Latest

Cybercrime

How BreachForums' 'Pompompurin' Led the FBI to His Home

David Perera  •  March 24, 2023

The alleged administrator of criminal online forum BreachForums may have thought he took steps to hide his real identity, but instead he left a trail of digital breadcrumbs that led to his arrest and prosecution, shows information unsealed in federal court.

Cyberwarfare / Nation-State Attacks

US Sends Cyber Team to Aid Albania's Cyber Defenses

Mihir Bagwe  •  March 24, 2023

The United States sent its top cyber offensive team to NATO ally Albania to help secure the nation's critical infrastructure networks. The Cyber National Mission Force helped find cyberthreats and vulnerabilities on networks likely targeted last year by Iranian threat actors.

Governance & Risk Management

Device Maker Zoll Facing 7 Lawsuits in Wake of Breach

Marianne Kolbasuk McGee  •  March 24, 2023

Medical device maker Zoll Medical is facing at least seven proposed class action lawsuits filed since it revealed two weeks ago that the data of 1 million individuals had been caught up in a hacking incident involving the company's internal network.

Security Operations

How a Security Command Center Simplifies the Data Deluge

Suparna Goswami  •  March 24, 2023

How does a security command center help reduce false positives and improve visibility? Anil Aleppy, associate director, architecture and solutions with Datametica, and Abdul Muneem, director with Brio Technologies, discuss how to manage all threats and vulnerabilities in one command center.

►

Standards, Regulations & Compliance

How UIDAI Is Securing Aadhaar Data

Suparna Goswami  •  March 24, 2023

From being in the news about its data being hacked to being hailed as one of the big identity initiatives globally, Aadhaar has indeed come a long way. ISMG caught up with Sumnesh Joshi, deputy director general of UIDAI, to discuss the initiatives the authority has taken to change its perception.

►

Cyberwarfare / Nation-State Attacks

ISMG Editors: What's Next in Russia's Cyber War?

Anna Delaney  •  March 24, 2023

In the latest weekly update, ISMG editors discuss how Russia's invasion of Ukraine upended the cybercrime ecosystem, a lawsuit against a U.S. cardiovascular clinic that seeks a long list of security improvements, and the latest endpoint protection technology trends in the Gartner Magic Quadrant.

►

Business Continuity Management / Disaster Recovery

Empowering a Cyber-Resilient Enterprise

Brian Pereira  •  March 24, 2023

The increasing volume, frequency and sophistication of cyberattacks has made cyber resiliency a top priority for security leaders. But there are certain roadblocks to overcome before an organization can be cyber resilient, advise Samir Mishra and Navin Mehra of Cisco.

Cyberwarfare / Nation-State Attacks

SideCopy APT Targets India's Premier Defense Research Agency

Jayant Chakravarti  •  March 23, 2023

Security researchers uncovered a Pakistani cyberespionage group employing fresh tactics to target workers at India's Defense Research and Development Organization and steal sensitive military secrets. A new campaign uses a PowerPoint file containing information about the India-developed K-4 missile.

Blockchain & Cryptocurrency

Cryptohack Roundup: BitPay, Euler Finance, Gala Games

Rashmi Ramesh  •  March 23, 2023

Every week, ISMG rounds up cybersecurity incidents in the world of digital assets. In focus between March 17 and 23: The New York State Department of Financial Services reminds BitPay that regulations exist. Also, Euler Finance, Gala Games, BitGo, ZenGo, General Bytes, Bitzlato and ParaSpace.

Cyber Insurance

Lawmakers Weigh Laws Proposed in Biden's Cyber Strategy

Cal Harrison  •  March 23, 2023

Members of a U.S. House subcommittee got their first look at the Biden administration's new national cybersecurity strategy and quizzed the White House cybersecurity director on the timeline, proposed regulations and incentives for private businesses.

Cybercrime

Report: Threat Landscape Growing Scarier for Healthcare

Marianne Kolbasuk McGee  •  March 23, 2023

Threats that traditionally menaced other industries - including synthetic accounts and abuse of IT product platforms - are emerging worries for the healthcare sector, warns an industry report. Other experts also predict a similar evolution among criminal activities affecting the healthcare sector.

Critical Infrastructure Security

US Officials Urged to Examine Chinese Risk to Electric Grid

Michael Novinson  •  March 23, 2023

Utility companies have increasingly refrained from purchasing large power transformers from China given greater awareness of the security risks. Lawmakers sparred with the Energy Department's cybersecurity leader over how much of the electric grid contains components manufactured in China.