam Impersonates State Agencies

Dan Gunderman  •  August 9, 2021

The Federal Trade Commission has issued a warning about a new smishing scheme targeting millions of smartphones nationwide that impersonates state workforce agencies in an attempt to obtain personal data.

Audit Slams FDIC for Inadequate Mobile Device Security

Dan Gunderman  •  August 6, 2021

The FDIC has failed to properly update its policies for mobile device usage, conduct regular control assessments of its mobile device management solution or adequately log and monitor mobile cybersecurity practices, according to a new report from the Office of the Inspector General.

Chinese Cyberthreats: The Impact on National Security

Dan Gunderman  •  August 5, 2021

The U.S. needs to devise ways to counter Chinese cyber activity - including the theft of intellectual property and cyberattacks on government networks and critical infrastructure - that poses a direct threat to national security, according to those who testified at a Senate hearing this week.

PayPal to Hire Dozens of Cryptocurrency Security Experts

Dan Gunderman  •  August 4, 2021

PayPal plans to hire more than 100 cryptocurrency experts, including those with expertise in compliance and anti-money laundering, as the online payments service expands its digital money transferring service and adds a "super app" wallet.

Chinese APT Groups Targeted Asian Telecoms

Dan Gunderman  •  August 3, 2021

Chinese APT groups compromised networks of telecom providers across Southeast Asia in an effort to harvest customers' sensitive communications, according to Cybereason. As in other Chinese cyberattacks, these APT campaigns exploited flaws in Microsoft Exchange servers.

NSA Reminder: Beware of Public Wi-Fi

Dan Gunderman  •  August 2, 2021

Teleworking U.S. national security employees are putting sensitive data at risk if they use public Wi-Fi networks without using a virtual private network to encrypt the traffic, the National Security Agency notes in a new advisory.

NIST Works to Create AI Risk Management Framework

Dan Gunderman  •  July 31, 2021

Citing a need to secure artificial intelligence technologies, NIST is working to create risk management guidance around the use of AI and machine learning, the agency has announced. NIST is seeking feedback to address governance challenges.

Patching Woes: Most Frequently Exploited CVEs Listed

Dan Gunderman  •  July 30, 2021

A joint cybersecurity advisory issued by several agencies this week highlighting the ongoing exploits of longstanding software vulnerabilities illustrates the woeful state of patch management, security experts say.

What Can Be Done to Enhance Electrical Grid Security?

Dan Gunderman  •  July 29, 2021

The lack of adequate security features in critical electric grid equipment that's made in other nations poses a serious U.S. cybersecurity threat, federal officials said this week. Supply chain attacks could take down the grid and result in a lengthy recovery period, they told Congress.

Experts Testify on Pipeline Cybersecurity Measures

Dan Gunderman  •  July 27, 2021

At a Senate hearing on pipeline cybersecurity, leaders from several federal agencies briefed lawmakers on the roles regulators can play in the aftermath of the Colonial Pipeline attack. Lawmakers urged the agencies to "flatten the bureaucracy" to improve relationships with companies that support pipelines.