Latest

Cybercrime

LockBit and Evil Corp Targeted in Anti-Ransomware Crackdown

Akshaya Asokan , David Perera , Mathew J. Schwartz  •  October 1, 2024

Law enforcement from the United States, United Kingdom, France and Spain made a coordinated announcement Tuesday of further arrests, indictments, sanctions and server takedowns targeting the Russian cybercriminal underground including strikes against the LockBit ransomware-as-a-service operation.

Fraud Management & Cybercrime

White House Pledges Major Deliverables at Ransomware Summit

Chris Riotta  •  September 30, 2024

The International Counter Ransomware Initiative is kicking off a four-day summit Monday in Washington that aims to coordinate the group’s 68 member nations around a series of global efforts designed to enhance information sharing and develop strategies to deter ransomware attacks.

►

CISO Trainings

CyberEdBoard Profiles in Leadership: Shervin Evans

Anna Delaney  •  September 30, 2024

Shervin Evans began his career as a programmer but he always knew his future was in cybersecurity. Now, 20 years later as an information security officer, he evangelizes about cybersecurity to employees in his organization, his family and the broader community.

Identity & Access Management

NIST Calls for Major Overhaul in Typical Password Practices

Chris Riotta  •  September 26, 2024

The National Institute of Standards and Technology is calling for longer, randomized passwords instead of memorized phrases containing combinations of upper and lowercase letters in new guidance that aims to modernize current password practices across the public and private sectors.

Cybercrime

Octo2 Malware Masquerades as Popular Apps

Prajeet Nair  •  September 24, 2024

A new version of the Octo Android malware is spreading across Europe, posing as legitimate apps such as NordVPN and Google Chrome. The latest iteration includes advanced anti-detection mechanisms and a domain generation algorithm for command-and-control communication.

Security Operations

Startup Torq Secures $70M to Advance Hyperautomation With AI

Michael Novinson  •  September 24, 2024

With $70 million in fresh capital, Torq is doubling down on its hyperautomation initiatives. The funding will enhance generative AI technologies that streamline security operations and provide autonomous threat investigation, alongside plans for broader U.S. and European market penetration.

Cybercrime

Telegram Pledges Closer Cooperation With Police

David Perera  •  September 23, 2024

Embattled Telegram CEO Pavel Durov signaled a more cooperative relationship with law enforcement, telling users Monday the messaging service will provide IP addresses and phone numbers "in response to valid legal requests." Durov faces criminal charges in France.

►

Fraud Management & Cybercrime

Should UK Cut Fraud Reimbursement Cap for Smaller Banks?

Suparna Goswami  •  September 13, 2024

The U.K. Payment Systems Regulator wants to reduce the reimbursement cap on authorized push payment fraud to ease the burden on smaller banks. That's unacceptable and would undermine the financial system's integrity, said Jonathan Frost, board member at the Stop Scams Alliance.

Cybercrime

Breach Roundup: Mexico in Hacker Spotlight

Anviksha More  •  September 12, 2024

This week, cyberthreats rising in Mexico; FBI warned of BEC scams; U.K. police arrested hacking suspect; Avis, Slim CD, Medicare and Fortinet disclosed breaches; Highline public schools reopened after cyberattack; a critical flaw was found in WHOIS; and Konni upped attacks on Russia, South Korea.

Fraud Management & Cybercrime

NoName Apparently Allies With RansomHub Operation

Prajeet Nair  •  September 11, 2024

Up-and-coming online criminal extortion group RansomHub appears to have a new affiliate - NoName, a midtier actor whose main claim to fame so far has been impersonating the LockBit ransomware-as-a-service operation. NoName is known for exploiting years-old vulnerabilities.

Governance & Risk Management

ColorTokens Strengthens Zero Trust With PureID Acquisition

Michael Novinson  •  September 11, 2024

ColorTokens purchased PureID, expanding its zero trust framework with identity-based segmentation for cloud and hybrid environments. The acquisition focuses on securing cloud applications, microservices and APIs through advanced identity-based authentication.

Cyber Insurance

Moody's Ratings: Cyber Insurance Competition Up, Prices Down

Mathew J. Schwartz  •  September 6, 2024

Competition has been increasing in the cyber insurance market, leading to a "moderate" decrease in insurance premiums after several years of rate increases. So reports Moody's Ratings, which said that the changes were driven by an influx of new players that is likely to continue.