Soumik Ghosh

Former Assistant Editor, Asia

Prior to his stint at ISMG, Ghosh worked with IDG and wrote for CIO, CSO Online and Computerworld, in addition to anchoring CSO Alert, a security news bulletin. He was also a language and process trainer at [24]7.ai. Ghosh has a degree in broadcast journalism from the Indian Institute of Journalism & New Media.

Russia Finalizes Draft of Digital Currency Laws

Soumik Ghosh • February 22, 2022

The use of digital currency as legal tender continues to be prohibited in Russia, according to the Russian Ministry of Finance's draft of digital currency law, even as Russia imposes heavy regulations on crypto exchanges. Also, the Bank of Russia is testing the platform for the country's CBDC.

How Chinese, Russian Threat Actors Changed Tactics in 2021

Soumik Ghosh • February 21, 2022

In 2021, there was a spike in cybercrime, and the focus changed for threat actors from several countries, particularly Russia and China. Cybersecurity firm CrowdStrike provides an overview of the changes, analyzes the takedown of Russian threat actor REvil and adds to its list of adversaries.

India’s Annual Budget Calls for 30% Tax on Cryptocurrency

Soumik Ghosh • February 3, 2022

India’s Union Budget 2022 resolves some of the uncertainty around the legitimacy of crypto assets. While crypto assets will not be considered as currency, Finance Minister Nirmala Sitharaman announced that the Reserve Bank of India will be launching a blockchain-based digital rupee this year.

Rust-Coded Malware Key Factor in BlackCat's Meteoric Rise

Soumik Ghosh • January 31, 2022

In just a month, the BlackCat cybercrime group has carried out high-impact ransomware attacks on international organizations and risen to seventh place in Unit 42's ranking of global ransomware groups. A key factor, researchers say: the use of the Rust language for coding its malware.

3 Weeks, 6 Bugs: Experts Analyze, Advise on WordPress Flaws

Soumik Ghosh • January 21, 2022

Since Jan. 1, security researchers have identified six vulnerabilities affecting hundreds of thousands of WordPress websites. Cybersecurity experts say that the ubiquity of the content management platform makes it a prime target for attackers, and they offer holistic security solutions.

How China's Algorithm Regulation Affects Businesses

Soumik Ghosh • January 10, 2022

The Cyberspace Administration of China's new regulation for companies that offer algorithm-based recommendation services has been met with caution. Some statements in the regulation, which is to go into effect on March 1, are vague enough to be abused, and confidentiality is also a concern.

Google, Facebook Fined by French Data Protection Agency

Soumik Ghosh • January 7, 2022

French data protection agency CNIL has imposed fines of $170 million on Google and $66 million on Facebook for not complying with cookie regulations. The watchdog has ruled that the firms should make opting out of cookies as simple as opting in, or pay a $113,000 fine for each day of delay.

Portugal's Major News Websites Remain Offline After Attacks

Soumik Ghosh • January 5, 2022

The websites of Expresso and SIC, Portugal's largest news publications, remain offline for a third day. A ransomware attack on the parent company Impresa Group was carried out by the Lapsus$ ransomware group - a relatively new bad actor that has made three high-impact attacks in less than a month.

Indian Medical Association's Twitter Account Compromised

Soumik Ghosh • January 3, 2022

In a series of crypto giveaway scams, cybercriminals targeted the official Twitter accounts of the Indian Medical Association, the Indian Council of World Affairs and Mann Deshi bank. The incidents highlight why social media accounts need better access management strategies.

Microsoft Teams’ New Feature Sparks Security Concerns

Soumik Ghosh • December 6, 2021

A new Microsoft Teams feature makes it possible for employees to communicate with people outside the organization and vice versa through Teams. Security researchers believe the new update potentially opens up avenues for threat actors to target organizations through phishing attacks.

Deepfakes, Voice Impersonators Used in Vishing-as-a-Service

Soumik Ghosh • December 3, 2021

Advanced voice impersonation and deepfake technologies are giving rise to cybercrime groups that offer Vishing-as-a-Service, security researchers say. Vishing is proving to be successful in tricking victims and bypassing voice authorization mechanisms.

Report: Aberebot-2.0 Hits Banking Apps and Crypto Wallets

Soumik Ghosh • December 1, 2021

A new variant of the Aberebot banking Trojan has been discovered by Cyble's researchers. Christened Aberebot-2.0, the latest malware version not only uses more advanced spying capabilities, it also has increased its target list to 213 banking apps and nine crypto wallets in 22 countries.

Microsoft Says It Mitigated Largest-Ever DDoS Attack

Soumik Ghosh • October 13, 2021

Microsoft disclosed that it mitigated a 2.4 Tbps DDoS attack, which was 140% higher in scale than any previously recorded network volumetric event on Azure. The firm and some security experts say that attacks of this magnitude could wreak havoc on targeted companies and are difficult to mitigate.

Tamil Nadu Ransomware Attack Raises Resiliency Questions

Soumik Ghosh • September 24, 2021

The ransomware attack on Tamil Nadu's Public Department puts the spotlight on the preparedness to identify and stave off attacks. Some security experts say outdated servers, lack of advanced security measures and inadequate cyber laws make state government institutions vulnerable.

No Bounty for Bug Hunters in India

Soumik Ghosh • September 20, 2021

While there is no dearth of talent among Indian bug bounty hunters, hurdles such as lack of trust, payment disputes, cost, unethical practices and lack of regulatory laws deter the growth of the bug bounty programs in the country, according to some experts.