Content by Mathew J. Schwartz

Cops' Genesis Market Seizure: How the Cookie Market Crumbled

Mathew J. Schwartz  •  May 3, 2023

An international police operation last month seized Genesis, the largest market for stolen browser cookies, online fingerprints and other types of credentials used for account takeover. Cybersecurity expert John Fokker, whose team at Trellix assisted police, shares insights from the takedown.

Threat Response: SOC Analysts Prepare for an Uphill Battle

Mathew J. Schwartz  •  May 3, 2023

The speed at which we're seeing ransomware attacks has increased dramatically in the last couple of years - and it's only getting faster, warns Mary O'Brien, general manager, IBM Security. Ransomware deployment has increased from three months to four days on average.

How to Simplify the Move to Software-Defined Networking

Mathew J. Schwartz  •  April 28, 2023

The way we secure workloads today is vastly different due to remote work and the move to the cloud following the pandemic. More modern SASE solutions such as zero trust have been adopted, and organizations are moving from legacy such as MPLS to software-defined networking and cloud-based solutions.

The #1 Cybersecurity Strategy - And Why to Use It in 2023

Mathew J. Schwartz  •  April 26, 2023

The increase in attack vectors and new threats has prompted companies to invest heavily in cybersecurity tools. But CISOs struggle with managing siloed products that do not integrate with each other. Consolidation of security architecture is a priority for CISOs, said Check Point's Itai Greenberg.

RSA Cryptographers' Panel Talks Quantum Computing and AI

Mathew J. Schwartz  •  April 25, 2023

Quantum computers and chatbots, as well as hype around blockchain, were topics discussed during The Cryptographers' Panel at RSA Conference 2023. For anyone who needs to keep data secure for more than 30 years, advice from panelist Adi Shamir was simple: Don't rely on public key cryptography.

Electronic Pearl Harbor Prophet Issues Metaverse Warning

Mathew J. Schwartz  •  April 25, 2023

Testifying before Congress in 1991, Winn Schwartau coined the term "electronic Pearl Harbor." The chief visionary officer of The Security Awareness Company stands by his prediction, pointing to a mounting number of attacks. Now the world needs to worry about security and privacy in the metaverse.

SBOM: Will It Actually Help Manage Supply Chain Risk?

Mathew J. Schwartz  •  April 25, 2023

How do we manage the risk of global supply chain attacks? Will a shift in cybersecurity liability to software providers help improve the problems of software vulnerabilities? Adam Isles, principal of The Chertoff Group, said mandating software bill of materials measures has its own challenges.

Ukraine Facing Phishing Attacks, Information Operations

Mathew J. Schwartz  •  April 19, 2023

The Russian government continues to use an array of phishing attacks and information operations - including hack-and-leak efforts and running hacktivist groups such as CyberArmyofRussia - to support its illegal invasion of Ukraine, Google researchers report.

WhatsApp, Signal Preview UK Exit Over Threat to Encryption

Akshaya Asokan , David Perera , Mathew J. Schwartz  •  April 18, 2023

Major internet chat platforms are urging the United Kingdom government to reconsider a bill intended to decrease exposure to online harms but which opponents say would open the door to massive government surveillance. Proponents say online platforms should have a duty of care to protect users.

LockBit Ransomware Tests Taking a Bite Out of Apple Users

Mathew J. Schwartz  •  April 17, 2023

Apple users: Don't fear newly discovered samples of LockBit ransomware designed to target newer macOS devices. Researchers say the still-in-development code, tied to no known in-the-wild attacks, contains numerous errors, leaving it unable to execute.

Feds Describe Intelligence Leak Probe as Criminal Matter

Mathew J. Schwartz  •  April 14, 2023

The arrest of a low-level U.S. military IT specialist, Jack Teixeira, on suspicion of leaking highly classified documents begs the question of why he had access to them in the first place. The national guard airman has been charged with inappropriately retaining and sharing intelligence.

Cybercrime: Ransomware Hits and Initial Access Listings Grow

Mathew J. Schwartz  •  April 11, 2023

The cybercrime economy appears to remain alive and well: Compared to last year, researchers report seeing an increase in the number of known ransomware victims as well as initial access listings, which facilitate such attacks. The impact the takedowns of BreachForums and Genesis remains to be seen.

White House Probes Classified Intelligence 'Discord Leaks'

Mathew J. Schwartz  •  April 10, 2023

The Biden administration is probing how highly classified military and intelligence documents detailing national security secrets came to be leaked via Discord servers and social media. Experts say the leaked documents appear to be genuine, although some have been crudely doctored.

Law Enforcement Lures Cybercriminals With Fake DDoS Services

Mathew J. Schwartz  •  April 6, 2023

Warning to criminals: Could that cybercrime service you're about to access really be a sting by law enforcement agents who are waiting to identify and arrest you? That's the message from British law enforcement agents, who say they're running multiple DDoS-for-hire sites as criminal honeypots.

Police Seize Hacker Bazaar Genesis Market

Mihir Bagwe , David Perera , Mathew J. Schwartz  •  April 5, 2023

The FBI and other national police are touting an operation that dismantled Genesis Market, a marketplace used by ransomware hackers and bank thieves to gain ongoing access to victims' computers. Genesis Market since 2018 offered access to more than 1.5 million compromised computers around the world.