Latest

Cyberwarfare / Nation-State Attacks

Election Experts Still Demanding More Federal Cyber Support

Chris Riotta  •  September 11, 2024

Election security experts told Information Security Media Group the United States continues to lack adequate federal funding and resources to support state and local election information technology security efforts amid heightened global tensions and an ever-expanding threat landscape.

Cyberwarfare / Nation-State Attacks

French Cyber Agency Warns of APT28 Hacks Against Think Tanks

Akshaya Asokan  •  September 11, 2024

Russian state hackers are targeting think tanks studying strategic interests and the defense sector, warned the French cyber agency. A hacking group that officially is Unit 26165 of the Russian Main Intelligence Directorate appears to be Russia's most prolific targeter of think tanks.

Fraud Management & Cybercrime

NoName Apparently Allies With RansomHub Operation

Prajeet Nair  •  September 11, 2024

Up-and-coming online criminal extortion group RansomHub appears to have a new affiliate - NoName, a midtier actor whose main claim to fame so far has been impersonating the LockBit ransomware-as-a-service operation. NoName is known for exploiting years-old vulnerabilities.

►

Finance & Banking

Geopolitical Tensions Fuel Growth in Cross-Border Fraud

Suparna Goswami  •  September 11, 2024

Geopolitical tensions have heightened cross-border fraud, with criminals exploiting technological advances and regulatory gaps between countries. Shilpa Arora, head of anti-financial crime products at ACAMS, discusses ways banks can tackle cross-border fraud schemes.

►

CISO Trainings

CyberEdBoard Profiles in Leadership: George Chacko

Marianne Kolbasuk McGee  •  September 11, 2024

George Chacko, executive director of information security and compliance at New York Blood Center, shares his journey in cybersecurity, the challenges for nonprofit organizations with limited budgets and resources, and collaborative initiatives to improve security programs.

Governance & Risk Management

Mental Health Records Database Found Exposed on Web

Marianne Kolbasuk McGee  •  September 11, 2024

An AI-powered virtual care provider's unsecured database allegedly exposed thousands of sensitive mental health and substance abuse treatment records between patients and their counselors on the internet - where they were available to anyone, said the security researcher who discovered the trove.

Governance & Risk Management

Bashing Windows Bugs, Take 2: Microsoft Restores Nixed Fixes

Mathew J. Schwartz  •  September 11, 2024

Microsoft has issued a slew of software updates to patch numerous flaws, including three zero-day vulnerabilities that are already being exploited via in-the-wild attacks. Another fix addresses a prior update that inadvertently reintroduced vulnerable components to Windows 10.

Cyberwarfare / Nation-State Attacks

Polish Government Disrupts Russian and Belarusian Hacks

Akshaya Asokan  •  September 10, 2024

The Polish government said Monday it faces an onslaught of cyberattacks from Russian and Belarusian security agencies intent on cyberespionage and blackmail. Poland is in the midst of a "de facto cyberwar," said Deputy Prime Minister Krzysztof Gawkowski.

Endpoint Security

RAM Signals Expose Air-Gapped Networks to Attacks

Prajeet Nair  •  September 10, 2024

A novel side-channel attack exploits radio signals emitted by random access memory in air-gapped computers, presenting a new threat to highly secure networks. One of the most effective ways to mitigate the risk is to cover sensitive machines with Faraday shielding.

Geo Focus: The United Kingdom

UK ICO and NCA to Collaborate on Cyber Incident Preparedness

Akshaya Asokan  •  September 10, 2024

The British data protection authority and national law enforcement agency signed onto a cyber risk information-swapping agreement. The National Crime Agency and the Information Commissioner's Office will share cyberthreat assessments and information about incidents.

►

Healthcare

CyberEdBoard Insights: Phil Englert and Errol Weiss

Marianne Kolbasuk McGee  •  September 10, 2024

Healthcare organizations often face obstacles in sharing cybersecurity information. Phil Englert and Errol Weiss from Health-ISAC advocate for shifting the focus from legal risks to business risks, improving incident response and building resilience through collaboration and transparency.

3rd Party Risk Management

Commerce Unveils 'Scale' Tool to Tackle Supply Chain Risks

Chris Riotta  •  September 10, 2024

Commerce Secretary Gina Raimondo unveiled a new data tool Tuesday called Scale. It assesses a wide range of factors affecting supply chains to provide a detailed analysis of potential risks and challenges, from labor shortages to climate challenges and geopolitical tensions.